Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

317 results

CrackQL

nicholasaleks/crackql

GraphQL penetration testing tool that exploits weak rate limits and cost analysis to brute-force credentials, bypass 2FA, enumerate users, and fuzz…

api-security-testingfuzzingpassword-attacks+2

351

3 years ago

wp2shell-poc

sergiointel/wp2shell-poc

Stock vulnerable wordpress RCE poc for wp2shell.

exploitationpenetration-testingweb-application-exploitation

1091 month ago

CVE-2026-45504

hawktrace/cve-2026-45504

CVE-2026-45504 Microsoft Exchange File Read

exploitationinformation-gatheringpenetration-testing+2

632 months ago

CVE-2019-19781

jas502n/cve-2019-19781

Python exploit for CVE-2019-19781 targeting Citrix ADC with template injection to achieve remote code execution on vulnerable gateways.

exploitationpenetration-testingred-teaming+3

856 years ago

Splunk-RCE-poc

nathan31337/splunk-rce-poc

Python-based PoC for CVE-2023-46214 that exploits Splunk's adddatamethods feature to achieve remote code execution via a reverse shell.

educationexploitationpayload-generation+4

1142 years ago

CVE-2020-0688

jumbo-wjb/cve-2020-0688

CVE-2020-0688 - Exchange

command-and-controlexploitationpenetration-testing+2

666 years ago

CVE-2018-2380

erpscanteam/cve-2018-2380

PoC of Remote Command Execution via Log injection on SAP NetWeaver AS JAVA CRM

command-and-controlexploitationpayload-generation+3

518 years ago

CVE-2019-2618

pyn3rd/cve-2019-2618

Weblogic Unrestricted File Upload

exploitationpayload-generationpenetration-testing+2

547 years ago

Struts2-045-Exp

flyteas/struts2-045-exp

Struts2 S2-045（CVE-2017-5638）Exp with GUI

educationexploitationpayload-generation+3

619 years ago

cve-2024-42327

aramosf/cve-2024-42327

cve-2024-42327 ZBX-25623

exploitationinformation-gatheringpenetration-testing+2

381 year ago

CVE-2023-7028

randomrobbiebf/cve-2023-7028

CVE-2023-7028

authentication-authorizationexploitationpenetration-testing+3

582 years ago

CVE-2025-64446-Exploit

soltanali0/cve-2025-64446-exploit

Python exploit for CVE-2025-64446 targeting FortiWeb WAF, enabling unauthorized user creation and privilege escalation through a crafted HTTP request.

exploitationpenetration-testingred-teaming+3

139 months ago