Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

5039 results

CVE-2025-43960

far00t01/cve-2025-43960

PHP Object Injection exploit for Adminer <4.8.1 via Monolog, causing Denial of Service through crafted serialized payloads. Includes PoC, CVSS…

code-analysisexploitationpayload-generation+2

1 year ago

CVE-2025-24813

seahcy/cve-2025-24813

Instructions for rapid deployment of Tomcat v9.0.90 with java 25.0.1 2025-10-21 LTS on Windows Server 2019 Standard for lazy researchers.

educationexploitationpayload-development+3

18 months ago

Exploit-CVE-2023-22518

lilly-dox/exploit-cve-2023-22518

Exploit for CVE-2023-22518 in Atlassian Confluence. Provides a detailed walkthrough of the vulnerability, including environment setup, root cause…

educationexploitationlabs-practice+3

12 years ago

CVE-2022-31798

omarhashem123/cve-2022-31798

CVE-2022-31798 Proof of Concept

exploitationpenetration-testingred-teaming+2

13 years ago

CVE-2021-26084_GoPOC

bcdannyboy/cve-2021-26084_gopoc

PoC of CVE-2021-26084 written in Golang based on https://twitter.com/jas502n/status/1433044110277890057?s=20

exploitationpayload-generationpenetration-testing+2

15 years ago

CVE-2022-31499

omarhashem123/cve-2022-31499

CVE-2022-31499 Proof of Concept

command-and-controlexploitationpenetration-testing+3

13 years ago

CVE-2024-32002-PoC

th4s1s/cve-2024-32002-poc

Proof of Concept for CVE-2024-32002

educationexploitationpapers-research+2

11 year ago

CVE-2014-91371-Wordpress-

jamaal001/cve-2014-91371-wordpress-

Exploit for CVE-2014-91371 targeting WordPress Slider REvolution 4.1.4 plugin. Enables remote exploitation of vulnerable installations for security…

exploitationpenetration-testingvulnerability-analysis+2

11 year ago

CVE-2023-36123

9bakabaka/cve-2023-36123

The PoC of CVE-2023-36123

exploitationpayload-generationpenetration-testing+2

12 years ago

Spring4Shell-PoC-exploit

gokul-ramesh/spring4shell-poc-exploit

Demonstrable Proof of Concept Exploit for Spring4Shell Vulnerability (CVE-2022-22965)

exploitationpayload-developmentpenetration-testing+2

13 years ago

CVE-2023-49070

0xrobiul/cve-2023-49070

Exploit Of Pre-auth RCE in Apache Ofbiz!!

exploitationpenetration-testingred-teaming+2

12 years ago

Strapi-CVE-2019-1881

shadawks/strapi-cve-2019-1881

Proof of concept for Strapi CVE-2019-18818 - Unauthenticated Password Reset Vulnerability / Privilege Escalation

authenticationexploitationpenetration-testing+2

14 years ago

CVE-2024-28987

alecclyde/cve-2024-28987

Proof of Concept Exploit for CVE-2024-28987: SolarWinds Web Help Desk Hardcoded Credential Vulnerability

educationexploitationinformation-gathering+3

11 year ago

httpd-2.4.49

ksanchezcld/httpd-2.4.49

critical: Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773) (CVE-2021-42013)

exploitationpenetration-testingremote-access-tool+2

14 years ago

CVE-2022-23773-repro

danbudris/cve-2022-23773-repro

PoC repro of CVE-2022-23773 in Go

code-analysisexploitationpenetration-testing+2

13 years ago

rails-PoC-CVE-2016-2098

alejandro-marting/rails-poc-cve-2016-2098

Proof of concept CVE-2016-2098

educationexploitationpenetration-testing+2

19 years ago

CVE-2017-5638-POC

xernary/cve-2017-5638-poc

Proof of concept of CVE-2017-5638 including the whole setup of the Apache vulnerable server

educationexploitationlabs-practice+3

11 year ago

CVE-2016-5983

bitwrecker/cve-2016-5983

IBM WebSphere deserialization of untrusted data - IBM WebSphere 7,8,8.5,9

exploitationpenetration-testingvulnerability-analysis+1

14 years ago

Previous 1…969798…100 Next