Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

95 results

CVE-2025-55182

mayca369/cve-2025-55182

Demonstrates CVE-2025-55182 RCE exploit in React Server Functions to highlight insecure prototype references in Next.js, with educational simulation…

educationexploitationlabs-practice+3

21 days ago

AllHackingTools

mishakorzik/allhackingtools

All-in-One Hacking Tools For Hackers! And more hacking tools! For termux.

crawlerexploitationhash-analysis+8

6.0k1 month ago

CVE-2026-82539

xernary/cve-2026-82539

Security advisory for TOTOLINK a720r buffer overflow vulnerability

binary-exploitationembedded-systems-securityexploitation+5

41 month ago

CVE-2026-89013

faceless0x7/cve-2026-89013

Python exploit for CVE-2026-89013, an unauthenticated Dolibarr hashp authorization bypass enabling arbitrary file read, with check, list, hunt, read,…

authenticationdata-exfiltrationexploitation+5

61 month ago

CVE-2018-14667_Lab_POC

r4ch1d0/cve-2018-14667_lab_poc

Demonstration of the expression language (EL) injection vulnerability CVE-2018-14667 using the photoalbum lab under Jboss application server

educationexploitationlabs-practice+2

2 months ago

CVE-2026-76569

toanln-cov/cve-2026-76569

Reflected XSS via search GET Parameter in Phoca Download

exploitationpenetration-testingvulnerability-analysis+2

2 months ago

JCEzploit-CVE-2026-48907

cerberusmrxi/jcezploit-cve-2026-48907

Automated RCE exploit for Joomla JCE (CVE-2026-48907) with interactive shell, batch command execution, file download, and proxy support for…

exploitationpenetration-testingred-teaming+3

2 months ago

two-dots-and-a-slash-cve-2026-18907-tecno-hi-browser-download-path-traversal

hunt-benito/two-dots-and-a-slash-cve-2026-18907-tecno-hi-browser-download-path-traversal

Python PoC for CVE-2026-18907 path traversal in TECNO Hi Browser's download handler. Includes malicious HTTP server and naive downloader to…

android-securityexploitationmobile-app-pentesting+4

2 months ago

Cve-2026-39676

okamispade/cve-2026-39676

Version: Download Manager 3.3.5.2 Title: Missing Authorization - Unauthenticated IDOR Exploit

exploitationpenetration-testingvulnerability-analysis+2

4 months ago

CVE-2025-63821

xernary/cve-2025-63821

Proof-of-concept of vulnerability found in Totolink A720R router

embedded-systems-securityexploitationfirmware-analysis+3

4 months ago

CVE-2024-3400

wa6n3r/cve-2024-3400

Multi-threaded exploit tool for CVE-2024-3400 in Palo Alto PAN-OS with automated artifact download and detailed logging for confirmed RCE.

exploitationpenetration-testingreconnaissance+3

16 months ago

CVE-2026-27944

null200ok/cve-2026-27944

CVE-2026-27944 - Nginx UI Unauthenticated Backup Download & Decryption

api-security-testingexploitationinformation-gathering+4

47 months ago

CVE-2026-27180-MajorDoMo-unauthenticated-RCE

mbanyamer/cve-2026-27180-majordomo-unauthenticated-rce

Proof-of-concept exploit for CVE-2026-27180, an unauthenticated RCE in MajorDoMo via update URL poisoning, delivering a webshell to the web root.

exploitationpayload-developmentpenetration-testing+3

8 months ago

LFI-Destruction

revshellxd/lfi-destruction

This program Prompts you for the Local File Inclusion information and will automatically search the /etc/passwd and using the users names found will…

ctfeducationexploitation+8

48 months ago

CVE-2024-46987

ik0nw/cve-2024-46987

Exploit for CVE-2024-46987 path traversal in Camaleon CMS enabling arbitrary file download and automated SSH key extraction via brute-force.

exploitationinformation-gatheringpassword-attacks+3

9 months ago

CVE-2022-44268-

k-javaman12/cve-2022-44268-

For HTB practice

ctfeducationexploitation+3

9 months ago

pfsense-security-research

skraft9/pfsense-security-research

Authenticated Arbitrary File Read in pfSense 2.8.0 via Diagnostics Web Interface (CVE-2025-53392)

exploitationinformation-gatheringpenetration-testing+3

1410 months ago

selenium-node-takeover-kit

jonstratton/selenium-node-takeover-kit

A collection of selenium tests that might aid it takeover of a selenium node

command-and-controldata-exfiltrationexploit-frameworks+6

210 months ago

Previous12 3 4 5 6 Next