Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

37 results

CVE-2025-24071-POC

buffertrychar/cve-2025-24071-poc

Proof-of-concept exploit for CVE-2025-24071, generating a malicious ZIP file that triggers NTLM hash disclosure via Windows Explorer, used with an…

exploitationpayload-generationpenetration-testing+2

5 months ago

CVE-2026-1357

cves-labs/cve-2026-1357

Lab environment and proof-of-concept exploit for CVE-2026-1357, a WordPress plugin vulnerability, with Docker setup and automated exploitation…

educationexploitationlabs-practice+3

6 months ago

CVE-2024-23897

hybinn/cve-2024-23897

Step-by-step lab environment setup for exploiting CVE-2024-23897 in Jenkins, including Java installation, WAR file download, and execution on port…

educationexploitationlabs-practice+3

1 year ago

CVE-2017-8056

itzexploit/cve-2017-8056

Python-based exploit for CVE-2017-8056 targeting XML-RPC denial-of-service vulnerability in web applications.

exploitationpenetration-testingvulnerability-analysis+1

1 year ago

NetMRI-2014-3418

depthsecurity/netmri-2014-3418

Metasploit module exploiting InfoBlox Network Automation CVE-2014-3418 command injection to create a sudo user and deliver a reverse Meterpreter…

exploitationexploit-frameworkspenetration-testing+2

912 years ago

HackTheBox-Facts

suriyaboon/hackthebox-facts

HTB Facts is a Easy Linux box featuring Camaleon CMS and MinIO. Gain admin access via open registration and a mass assignment vulnerability, then…

cloud-securityctfeducation+7

28 days ago

Sudo-Agent-CTF-

nyxrecon/sudo-agent-ctf-

Write-up do Sudo Agent CTF (TryHackMe), com enumeração, exploração web, esteganografia, SSH e privilege escalation via CVE-2019-14287.

ctfeducationexploitation+7

2 months ago

metasploitable3-pentest-writeup

adfortunato/metasploitable3-pentest-writeup

Home-lab penetration test report of Metasploitable3 covering Nmap recon, Drupalgeddon RCE, SQL injection, SSH credential reuse, sudo privilege…

ctfeducationexploitation+8

1 month ago

Penetration-Testing-Walkthrough-Hacksudo-Thor

heventafese/penetration-testing-walkthrough-hacksudo-thor

Black-box penetration test against HackSudo Thor : CVE-2014-6271 Shellshock RCE through Apache mod_cgi, chained with sudo misconfiguration and bash…

ctfeducationexploitation+8

6 months ago

Shocker-TJNULL-OSCP-

r3fr4kt/shocker-tjnull-oscp-

Structured HTB walkthrough demonstrating Shellshock (CVE-2014-6271) exploitation via CGI directory fuzzing and privilege escalation through…

educationexploitationlabs-practice+6

5 months ago

SimpleCTF-THM-Walkthrough

paulameg/simplectf-thm-walkthrough

First CTF successfully completed! This repo documents my walkthrough of TryHackMe's Simple CTF. It covers network reconnaissance (Nmap), web…

ctfeducationpassword-cracking+5

15 months ago

traveller-htb

sharma01672/traveller-htb

Traveller is an Easy Linux machine featuring a Joomla 4.2.7 travel booking website vulnerable to CVE-2023-23752, an unauthenticated REST API…

educationexploitationinformation-gathering+6

4 months ago

QuickBox-Pro-2.1.8-Authenticated-RCE

s1gh/quickbox-pro-2.1.8-authenticated-rce

Authenticated command injection exploit for QuickBox Pro v2.1.8, providing remote code execution as www-data and privilege escalation to root via…

exploitationpenetration-testingpost-exploitation+3

6 years ago

CVE-2019-14287-CVE-2014-6271

sindayifu/cve-2019-14287-cve-2014-6271

Exploit code for CVE-2019-14287 and CVE-2014-6271, targeting sudo privilege escalation and Shellshock vulnerabilities.

command-and-controlexploitationpenetration-testing+3

6 years ago

CVE-2024-33775

neo-xed/cve-2024-33775

Privilege escalation exploit for Nagios XI 2024R1.01, enabling full root access from NAGIOS or APACHE users via malicious RSS dashlet injection and…

exploitationpenetration-testingprivilege-escalation+3

2 years ago

jenkins-cve-2016-0792

jpiechowka/jenkins-cve-2016-0792

Exploit for Jenkins serialization vulnerability - CVE-2016-0792

code-analysisdynamic-code-analysisexploitation+3

479 years ago

Some-Tools

som3canadian/some-tools

Some Pentest Tools. Install and keep up to date some pentesting tools. I used this to pass my OSCP exam.

educationexploitationpenetration-testing+4

645 years ago

CVE-2019-19268

thecybergeek/cve-2019-19268

New Found 0-days!

command-and-controlexploitationmisconfiguration+5

346 years ago

Previous12 3 Next