Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
54 results
GlacierCTF2023_writeups preview

GlacierCTF2023_writeups

GitHublosfuzzys/glacierctf2023_writeups

Curated CTF writeup collection for GlacierCTF 2023 covering pwn, rev, web, crypto, and smart contract challenges with solutions and educational…

binary-exploitationcryptographyctf+4
16
2 years ago
Interview_Tips preview

Interview_Tips

GitHubjigerjain/interview_tips

Summary of Cyber Security interview questions I have been through, hope this helps

binary-exploitationcloud-securitycryptography+5
716 years ago
My-Presentation-Slides preview

My-Presentation-Slides

GitHuborangetw/my-presentation-slides

Collections of Orange Tsai's public presentation slides.

binary-exploitationctfcurated-resources+5
7601 year ago
V8-sbx-bypass-collection preview

V8-sbx-bypass-collection

GitHubxv0nfers/v8-sbx-bypass-collection
binary-exploitationcurated-resourcesexploitation+3
2921 year ago
PoC preview

PoC

GitHubdarknavysecurity/poc
binary-exploitationexploitationios-security+3
22611 months ago
CVE-2026-42533-POC preview

CVE-2026-42533-POC

GitHub0xcyberstan/cve-2026-42533-poc

CVE-2026-42533: pre-auth nginx heap overflow and info leak from PCRE capture clobbering in the map/script engine, chained to RCE.

binary-exploitationexploitationpenetration-testing+3
115 days ago
IE11SandboxEscapes preview

IE11SandboxEscapes

GitHubtyranid/ie11sandboxescapes

Some example source code for fixed IE11 sandbox escapes.

binary-exploitationexploitationprivilege-escalation+2
14212 years ago
CVE-2026-42533 preview

CVE-2026-42533

GitHubjelasin/cve-2026-42533

Proof-of-concept reproduction of an nginx heap overflow and info leak (CVE-2026-42533) with two attack surfaces, debug analysis, and a full RCE chain.

binary-exploitationcode-analysisdebuggers+4
22 days ago
WebKit-UAF-ANGLE-OOB-Analysis preview

WebKit-UAF-ANGLE-OOB-Analysis

GitHub0xjohnnydev/webkit-uaf-angle-oob-analysis

Analysis of CVE-2025-43529 (WebKit UAF) + CVE-2025-14174 (ANGLE OOB) exploit chain - iOS Safari

binary-exploitationexploitationios-security+5
1031 month ago
CVE-2026-38361 preview

CVE-2026-38361

GitHuba1ohadance/cve-2026-38361

Advisory: CVE-2026-38361 multiple DoS vulnerabilities (CWE-400/CWE-670) in dash-uploader (Python/PyPI)

educationexploitationpenetration-testing+2
3 months ago
CVE-2026-65650 preview

CVE-2026-65650

GitHubswornim619/cve-2026-65650

PoC for CVE-2026-65650 - Elgg avatar upload DoS

exploitationpenetration-testingvulnerability-analysis+2
127 days ago
CVE-2021-38297-Go-wasm-Replication preview

CVE-2021-38297-Go-wasm-Replication

GitHubparas98/cve-2021-38297-go-wasm-replication
binary-exploitationctfeducation+6
2 years ago
bleeding-heart preview

bleeding-heart

GitHubpierceoneill/bleeding-heart

The Heartbleed bug `CVE-2014-0160` is a severe implementation flaw in the OpenSSL library, which enables attackers to steal data from the memory of…

cryptographyeducationexploitation+3
5 years ago
RTSPServer-Code-Execution-Vulnerability preview

RTSPServer-Code-Execution-Vulnerability

GitHubr3dxpl0it/rtspserver-code-execution-vulnerability

RTSPServer Code Execution Vulnerability CVE-2018-4013

binary-exploitationeducationexploitation+3
157 years ago
http2-bomb preview

http2-bomb

GitHubmanisso/http2-bomb

Proof of Concept (PoC) for CVE-2026-49975 – HTTP/2 server memory exhaustion attack leveraging HPACK amplification and connection retention (HTTP/2…

educationexploitationpenetration-testing+2
1 month ago
heartbleed preview

heartbleed

GitHubrouze-d/heartbleed

Simple OpenSSL TLS Heartbeat (CVE-2014-0160) Scanner and Exploit (Multiple SSL/TLS versions)

exploitationinformation-gatheringpenetration-testing+2
6 years ago
CVE-2026-49975-HTTP-2-Bomb preview

CVE-2026-49975-HTTP-2-Bomb

GitHubrenzi25031469/cve-2026-49975-http-2-bomb

Disclosed on June 3, 2026, the "HTTP/2 Bomb" is an unauthenticated remote DoS that combines an HPACK compression bomb with a Slowloris-style hold to…

information-gatheringnetwork-securitypenetration-testing+3
22 months ago
CVE-2021-23017-PoC preview

CVE-2021-23017-PoC

GitHubm507/cve-2021-23017-poc

PoC for Nginx 0.6.18 - 1.20.0 Memory Overwrite Vulnerability CVE-2021-23017

educationexploitationpenetration-testing+2
1352 years ago
Previous123Next