Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems Security
General Purpose Utilities
Indicator of Compromise (IOC) Management
OSINT (Open Source Intelligence)
Packet Sniffing & Analysis
Password Cracking
Penetration Testing Frameworks
Phishing Tools
Privilege Escalation
Reconnaissance
Static Analysis
Vulnerability Scanners
Web Vulnerability Scanners
Wi-Fi Auditing
Bluetooth Security
Container Security
Dynamic Analysis (Sandboxing)
Encryption/Decryption Tools
Exploit Frameworks
Identity Management
iOS Security
IoT Security
Memory Forensics
Network Mapping
OSINT for Social Engineering
Password Attacks
Payload Generation
Persistence Mechanisms
Port Scanning
Static Code Analysis (SAST)
Threat Feeds & Aggregators
Vulnerability Analysis
Web Proxies & Interception
Code Analysis
DNS & Subdomain Enumeration
Dynamic Code Analysis (DAST)
Exploitation
Hash Analysis
IDS/IPS Evasion
Impersonation Tools
Lateral Movement
Mobile App Pentesting
Network Forensics
Reverse Engineering
RFID/NFC Tools
SCADA/ICS Security
Scripting & Automation
Serverless Security
Shellcode
Web Application Exploitation
API Security Testing
Configuration Auditing
Data Exfiltration
Debuggers
Forensics
Information Gathering
Mobile Forensics
Network Access Control
Post-Exploitation
Security Virtualization
Phishing
WAF Bypass
Web Security
Fuzzing
Network Security
Steganography
Wireless Security
Data Recovery
Malware Analysis
Digital Forensics
Hardware Hacking
Cryptography
CTF
Penetration Testing
Cloud Security
DevSecOps
Mobile Security
Privacy
Command and Control
Social Engineering
Hardware Security
Utilities & Frameworks
Hardware & IoT Security
Secret Detection
Binary Analysis
Threat Intelligence
Identity & Access Management (IAM)
Supply Chain Security
Authentication
Machine Learning
Intrusion Detection
Papers & Research
Misconfiguration
Subdomain Enumeration
Email Harvesting
Learning & Education
AI-Assisted Reversing
DNS Fuzzing
Red Teaming
Incident Response
Crawler
Curated Resources
Remote Access Tool
Shellcode Generation
Payload Development
Remote Access Trojan
API Security
Anti-Bot
Fingerprint Spoofing
CAPTCHA Bypass
Email Security
DNS Analysis
Chaos Engineering
Learning Paths & Courses
Container Escape
AI Security
Database Security
Firmware Analysis
Anomaly Detection
Log Analysis
Adversarial Attack
Binary Exploitation
Labs & Practice
NewestRelevanceMost popularRecently updated
76 results
SocialFish preview

SocialFish

GitHubundeadsec/socialfish

Modern dynamic phishing toolkit for authorized red team exercises. Clones login pages, captures credentials, cookies, and 2FA codes with a live…

command-and-controleducationids-ips-evasion+9
4.8k3 months ago
CVE-2025-2783 preview

CVE-2025-2783

GitHubalchemist3dot14/cve-2025-2783

Simulated PoC for CVE-2025-2783 — a sandbox escape vulnerability in Chrome's Mojo IPC. Includes phishing delivery, memory fuzzing, IPC simulation,…

binary-exploitationeducationexploitation+8
331 year ago
CiclopeClic preview

CiclopeClic

GitHubpericena/ciclopeclic

Security awareness training tool for authorized phishing simulations and internal IT audits

ai-securityeducationpenetration-testing+4
152 months ago
malicious-pdf preview

malicious-pdf

GitHubjonaslejon/malicious-pdf

Generate malicious PDF test files for penetration testing, bug bounty hunting, and red teaming. Tests SSRF, XSS, XXE, NTLM credential theft, and data…

