Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

537 results

CVE-2023-30092

nawed20002/cve-2023-30092

Proof-of-concept exploit for SQL injection in Sourcecodester Online Pizza Ordering System 1.0. Demonstrates remote code execution and denial of…

exploitationpenetration-testingvulnerability-analysis+2

3 years ago

-CVE-2023-46450

yte121/-cve-2023-46450

Proof-of-concept for CVE-2023-46450: authenticated stored cross-site scripting (XSS) vulnerability in the Add Supplier function of Sourcecodester…

educationpenetration-testingvulnerability-analysis+2

2 years ago

CVE-2023-46449

sajaljat/cve-2023-46449

Proof-of-concept exploit for CVE-2023-46449: IDOR in Sourcecodester inventory management system v1.0 password change function enabling remote account…

authenticationeducationmisconfiguration+3

2 years ago

CVE-2025-64027

cybercrewinc/cve-2025-64027

Reflected Cross-Site Scripting in Snipe-IT CSV Import Workflow

exploitationinformation-gatheringpenetration-testing+3

9 months ago

CVE-2019-19633

jra89/cve-2019-19633

lib/G/functions.php in Chevereto 1.0.0 through 1.1.4 Free, and through 3.13.5 Core, allows an attacker to perform bruteforce attacks without…

ids-ips-evasioninformation-gatheringpassword-attacks+2

6 years ago

ATSCAN

alisamtechnology/atscan

Advanced dork Search & Mass Exploit Scanner

crawlerdns-subdomain-enumerationemail-harvesting+7

1.6k2 years ago

webhandler

lnxg33k/webhandler

Bash simulator to control a server using PHP system functions.

command-and-controlids-ips-evasionpayload-generation+3

1005 years ago

b374k

b374k/b374k

Single-file PHP webshell providing remote file management, command execution, bind/reverse shell, database connectivity, and process control for…

command-and-controldatabase-securitypenetration-testing+2

2.7k3 years ago

Wordpress-XMLRPC-Brute-Force-Exploit

1n3/wordpress-xmlrpc-brute-force-exploit

Wordpress XMLRPC System Multicall Brute Force Exploit (0day) by 1N3 @ CrowdShield

exploitationinformation-gatheringpassword-attacks+3

4981 year ago

xcat

orf/xcat

Automated blind XPath injection exploitation tool with optimized data retrieval, built-in OOB HTTP server, and interactive REPL shell for file system…

exploitationinformation-gatheringvulnerability-analysis+2

4103 years ago

CVE-2022-0337-PoC-Google-Chrome-Microsoft-Edge-Opera

puliczek/cve-2022-0337-poc-google-chrome-microsoft-edge-opera

🎩 🤟🏻 [P1-$10,000] Google Chrome, Microsoft Edge and Opera - vulnerability reported by Maciej Pulikowski - System environment variables leak -…

data-exfiltrationeducationexploitation+2

3414 years ago

CVE-2018-0296

yassineaboukir/cve-2018-0296

Exploit script for Cisco ASA path traversal (CVE-2018-0296) that extracts system information, active sessions, and valid usernames from vulnerable…

exploitationinformation-gatheringnetwork-security+3

2052 years ago

acunetix_0day

dzonerzy/acunetix_0day

Standalone RCE exploit for Acunetix WVS 10 that delivers a Meterpreter reverse shell with SYSTEM privileges via staged payload download and execution.

exploitationpenetration-testingprivilege-escalation+1

19210 years ago

CVE-2021-21123-PoC-Google-Chrome

puliczek/cve-2021-21123-poc-google-chrome

🐱‍💻 👍 Google Chrome - File System Access API - vulnerabilities reported by Maciej Pulikowski | Total Bug Bounty Reward: $5.000 | CVE-2021-21123…

educationexploitationphishing-tools+3

1755 years ago

Predator

s0md3v/predator

Prototype anti-automation system demonstrating bot detection, malformed HTML traps, invisible links, and signature-reversing honeypot techniques for…

anti-botcrawlerids-ips-evasion+3

1275 years ago

wp-file-manager-CVE-2020-25213

mansoorr123/wp-file-manager-cve-2020-25213

Shell script exploit for CVE-2020-25213 targeting unauthenticated arbitrary file upload in WordPress File Manager plugin (<6.9), enabling full system…

exploitationpenetration-testingvulnerability-analysis+2

585 years ago

CVE-2023-48788

horizon3ai/cve-2023-48788

Proof-of-concept exploit for Fortinet FortiClient EMS SQL injection vulnerability (CVE-2023-48788). Demonstrates unauthenticated SQL injection to…

exploitationpenetration-testingvulnerability-analysis+1

542 years ago

CVE-2023-43261

win3zz/cve-2023-43261

Proof-of-concept exploit for CVE-2023-43261 targeting Milesight industrial routers. Demonstrates credential leakage via unprotected system logs and…

exploitationiot-securitymisconfiguration+3

572 years ago

Previous12…30 Next