Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

570 results

burp-alfresco-referer-proxy-cve-2014-9301

ottimo/burp-alfresco-referer-proxy-cve-2014-9301

Burp Suite extension exploiting CVE-2014-9301 in Alfresco Referer Proxy for targeted web application penetration testing.

exploitationpenetration-testingvulnerability-analysis+2

9 years ago

CVE-2024-2054

madan301/cve-2024-2054

Proof-of-concept exploit for CVE-2024-2054, demonstrating insecure deserialization RCE in Artica-Proxy administrative web application. Includes…

educationexploitationpayload-development+3

2 years ago

CVE-2022-45059-demo

martinvks/cve-2022-45059-demo

Interactive demo of CVE-2022-45059 Varnish Cache request smuggling vulnerability. Includes Spring Boot web app, vulnerable proxy, automated victim…

educationexploitationlabs-practice+3

2 years ago

CVE-2021-3019-Lanproxy

qiezi-maozi/cve-2021-3019-lanproxy

Python-based proof-of-concept exploit for CVE-2021-3019 targeting Lanproxy, enabling remote code execution via directory traversal in the web proxy…

exploitationpenetration-testingremote-access-tool+2

5 years ago

sql-global-injector

nu11secur1ty/sql-global-injector

Python-based web crawler and SQL injection vulnerability scanner using dork queries. Supports proxy and automated scanning for security testing.

crawlerinformation-gatheringreconnaissance+2

24 years ago

zaproxy

zaproxy/zaproxy

Open-source web application security scanner for automated vulnerability detection, manual penetration testing, and API security testing with a…

android-securityapi-securityapi-security-testing+15

15.8k12h 10m ago

CVE-2018-11759

immunit/cve-2018-11759

Proof-of-concept exploit for CVE-2018-11759 demonstrating Apache mod_jk access bypass via specially crafted requests to bypass reverse proxy…

exploitationmisconfigurationpenetration-testing+3

397 years ago

AgentCyTE

anantaakotal/agentcyte

Generates reproducible CORE network topologies from XML scenario files for cybersecurity training and experimentation. Provides Web GUI and CLI for…

educationlabs-practicenetwork-security+3

39 months ago

proxy

git-pkgs/proxy

A lightweight caching proxy for package registries.

api-securitycloud-securitydevsecops+2

2111 day ago

Archived

toxy

h2non/toxy

Hackable HTTP proxy for resiliency testing and simulated network conditions

api-security-testingchaos-engineeringnetwork-security+3

2.7k4 years ago

log4jail

mufeedvh/log4jail

A firewall reverse proxy for preventing Log4J (Log4Shell aka CVE-2021-44228) attacks.

ids-ips-evasionpenetration-testingvulnerability-analysis+3

214 years ago

x-stream__xstream_CVE-2021-21345_1-4-15

shoucheng3/x-stream__xstream_cve-2021-21345_1-4-15

Java XML serialization library with a focus on CVE-2021-21345 exploit analysis and deserialization vulnerability testing for web applications.

code-analysisdynamic-code-analysisexploitation+3

1 year ago

cve-2026-49352-poc

covepseng/cve-2026-49352-poc

Exploitability PoC for CVE-2026-49352 (9router Hardcoded JWT Secret Authentication Bypass)

authentication-authorizationeducationexploitation+4

12 months ago

CVE-2015-3224-

n000xy/cve-2015-3224-

CVE-2015-3224

exploitationvulnerability-analysisweb-application-exploitation

5 years ago

CVE-2025-55182

emredavut/cve-2025-55182

Chrome extension and Shodan scanner for detecting and demonstrating RCE vulnerabilities in React Server Components (RSC) and Next.js applications,…

educationexploitationpenetration-testing+3

3149 months ago

CVE-2014-0224

secretnonempty/cve-2014-0224

Go-based MITM exploit demo for OpenSSL CVE-2014-0224 (CCS Injection) targeting RC4-SHA cipher, with server/client proxy setup for testing TLS…

cryptographyexploitationnetwork-security+3

912 years ago

JCEzploit-CVE-2026-48907

cerberusmrxi/jcezploit-cve-2026-48907

Automated RCE exploit for Joomla JCE (CVE-2026-48907) with interactive shell, batch command execution, file download, and proxy support for…

exploitationpenetration-testingred-teaming+3

24 days ago

CVE-2025-55182-golang-PoC

keklick1337/cve-2025-55182-golang-poc

Go-based proof-of-concept for CVE-2025-55182, a critical RCE in React Server Components. Features vulnerability checking, command execution, memory…

command-and-controlexploitationpayload-development+6

69 months ago

Previous12…32 Next