Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

148 results

brutemap

brutemap-dev/brutemap

Let's find someone's account

information-gatheringpassword-attackspenetration-testing+1

1727 years ago

ssrfuzz

ryandamour/ssrfuzz

SSRFuzz is a tool to find Server Side Request Forgery vulnerabilities, with CRLF chaining capabilities

fuzzingvulnerability-scannersweb-application-exploitation+1

1845 years ago

CSPTPlayground

doyensec/csptplayground

CSPTPlayground is an open-source playground to find and exploit Client-Side Path Traversal (CSPT).

educationlabs-practicepenetration-testing+2

1641 year ago

crlfmap

ryandamour/crlfmap

CRLFMap is a tool to find HTTP Splitting vulnerabilities

fuzzingids-ips-evasionpenetration-testing+3

325 years ago

CVE-2022-26134

abhishekmorla/cve-2022-26134

Exploit scanner for CVE-2022-26134 in Atlassian Confluence. Uses Shodan to find vulnerable hosts, then executes commands via the OGNL injection…

exploitationinformation-gatheringpenetration-testing+3

84 years ago

PoC-Fix-jenkins-rce_CVE-2024-23897

10t4/poc-fix-jenkins-rce_cve-2024-23897

on this git you can find all information on the CVE-2024-23897

educationexploitationlabs-practice+3

52 years ago

log4shell4shell

suuhm/log4shell4shell

Log4shell - Multi-Toolkit. Find, Fix & Test possible CVE-2021-44228 vulneraries - provides a complete LOG4SHELL test/attack environment on shell

educationexploitationpayload-generation+3

54 years ago

CVE-2024-4879-CVE-2024-5217-ServiceNow-RCE-Scanning

notspepino/cve-2024-4879-cve-2024-5217-servicenow-rce-scanning

CVE-2024-4879 & CVE-2024-5217 ServiceNow RCE Scanning Using Nuclei & Shodan Dork to find it.

exploitationinformation-gatheringpenetration-testing+3

52 years ago

VulnHub-DC1-Writeup

prapul1/vulnhub-dc1-writeup

VulnHub DC-1 boot-to-root — exploiting CVE-2018-7600 (Drupalgeddon2) for RCE, extracting DB credentials from settings.php, forging admin password…

ctfeducationexploitation+9

13 months ago

jenkins_scan

w41l3r/jenkins_scan

Find jenkins environment and checks for CVE-2024-23897

exploitationinformation-gatheringpenetration-testing+3

5 months ago

CVE-2023-30253-PoC

g4nkd/cve-2023-30253-poc

I couldn’t find a PoC for CVE-2023-30253, so I developed an effective one

code-analysisexploitationpenetration-testing+2

12 years ago

Pixel-Flood-Attack

rk-000/pixel-flood-attack

PoC for CVE-2024-22393: Pixel Flood DoS in Apache Answer ≤1.2.1. Upload crafted 5KB image with fake 64Kx64K dimensions. Server allocates memory for…

exploitationpenetration-testingreconnaissance+2

16 months ago

vulnerability-in-Remix-React-Router-CVE-2025-31137-

pouriam23/vulnerability-in-remix-react-router-cve-2025-31137-

CTF challenge replicating CVE-2025-31137 in Remix/React Router Express. Learn to exploit a server-side vulnerability to find the admin flag.

ctfeducationexploitation+3

11 year ago

HTB_Nibbles

3mpir3albert/htb_nibbles

In this repository you will find the technical report of Nibbles, the exploit to abuse the CVE-2015-6967 and an autopwn tool in case you want to…

ctfeducationexploitation+3

2 years ago

SAP_CVE-2020-6287_find_mandate

qmakake/sap_cve-2020-6287_find_mandate

Checker help to verify created account or find it's mandat

exploitationinformation-gatheringpenetration-testing+2

3 years ago

CVE-2018-10097

ashangp923/cve-2018-10097

To find XSS injection

information-gatheringpenetration-testingreconnaissance+2

2 years ago

QRLJacking

owasp/qrljacking

Social engineering attack vector and exploitation framework for hijacking user sessions via QR code login, targeting web applications like WhatsApp,…

exploit-frameworkspenetration-testingphishing+2

1.6k1 year ago

jsql-injection

ron190/jsql-injection

Automated SQL injection detection and exploitation tool for extracting database information from web applications, supporting multiple injection…

database-securitypenetration-testingvulnerability-scanners+1

1.8k2 months ago

Previous 123…9 Next