data-exfiltrationeducationexploitation+6
4.1k2 months ago
BobTheSmuggler preview

BobTheSmuggler

GitHubthecyb3ralpha/bobthesmuggler

"Bob the Smuggler": A tool that leverages HTML Smuggling Attack and allows you to create HTML files with embedded 7z/zip archives. The tool would…

educationencryption-decryption-toolspayload-development+4
60010 months ago
frameless-bitb preview

frameless-bitb

GitHubwaelmas/frameless-bitb

A new approach to Browser In The Browser (BITB) without the use of iframes, allowing the bypass of traditional framebusters implemented by login…

educationids-ips-evasionphishing+3
4572 years ago
CVE-2021-21123-PoC-Google-Chrome preview

CVE-2021-21123-PoC-Google-Chrome

GitHubpuliczek/cve-2021-21123-poc-google-chrome

🐱‍💻 👍 Google Chrome - File System Access API - vulnerabilities reported by Maciej Pulikowski | Total Bug Bounty Reward: $5.000 | CVE-2021-21123…

educationexploitationphishing-tools+3
1755 years ago
CVE-2023-36884-MS-Office-HTML-RCE preview

CVE-2023-36884-MS-Office-HTML-RCE

GitHubjakabakos/cve-2023-36884-ms-office-html-rce

MS Office and Windows HTML RCE (CVE-2023-36884) - PoC and exploit

educationexploitationpapers-research+3
412 years ago
WhatsPayloadRCE preview

WhatsPayloadRCE

GitHuberr0r-ica/whatspayloadrce

Whatsapp Automatic Payload Generator [CVE-2019-11932]

educationexploitationpayload-generation+3
364 years ago
CVE-2020-11022-CVE-2020-11023 preview

CVE-2020-11022-CVE-2020-11023

GitHub0xaj2k/cve-2020-11022-cve-2020-11023

Little thing put together quickly to demonstrate this CVE

educationexploitationphishing-tools+2
353 years ago
CVE-2019-18426 preview

CVE-2019-18426

GitHubhumansecurity/cve-2019-18426
educationexploitationphishing+3
116 years ago
CVE-2025-68613-POC preview

CVE-2025-68613-POC

GitHubthestingr/cve-2025-68613-poc

Public PoC + Scanner and research for CVE-2025-68613: Critical RCE in n8n Workflow Automation via Expression Injection (CVSS 10.0). Includes…

educationexploitationinformation-gathering+8
287 months ago
CVE-2024-21378 preview

CVE-2024-21378

GitHubd0rb/cve-2024-21378

This repository contains an exploit for targeting Microsoft Outlook through Exchange Online, leveraging a vulnerability to execute arbitrary code via…

educationemail-securityexploitation+4
92 years ago
vulnerable-PDF preview

vulnerable-PDF

GitHubnu11secur1ty/vulnerable-pdf
educationlabs-practicepayload-generation+3
112 years ago
vuln-chm-hijack preview

vuln-chm-hijack

GitHubyasinyilmaz/vuln-chm-hijack

Potential malicious code execution via CHM hijacking (CVE-2019-9896)

educationexploitationlabs-practice+3
77 years ago
CVE-2025-6563 preview

CVE-2025-6563

GitHubpraksokchea/cve-2025-6563

Reflected XSS vulnerability in MikroTik Hotspot login page

educationvulnerability-analysisweb-application-exploitation+1
23 days ago
CVE-2026-11113-SMTP-Header-Injection-in-Contact-Form preview

CVE-2026-11113-SMTP-Header-Injection-in-Contact-Form

GitHubgeorge0papasotiriou/cve-2026-11113-smtp-header-injection-in-contact-form
educationemail-securityexploitation+4
16 days ago
CVE-2024-42009-PoC preview

CVE-2024-42009-PoC

GitHubdanithehack3r/cve-2024-42009-poc

CVE-2024-42009 Proof of Concept

data-exfiltrationeducationemail-security+3
71 year ago
Previous12345Next