Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

5042 results

CVE-2022-32114

bypazs/cve-2022-32114

An unrestricted file upload vulnerability in the Add New Assets function of Strapi v4.1.12 allows attackers to execute arbitrary code via a crafted…

exploitationpenetration-testingvulnerability-analysis+2

4 years ago

CVE-2021-22204-Gitlab

ph-arm/cve-2021-22204-gitlab

Modification of gitlab exploit anything under 13.10

command-and-controlexploitationpenetration-testing+3

24 years ago

CVE-2021-24750

fimtow/cve-2021-24750

Demonstration of the WP Visitor Statistics plugin exploit

exploitationpenetration-testingvulnerability-analysis+2

14 years ago

CVE-2018-6574

r00tpgp/cve-2018-6574

Proof-of-concept exploit for CVE-2018-6574, demonstrating exploitation of a remote code execution vulnerability in Go-based applications.

code-analysisexploitationpenetration-testing+2

4 months ago

wordpress-cve-2018-6389

javierolmedo/wordpress-cve-2018-6389

CVE-2018-6389 WordPress Core - 'load-scripts.php' Denial of Service <= 4.9.4

exploitationpenetration-testingvulnerability-analysis+1

28 years ago

CVE-2020-14293

patrickhener/cve-2020-14293

This repository holds the advisory, exploits and vulnerable software of the CVE-2020-14293

educationexploitationpenetration-testing+2

15 years ago

CVE-2019-17662

thomas-osgood/cve-2019-17662

Golang implementation of ThinVNC exploit CVE-2019-17662. For educational purposes only.

educationexploitationpenetration-testing+2

13 years ago

CVE-2023-29439

lourc0d3/cve-2023-29439

PoC of CVE-2023-29439

exploitationpenetration-testingvulnerability-analysis+2

13 years ago

PHP_CVE-2012-1823

cyberharsh/php_cve-2012-1823

Educational PoC and analysis of CVE-2012-1823, a PHP-CGI remote code execution vulnerability. Includes Docker-based test environment, exploit…

code-analysiseducationexploitation+3

16 years ago

CVE-2021-43617

sybelle03/cve-2021-43617

This is a reproduction of PHP Laravel 8.70.1 - Cross Site Scripting (XSS) to Cross Site Request Forgery (CSRF) vulnerability

exploitationpenetration-testingphishing+3

13 years ago

next-attack

nicknisi/next-attack

A demo of the CVE-2025-29927 vulnerability for a NebraskaJS lightning talk

educationids-ips-evasionmisconfiguration+2

21 year ago

nextjs-auth-bypass

shahin-shadow/nextjs-auth-bypass

Analysis and exploitation of a Next.js authorization bypass vulnerability (CVE-2025-29927)

authentication-authorizationeducationpenetration-testing+3

5 months ago

CVE-2025-24016

rxerium/cve-2025-24016

Detection for CVE-2025-24016 - Deserialization of Untrusted Data Vulnerability in the Wazuh software

exploitationpenetration-testingvulnerability-analysis+3

210 months ago

Vulnerable-Lab-NextJS-CVE-2025-29927

kamal-418/vulnerable-lab-nextjs-cve-2025-29927

Deliberately vulnerable Next.js application designed for practicing exploitation of CVE-2025-29927, with a tutorial video for guided learning.

ctfeducationlabs-practice+2

14 months ago

CVE-2025-29927

s11s11/cve-2025-29927

Demo of CVE-2025-29927 for secure programming class

educationlabs-practicepenetration-testing+2

3 months ago

mIRC-CVE-2019-6453

andripwn/mirc-cve-2019-6453

Proof of calc for CVE-2019-6453

exploitationpayload-developmentpenetration-testing+3

17 years ago

CVE-2025-55182-poc-panel

dedny/cve-2025-55182-poc-panel

This is a special panel that is used to send POC requests with the output of responses.

exploitationpayload-generationpenetration-testing+2

4 months ago

CVE-2017-18349

dungsocool/cve-2017-18349

Step-by-step walkthrough of CVE-2017-18349 Fastjson deserialization RCE exploitation, covering attack surface identification, fingerprinting, JNDI…

binary-exploitationeducationexploitation+6

3 months ago

Previous 1…929394…100 Next