Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

36 results

CVE-2018-18852

hook-s3c/cve-2018-18852

Authenticated remote code execution exploit for CERIO routers (DT300N, DT100G, AMR-3204, WMR-200N) using vendor default credentials. Python PoC…

embedded-systems-securityexploitationiot-security+4

7 years ago

Rig-Exploit-for-CVE-2018-8174

orf53975/rig-exploit-for-cve-2018-8174

Rig Exploit for CVE-2018-8174 As with its previous campaigns, Rig’s Seamless campaign uses malvertising. In this case, the malvertisements have a…

command-and-controlexploitationmalware-analysis+3

8 years ago

CVE-2020-5902

nsflabs/cve-2020-5902

Python scanner to detect CVE-2020-5902 RCE vulnerability in F5 BIG-IP TMUI. Tests unauthenticated remote systems for arbitrary command execution via…

exploitationpenetration-testingremote-access-tool+2

86 years ago

demiguise

nccgroup/demiguise

HTA encryption tool for RedTeams

ids-ips-evasionpayload-generationphishing-tools+2

1.4k4 years ago

CVE-2017-11882

rip1s/cve-2017-11882

CVE-2017-11882 Exploit accepts over 17k bytes long command/code in maximum.

binary-exploitationexploitationpayload-generation+4

3308 years ago

CVE-2025-55182

jaycelation/cve-2025-55182

PoC, Hunting React2Shell about CVE-2025-55182

exploitationosintpenetration-testing+3

10 months ago

ilo4-rce-vuln-scanner

sk1dish/ilo4-rce-vuln-scanner

Scan a list of given IP's for CVE-2017-12542

exploitationinformation-gatheringreconnaissance+2

57 years ago

CVE-2022-1388

hudi233/cve-2022-1388

Shell-based scanner for CVE-2022-1388 (F5 BIG-IP iControl REST unauthenticated RCE). Checks target IPs for the vulnerability and reports exploitable…

exploitationpenetration-testingreconnaissance+2

4 years ago

CVE-2017-5638

xhendos/cve-2017-5638

Proof-of-concept exploit for Apache Struts vulnerability CVE-2017-5638, with scripts to scan random IPs, check for the vulnerability, and execute…

educationexploitationpenetration-testing+3

9 years ago

cve-2019-2725

zhusx110/cve-2019-2725

Automated scanner and exploit for CVE-2019-2725 (Oracle WebLogic RCE). Reads target IPs from ip.txt, checks for vulnerability, and saves exploitable…

exploitationpenetration-testingreconnaissance+2

77 years ago

CVE-2025-1974_IngressNightmare_PoC

abrewer251/cve-2025-1974_ingressnightmare_poc

Automates sending JSON payloads to multiple IPs via curl to test for CVE-2025-1974 (IngressNightmare), classifying responses and generating XML…

exploitationpenetration-testingreconnaissance+3

1 year ago

CVE-2021-3019

givemefivw/cve-2021-3019

Automated exploitation tool for CVE-2021-3019 that reads target IPs from a text file and executes the exploit against HTTP endpoints.

exploitationinformation-gatheringreconnaissance+2

5 years ago

Shockwave-OSS

gal-nagli/shockwave-oss

Curated collection of bug bounty tips, one-liners, and automation workflows for recon, fuzzing, and web exploitation, with private nuclei templates…

curated-resourceseducationfuzzing+9

7512 years ago

CVE-2023-3350

itres-labs/cve-2023-3350

Exploit for cryptographic Issue vulnerability on IBERMATICA RPS [CVE-2023-3350]

cryptographyeducationexploitation+6

2 months ago

CVE-2025-68613-n8n-rce-analysis

ak-cybe/cve-2025-68613-n8n-rce-analysis

CVE-2025-68613 (n8n) Critical RCE analysis + defensive recommendations (patch validation, detection ideas, and hardening tips)

educationexploitationincident-response+3

19 months ago

cve-2019-7192-check

cycraft-corp/cve-2019-7192-check

Checker for QNAP pre-auth root RCE (CVE-2019-7192 ~ CVE-2019-7195)

exploitationpenetration-testingreconnaissance+2

135 years ago

CVE-2022-26134

abhishekmorla/cve-2022-26134

Exploit scanner for CVE-2022-26134 in Atlassian Confluence. Uses Shodan to find vulnerable hosts, then executes commands via the OGNL injection…

exploitationinformation-gatheringpenetration-testing+3

84 years ago

RIUS

zadewg/rius

CVE-2020-20093; 20094; 20095; 20096, 2022-28345 RTLO Injection URI Spoofing

ids-ips-evasionimpersonation-toolsphishing+3

862 years ago

Previous12 Next