Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

NewestRelevanceMost popularRecently updated
16 results
php2shell-lab preview

php2shell-lab

GitHubtani2shell/php2shell-lab

Black-box pentest lab for the PHP2Shell engine memory-corruption family (CVE-2026-109618 / CVE-2026-109619, CVSS 9.8/9.2). Dual-flag verified attack…

binary-exploitationcontainer-securityctf+7
58 days ago
php2shell-lab preview

php2shell-lab

GitHubtaniungou/php2shell-lab

Black-box pentest lab for the PHP2Shell engine memory-corruption family (CVE-2026-109618 / CVE-2026-109619, CVSS 9.8/9.2). Dual-flag verified attack…

binary-exploitationcontainer-securityctf+7
58 days ago
XXERipper preview

XXERipper

GitHubkamalx06/xxeripper

Black-box XXE scanner detecting in-band, error-based, and blind out-of-band injection via statistical baselining, parser fingerprinting, and OOB…

api-security-testingdata-exfiltrationexploitation+9
131 month ago
css-the-bomb-inside-your-inbox preview

css-the-bomb-inside-your-inbox

GitHubportswigger/css-the-bomb-inside-your-inbox

All the materials for Gareth Heyes' Black Hat talk: CSS: the bomb inside your inbox.

ai-securitycurated-resourcesdata-exfiltration+7
432 months ago
presentations preview

presentations

GitHubedwardzpeng/presentations

Slides and conference talks from security research covering Windows, virtualization, web, and blockchain exploit techniques, presented at Black Hat,…

binary-exploitationcryptographycurated-resources+5
2721 month ago
blackhat-arsenal-tools preview

blackhat-arsenal-tools

GitHubdenizparlak/blackhat-arsenal-tools

Black Hat Arsenal Tools Official Account

curated-resourceseducationexploit-frameworks+6
49 years ago
CVE-2026-34835-Black-box-Analysis preview

CVE-2026-34835-Black-box-Analysis

GitHubcyber-note/cve-2026-34835-black-box-analysis

A black-box (DAST) security analysis of CVE-2026-34835 focusing on external validation methodology, observable behavior, security impact, and…

dns-analysiseducationpenetration-testing+3
64 months ago
blackhat-python3 preview

blackhat-python3

GitHubeonraider/blackhat-python3

Source code for the book "Black Hat Python" by Justin Seitz. The code has been fully converted to Python 3, reformatted to comply with PEP8 standards…

code-analysiscryptographyeducation+8
2.4k3 years ago
black-widow preview

black-widow

GitHuboffensive-hub/black-widow

GUI based offensive penetration testing tool (Open Source)

crawlerinformation-gatheringpacket-sniffing-analysis+2
2232 months ago
recollapse preview

recollapse

GitHub0xacb/recollapse

Black-box regex fuzzing tool that generates payloads to bypass input validations, discover normalizations, and evade WAFs in web applications.

fuzzingpayload-generationwaf-bypass+1
1.4k1 year ago
APKDeepLens preview

APKDeepLens

GitHubd78ui98/apkdeeplens

Android security insights in full spectrum.

android-securitycode-analysiscryptography+5
1.0k5 months ago
firefly preview

firefly

GitHubbrum3ns/firefly

High-performance black-box fuzzer for web applications with built-in payload engine, request verification, tampering, encoding, and advanced…

fuzzingpenetration-testingvulnerability-scanners+1
4412 years ago
ABPTTS preview

ABPTTS

GitHubnccgroup/abptts

TCP tunneling over HTTP/HTTPS for web application servers

ids-ips-evasionpenetration-testingred-teaming+1
74410 years ago
Black-Tool preview

Black-Tool

GitHubmrprogrammer2938/black-tool

Install the tools and start Attacking , black-tool v5.5.5 ! ⬛

information-gatheringmalware-analysispassword-attacks+4
6412 years ago
vbscan preview
Archived

vbscan

GitHubowasp/vbscan

OWASP VBScan is a Black Box vBulletin Vulnerability Scanner

exploitationinformation-gatheringpenetration-testing+3
3277 years ago
joomlavs preview
Archived

joomlavs

GitHubrastating/joomlavs

A black box, Ruby powered, Joomla vulnerability scanner

information-gatheringpenetration-testingreconnaissance+3
2748 years ago