Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

96 results

CVE-2024-25503

eqstlab/cve-2024-25503

Cross-Site Scripting vulnerability in Advanced REST Client v.17.0.9 exploit

exploitationinformation-gatheringpenetration-testing+3

1 year ago

CVE-2026-24055-OAuth-Langfuse

imzanggg/cve-2026-24055-oauth-langfuse

api-security-testingeducationexploitation+3

12 days ago

CVE-2026-55255-Lab

rootdirective-sec/cve-2026-55255-lab

api-security-testingeducationlabs-practice+3

1 month ago

CVE-2026-42647-Lab

rootdirective-sec/cve-2026-42647-lab

educationlabs-practicepenetration-testing+2

2 months ago

CVE-2024-30051

devianntsec/cve-2024-30051

Master's Thesis research on CVE-2024-30051 (Windows DWM Heap Overflow). Features a high-reliability exploit with automated heap spray optimization,…

binary-exploitationeducationexploitation+6

13 months ago

owasp-threat-dragon-desktop

mike-goodwin/owasp-threat-dragon-desktop

An installable desktop variant of OWASP Threat Dragon

educationvulnerability-analysis

5916 months ago

CVE-2023-27326

impalabs/cve-2023-27326

VM Escape for Parallels Desktop <18.1.1

binary-exploitationcontainer-escapeexploitation+3

1712 years ago

BlueGate

ioncodes/bluegate

PoC for the Remote Desktop Gateway vulnerability - CVE-2020-0609 & CVE-2020-0610

exploitationnetwork-securitypenetration-testing+2

786 years ago

windbg-mcp

gengstah/windbg-mcp

An MCP (Model Context Protocol) server that turns all pybag Windows debugger functions into native MCP tools. It lets MCP-compatible clients (Claude…

binary-analysisdebuggersdynamic-analysis-sandboxing+7

873 months ago

CVE-2020-10665

spaceraccoon/cve-2020-10665

POC for CVE-2020-10665 Docker Desktop Local Privilege Escalation

binary-exploitationcontainer-securityexploitation+2

526 years ago

git-lfs-RCE-exploit-CVE-2020-27955

exploitbox/git-lfs-rce-exploit-cve-2020-27955

Git-lfs RCE exploit CVE-2020-27955 - tested on Windows on: git, gh cli, GitHub Desktop, Visual Studio, SourceTree etc.

exploitationpayload-developmentpenetration-testing+3

305 years ago

CVE-2025-9074-PoC

bridgeralderson/cve-2025-9074-poc

A vulnerability has been identified in Docker Desktop. A remote attacker could exploit this vulnerability to trigger security restriction bypass on…

container-escapeexploitationpenetration-testing+3

508 months ago

CVE-2024-27460

xct/cve-2024-27460

Plantronics Desktop Hub LPE

binary-exploitationexploitationpenetration-testing+2

372 years ago

CVE-2023-27326

malwareman007/cve-2023-27326

VM Escape for Parallels Desktop <18.1.1

binary-exploitationexploitationexploit-frameworks+4

373 years ago

CVE-2024-38077

mrmtwoj/cve-2024-38077

CVE-2024-38077: Remote Code Execution Vulnerability in Windows Remote Desktop Licensing Service

educationexploitationpenetration-testing+2

181 year ago

parallels-file-move-privesc

kn32/parallels-file-move-privesc

Parallels Desktop privilege escalation - CVE-2023-50226 / ZDI-CAN-21227

binary-exploitationexploitationpenetration-testing+2

92 years ago

FreeRDP-Out-of-Bounds-Read-CVE-2024-32459-

absholi7ly/freerdp-out-of-bounds-read-cve-2024-32459-

The FreeRDP - Out-of-Bounds Read (CVE-2024-32459) vulnerability concerns FreeRDP, a free implementation of Remote Desktop Protocol. FreeRDP-based…

binary-analysisexploitationinformation-gathering+2

42 years ago

CVE-2023-49314

louiselalanne/cve-2023-49314

Asana Desktop 2.1.0 on macOS allows code injection because of specific Electron Fuses. There is inadequate protection against code injection through…

code-analysisexploitationpenetration-testing+3

72 years ago

Previous12 3 4 5 6 Next