Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

1664 results

LocalNet_Attacker

dhesitheking/localnet_attacker

This is a project about attacking and gathering information of the windows machines which is connected in the same network by using java programs

information-gatheringpenetration-testingremote-access-tool+1

2 years ago

sonar.js

mandatoryprogrammer/sonar.js

A framework for identifying and launching exploits against internal network hosts. Works via WebRTC IP enumeration combined with WebSockets and…

exploitationinformation-gatheringpenetration-testing+3

55211 years ago

hackbox

samhaxr/hackbox

HackBox is a powerful and comprehensive tool that combines a variety of techniques for web application and network security assessments, including…

information-gatheringmisconfigurationpenetration-testing+5

4183 years ago

CVE-2018-20555

fs0c131y/cve-2018-20555

Exploit for CVE-2018-20555: automated discovery and takeover of Twitter accounts via leaked API keys in vulnerable Social Network Tabs WordPress…

crawlerexploitationinformation-gathering+3

717 years ago

HIKRAVEN

sylhetyhackvenger/hikraven

HIKRAVEN - Advanced Hikvision Security Assessment Platform for professional penetration testing. Detects 12+ CVEs including CVE-2021-36260…

exploitationinformation-gatheringiot-security+6

32 months ago

CVE-2026-22557-PoC

thepotatoofdoom/cve-2026-22557-poc

PoC for UniFi Network Application Pre-Auth Path Traversal (CVE-2026-22557)

exploitationinformation-gatheringpenetration-testing+2

46 months ago

CVE-2021-41277_SSRF

sasukeourad/cve-2021-41277_ssrf

Proof-of-concept demonstrating SSRF and LFI in Metabase versions < 0.40.5 (CVE-2021-41277), including internal network scanning and access to cloud…

exploitationinformation-gatheringpenetration-testing+3

44 years ago

CVE-2019-8997

nxkennedy/cve-2019-8997

An XML External Entity Injection (XXE) vulnerability in the Management System (console) of BlackBerry AtHoc versions earlier than 7.6 HF-567 could…

exploitationinformation-gatheringpenetration-testing+2

26 years ago

CVE-2021-40438

babyteam1024/cve-2021-40438

Proof-of-concept exploit for CVE-2021-40438, an SSRF vulnerability in Apache HTTP Server, demonstrating request smuggling and internal network access.

exploitationinformation-gatheringpenetration-testing+2

25 years ago

CVE-2026-42281

astaruf/cve-2026-42281

Proof-of-concept exploit for CVE-2026-42281, an unauthenticated SSRF in MagicMirror² ≤ 2.35.0, enabling config exfiltration, cloud metadata probing,…

exploitationinformation-gatheringpenetration-testing+3

6 months ago

CVE-2026-22557-check

bishopfox/cve-2026-22557-check

Safely detect whether a UniFi Network Application controller is vulnerable to CVE-2026-22557

exploitationinformation-gatheringpenetration-testing+3

15 months ago

CVE-2022-34963

bypazs/cve-2022-34963

OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting (XSS) vulnerability via the News Feed…

exploitationinformation-gatheringpenetration-testing+2

4 years ago

CVE-2023-27163

madhavmehndiratta/cve-2023-27163

Proof-of-concept exploit for CVE-2023-27163, an SSRF vulnerability in request-baskets v1.2.1, allowing access to internal network resources via…

exploitationinformation-gatheringpenetration-testing+3

2 years ago

CVE-2022-43980

argonx21/cve-2022-43980

Stored Cross Site Scripting Vulnerability in the network maps edit functionality

exploitationinformation-gatheringpenetration-testing+2

3 years ago

CVE-2007-3831

alt3kx/cve-2007-3831

PHP remote file inclusion in main.php in ISS Proventia Network IPS GX5108 1.3 and GX5008 1.5

exploitationinformation-gatheringpapers-research+3

8 years ago

CVE-2023-27163

cowsecurity/cve-2023-27163

Proof-of-concept exploit for CVE-2023-27163: Server-Side Request Forgery (SSRF) in Request-Baskets v1.2.1 via crafted API requests to access internal…

exploitationinformation-gatheringpenetration-testing+3

3 years ago

CVE-2022-34962

bypazs/cve-2022-34962

OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Group…

exploitationinformation-gatheringpenetration-testing+2

4 years ago

CVE-2026-86426

guila95/cve-2026-86426

Proof-of-concept and recon framework for CVE-2026-86426, a LibreNMS API authentication bypass via type confusion, extracting SNMP credentials and…

exploitationinformation-gatheringnetwork-mapping+3

9 days ago

Previous12…93 Next