Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

2554 results

CVE-NetScalerFileSystemCheck

danielwep/cve-netscalerfilesystemcheck

This script checks the Citrix Netscaler if it has been compromised by CVE-2019-19781 attacks and collects all file system information

digital-forensicsforensicsincident-response+3

6 years ago

log4j-fix-CVE-2021-44228

chandru-gunasekaran/log4j-fix-cve-2021-44228

Windows Batch Scrip to Fix the log4j-issue-CVE-2021-44228

general-purpose-utilitiesmisconfigurationscripting-automation+2

24 years ago

how-to-check-patch-secure-log4j-CVE-2021-44228

anuvindhs/how-to-check-patch-secure-log4j-cve-2021-44228

A one-stop repo/ information hub for all log4j vulnerability-related information.

curated-resourceseducationinformation-gathering+3

24 years ago

cve-2025-32711

daryllundy/cve-2025-32711

PowerShell-based detection and remediation toolkit for CVE-2025-32711 (EchoLeak), a critical zero-click AI command injection vulnerability in…

ai-securitycloud-securityconfiguration-auditing+4

31 year ago

agentic-workflow-injection

sushant-me/agentic-workflow-injection

Reproducible vulnerable and fixed GitHub Actions fixtures for agentic workflow injection (CVE-2026-44246), with measured detector coverage and…

ai-securitydevsecopseducation+4

5 days ago

React2P4IM0Nshell

mammaninelsond/react2p4im0nshell

💥Extension Tool para Auditoría y Explotación avanzada RCE/Source Leak/Dos (CVE-2025-55182/83/84) para entornos Next.js y React Server Components…

educationexploit-frameworksinformation-gathering+6

310 months ago

hikvision_probe

aengussong/hikvision_probe

Identify hikvision ip and probe for cve-s (CVE-2017-7921, CVE-2022-28171, CVE-2021-36260)

exploitationinformation-gatheringiot-security+2

31 year ago

CVE-2024-8856

jenderal92/cve-2024-8856

Scans WordPress sites for WP Time Capsule plugin CVE-2024-8856, detecting versions below 1.22.22 and logging vulnerable targets to a file.

information-gatheringreconnaissancevulnerability-analysis+2

25 months ago

flight-sql-jdbc-driver-cve-2026-54512

avergnaud/flight-sql-jdbc-driver-cve-2026-54512

Repository referencing CVE-2026-54512 in the Flight SQL JDBC driver, likely containing vulnerability details or proof-of-concept material.

educationexploitationpapers-research+2

1 month ago

CVE-2025-52691-poc

rimbadirgantara/cve-2025-52691-poc

Proof-of-concept exploit for CVE-2025-52691: unauthenticated arbitrary file upload leading to RCE in SmarterMail. Includes vulnerability scanner,…

educationexploitationpayload-generation+5

310 months ago

CVE-2022-40140-SCANNER

ipsbruno/cve-2022-40140-scanner

A Shodan hunter for CVE-2022-40140

exploitationinformation-gatheringosint+2

23 years ago

cve-2025-3248-exploit

drackyjr/cve-2025-3248-exploit

A comprehensive Python exploitation framework for testing and demonstrating CVE-2025-3248, a critical unauthenticated remote code execution…

code-analysiscommand-and-controleducation+8

311 months ago

CVE-2025-59718-Fortinet-Poc

moften/cve-2025-59718-fortinet-poc

PoC para determinar si Fortinet es vulnerable a CVE-2025-59718 / CVE-2025-59719

exploitationinformation-gatheringnetwork-security+3

310 months ago

CVE-2026-96451

nxploited/cve-2026-96451

WordPress Ultimate Member plugin <= 2.13.1 - Privilege Escalation vulnerability

exploitationpassword-attackspenetration-testing+5

1 month ago

hikvision_brute

nanotrash/hikvision_brute

Brute Hikvision CAMS with CVE-2021-36260 Exploit

exploitationiot-securitypassword-attacks+3

33 years ago

CVE-2025-13780

themehackers/cve-2025-13780

A comprehensive vulnerability scanner for CVE-2025-13780, a Remote Code Execution (RCE) vulnerability in pgAdmin 4 versions ≤ 8.14.

exploitationinformation-gatheringpenetration-testing+3

310 months ago

CVE-2026-18143

murrez/cve-2026-18143

Python PoC that checks and exploits CVE-2026-18143, an unauthenticated arbitrary file upload in Addify Request a Quote for WooCommerce ≤ 2.9.2 via…

exploitationpayload-developmentpenetration-testing+5

1 month ago

CVE-2025-24132-Scanner

feralthedogg/cve-2025-24132-scanner

mDNS-based AirPlay device discovery tool that scans local networks and tests for CVE-2025-24132 zero-click HTTP RCE vulnerability with a simple GUI…

exploitationinformation-gatheringnetwork-mapping+3

31 year ago

Previous 1…9899100 Next