Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
29 results
angularjs-poc-cve-2022-25869 preview

angularjs-poc-cve-2022-25869

GitHubneverendingsupport/angularjs-poc-cve-2022-25869

A minimal reproduction of an AngularJS <textarea> XSS vulnerability on IE (tracked as CVE-2022-25869).

educationexploitationvulnerability-analysis+2
1
1 year ago
Conflicker_analysis_scripts preview

Conflicker_analysis_scripts

GitHubthunderstrike9090/conflicker_analysis_scripts

Scripts to analyze conflicker worm which exploits famous netapi vulnerability (CVE-2008-4250) i.e MS08-067

binary-analysisexploitationmalware-analysis+3
17 years ago
featherduster preview

featherduster

GitHubnccgroup/featherduster

An automated, modular cryptanalysis tool; i.e., a Weapon of Math Destruction

cryptographyencryption-decryption-toolsexploitation+2
1.1k4 years ago
CVE-2020-0674-Exploit preview

CVE-2020-0674-Exploit

GitHubmaxpl0it/cve-2020-0674-exploit

This is an exploit for CVE-2020-0674 that runs on the x64 version of IE 8, 9, 10, and 11 on Windows 7.

binary-exploitationexploitationpayload-generation+3
2226 years ago
TriforceOpenBSDFuzzer preview

TriforceOpenBSDFuzzer

GitHubnccgroup/triforceopenbsdfuzzer

System call fuzzing of OpenBSD amd64 using TriforceAFL (i.e. AFL and QEMU)

dynamic-analysis-sandboxingfuzzingvulnerability-analysis
478 years ago
CVE-2018-8174 preview

CVE-2018-8174

GitHubsyfi/cve-2018-8174

MS Word MS WordPad via IE VBS Engine RCE

exploitationpayload-generationpenetration-testing+3
68 years ago
LLM-MCP-Security-Field-Guide preview

LLM-MCP-Security-Field-Guide

GitHubpathakabhi24/llm-mcp-security-field-guide

The most comprehensive LLM + MCP security guide i.e. OWASP aligned, real CVEs, actionable checklists

ai-securitycurated-resourceseducation+7
34 months ago
CVE-2022-22965_Spring4Shell preview

CVE-2022-22965_Spring4Shell

GitHubludovicpatho/cve-2022-22965_spring4shell

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit…

code-analysisexploitationpayload-development+3
24 years ago
CVE-2024-39943-Poc preview

CVE-2024-39943-Poc

GitHubheyholiday067/cve-2024-39943-poc

CVE-2024-39943 rejetto HFS (aka HTTP File Server) 3 before 0.52.10 on Linux, UNIX, and macOS allows OS command execution by remote authenticated…

command-and-controlexploitationpenetration-testing+2
2 years ago
lava preview

lava

GitHubpanda-re/lava

LAVA: Large-scale Automated Vulnerability Addition

binary-analysiseducationfuzzing+2
4171 month ago
Kam1n0-Community preview

Kam1n0-Community

GitHubmcgill-dmas/kam1n0-community

Scalable assembly analysis platform for indexing, clone search, and executable classification using static, dynamic, and machine-learning techniques…

binary-analysiscode-analysisfuzzing+3
6273 years ago
CVE-2024-21413 preview

CVE-2024-21413

GitHubcmnatic/cve-2024-21413

CVE-2024-21413 PoC for THM Lab

ctfeducationemail-security+4
2752 years ago
imagemagick-lfi-poc preview

imagemagick-lfi-poc

GitHubsybil-scan/imagemagick-lfi-poc

ImageMagick LFI PoC [CVE-2022-44268]

exploitationinformation-gatheringpenetration-testing+2
532 years ago
CVE-2020-11022-CVE-2020-11023 preview

CVE-2020-11022-CVE-2020-11023

GitHub0xaj2k/cve-2020-11022-cve-2020-11023

Little thing put together quickly to demonstrate this CVE

educationexploitationphishing-tools+2
353 years ago
EnumJavaLibs preview

EnumJavaLibs

GitHubredtimmy/enumjavalibs

Remote Java classpath enumeration via deserialization

exploitationinformation-gatheringpayload-generation+3
223 years ago
NotEnough preview

NotEnough

GitHubcaoweiquan322/notenough

This tool calculates tricky canonical huffman histogram for CVE-2023-4863.

binary-exploitationexploitationfuzzing+3
252 years ago
PoC preview

PoC

GitHubekultek/poc

Leveraging CVE-2018-19788 without root shells

exploitationpenetration-testingpost-exploitation+3
197 years ago
CVE-2025-64512 preview

CVE-2025-64512

GitHubdodgenefoli/cve-2025-64512
exploitationpenetration-testingvulnerability-analysis+2
11 days ago
Previous12Next