Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

1010 results

deep-C

kishorbal/deep-c

Android deeplink misconfiguration detector and exploitation tool

ai-securityandroid-securitydynamic-analysis-sandboxing+8

917 months ago

juniper-rce_cve-2023-36844

watchtowrlabs/juniper-rce_cve-2023-36844

Proof-of-concept exploit chaining four CVEs (CVE-2023-36844-47) for pre-authentication remote code execution on Juniper JunOS SRX and EX series…

exploitationpayload-developmentpenetration-testing+3

1153 years ago

Havoc-C2-SSRF-poc

chebuya/havoc-c2-ssrf-poc

CVE-2024-41570: Havoc C2 0.7 Teamserver SSRF exploit

command-and-controlexploitationpenetration-testing+3

762 years ago

ASPX_WebShell_COFFLoader

epotseluevskaya/aspx_webshell_coffloader

ASPX web shell with COFF loader for executing Beacon Object Files (BOFs) on target servers via a semi-interactive Python client, designed for…

command-and-controlpayload-developmentpenetration-testing+3

1366 months ago

CVE-2020-2551

jas502n/cve-2020-2551

Proof-of-concept exploit for CVE-2020-2551, demonstrating remote code execution in Oracle WebLogic Server via the IIOP protocol. Includes default…

exploitationpenetration-testingred-teaming+2

806 years ago

CVE-2022-23808

dipakpanchal05/cve-2022-23808

Proof-of-concept exploit for CVE-2022-23808, a stored XSS vulnerability in phpMyAdmin 5.1.1 setup script, with payload and reproduction steps for…

exploitationpenetration-testingred-teaming+3

1151 year ago

CVE-2017-7092-PoC

xuechiyaobai/cve-2017-7092-poc

This is the Pwn2Own 2017 Safari backup vul's exploit.

exploitationpenetration-testingred-teaming+2

1167 years ago

CVE-2022-23131

jweny/cve-2022-23131

Go-based proof-of-concept exploit for CVE-2022-23131, a Zabbix SAML authentication bypass. Enables unauthorized admin access by forging SAML…

exploitationpenetration-testingred-teaming+2

954 years ago

watchTowr-vs-Citrix-Netscaler-PreAuth-RCE-CVE-2026-8452

watchtowrlabs/watchtowr-vs-citrix-netscaler-preauth-rce-cve-2026-8452

CVE-2026-8452 PreAuth RCE

exploitationpayload-developmentred-teaming+3

631 month ago

Log4jHorizon

puzzlepeaches/log4jhorizon

Exploiting CVE-2021-44228 in VMWare Horizon for remote code execution and more.

exploitationpayload-developmentpenetration-testing+4

1204 years ago

CVE-2024-53677-S2-067

tam-k592/cve-2024-53677-s2-067

A critical vulnerability, CVE-2024-53677, has been identified in the popular Apache Struts framework, potentially allowing attackers to execute…

exploitationpayload-developmentpenetration-testing+3

951 year ago

Fortijump-Exploit-CVE-2024-47575

watchtowrlabs/fortijump-exploit-cve-2024-47575

Fortinet Fortimanager Unauthenticated Remote Code Execution AKA FortiJump CVE-2024-47575

exploitationpenetration-testingred-teaming+3

971 year ago

CVE-2018-17246

mpgn/cve-2018-17246

CVE-2018-17246 - Kibana LFI < 6.4.3 & 5.6.13

exploitationpayload-developmentpenetration-testing+3

656 years ago

CVE-2023-25194

ohnonoyesyes/cve-2023-25194

Proof-of-concept exploit for CVE-2023-25194, a JNDI injection vulnerability in Apache Kafka Connect enabling remote code execution via crafted…

command-and-controlexploitationpenetration-testing+3

923 years ago

php-8.1.0-dev-backdoor-rce

flast101/php-8.1.0-dev-backdoor-rce

PHP 8.1.0-dev Backdoor System Shell Script

exploitationpenetration-testingred-teaming+2

955 years ago

CVE-2023-22515

ad-calcium/cve-2023-22515

Confluence未授权添加管理员用户(CVE-2023-22515)漏洞利用工具

authenticationexploitationpenetration-testing+3

1102 years ago

moltbot-1click-rce

ethiack/moltbot-1click-rce

Clawdbot/Moltbot/OpenClaw One-click RCE PoC 🦞 (CVE-2026-25253)

exploitationpenetration-testingred-teaming+2

928 months ago

CVE-2025-25257

0xbigshaq/cve-2025-25257

Exploit for CVE-2025-25257, a FortiWeb Fabric RCE vulnerability, with a full working exploit and a PoC for file read/write.

exploitationpenetration-testingred-teaming+2

641 year ago

Previous 1…567…57 Next