Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

405 results

POC-CVE-2018-4411

lilang-wu/poc-cve-2018-4411

Proof-of-concept exploit for CVE-2018-4411, demonstrating a specific vulnerability in Apple software. Intended for security testing and educational…

binary-exploitationexploitationpenetration-testing+2

7 years ago

CVE-2023-21608

hacksysteam/cve-2023-21608

Proof-of-concept exploit for CVE-2023-21608, a Use-After-Free vulnerability in Adobe Acrobat Reader enabling remote code execution via crafted PDF…

binary-exploitationexploitationpayload-development+3

2842 years ago

CVE-2022-28672

hacksysteam/cve-2022-28672

Foxit PDF Reader Remote Code Execution Exploit

binary-exploitationexploitationpayload-development+3

1212 years ago

XBadManners

ttffdd/xbadmanners

Tool for CVE-2018-16323

data-exfiltrationexploitationmemory-forensics+2

837 years ago

CVE-2018-18500

sophoslabs/cve-2018-18500

PoC for CVE-2018-18500 - Firefox Use-After-Free

binary-exploitationeducationexploitation+2

617 years ago

php-bypass-disable-functions

irsl/php-bypass-disable-functions

Demo project how to bypass the disable_functions security control of PHP on Linux

binary-exploitationexploitationpost-exploitation+3

277 years ago

CVE-2019-5782_CVE-2019-13768

edxsh/cve-2019-5782_cve-2019-13768

Full-chain Chrome exploit targeting CVE-2019-5782 and CVE-2019-13768 with custom ROP gadgets and shellcode for arbitrary command execution on Windows…

binary-exploitationexploitationpayload-development+3

215 years ago

cve-2023-5217-poc

ut-security/cve-2023-5217-poc

A PoC to trigger CVE-2023-5217 from the Browser WebCodecs or MediaRecorder interface.

binary-exploitationeducationexploitation+3

162 years ago

CVE-2026-33439

themalwareguardian/cve-2026-33439

First publicly shared exploit implementation for CVE-2026-33439 (OpenAM pre-auth RCE via jato.clientSession deserialization).

binary-exploitationcode-analysiseducation+8

104 months ago

cve-2016-7190

0xcl/cve-2016-7190

ChakraCore exploitation techniques

binary-exploitationeducationexploitation+5

98 years ago

CVE-2021-30632

paulsery/cve-2021-30632

m-y-mo: https://github.com/github/securitylab/tree/main/SecurityExploits/Chrome/v8/CVE-2021-30632

binary-exploitationexploitationshellcode+3

2 years ago

PS-2018-002---CVE-2018-14442

sandi-go/ps-2018-002---cve-2018-14442

Proof-of-concept exploit for CVE-2018-14442, a use-after-free vulnerability in Foxit Reader and PhantomPDF, enabling remote code execution via a…

binary-exploitationexploitationpenetration-testing+2

6 years ago

cve-2018-9951

sandi-go/cve-2018-9951

Proof-of-concept exploit for Foxit Reader CPDF_Object use-after-free remote code execution vulnerability (CVE-2018-9951) affecting versions…

binary-exploitationeducationexploitation+2

6 years ago

exploitarium

bikini/exploitarium

Curated archive of public proof-of-concept exploits and vulnerability research writeups covering web, binary, and network security, with a focus on…

binary-exploitationctfcurated-resources+6

5.1k11 days ago

Nginx-Rift

depthfirstdisclosures/nginx-rift

NGINX RCE exploits

binary-exploitationexploitationpayload-development+3

9272 months ago

PoC

mcw0/poc

Issues has been disabled for these PoC's, as they are simply PoC, Public Domain and unsupported.

binary-exploitationembedded-systems-securityexploitation+5

7823 years ago

exploitgym

sunblaze-ucb/exploitgym

ExploitGym is a large-scale, realistic benchmark built from real-world vulnerabilities designed to evaluate AI agents' ability to develop exploits.

ai-securitybinary-exploitationctf+9

1.1k1 month ago

PwnAdventure3

liveoverflow/pwnadventure3

PwnAdventure3 Server

binary-exploitationctfeducation+5

6878 years ago

Previous 1…345…23 Next