Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

6255 results

CVE-2025-63848

codermohammed1/cve-2025-63848

CVE disclosure for stored cross-site scripting (XSS) in SWISH Prolog up to v2.2.0, enabling arbitrary code execution and account takeover via crafted…

curated-resourceseducationexploitation+2

11 months ago

CVE-2026-26416

aksalsalimi/cve-2026-26416

Detailed write-up of CVE-2026-26416, an authorization bypass vulnerability in TCS Cognix Recon Client v3.0 allowing privilege escalation via crafted…

educationexploitationpenetration-testing+2

8 months ago

react2shell-checker

muthaiyanmani/react2shell-checker

A security vulnerability scanner for detecting the React2Shell vulnerability (CVE-2025-55182) in Next.js and React applications.

educationinformation-gatheringreconnaissance+3

10 months ago

CVE-2025-5349-Scanner

olimpiofreitas/cve-2025-5349-scanner

Python-based scanner for CVE-2025-5349 that probes IP ranges and hosts on HTTP/HTTPS ports to detect vulnerable Citrix NetScaler instances.

exploitationnetwork-mappingpenetration-testing+3

11 year ago

cisagov__check-cve-2019-19781.4142e02b

autocode07/cisagov__check-cve-2019-19781.4142e02b

Command-line utility to check if a host is vulnerable to CVE-2019-19781 (Citrix ADC/NetScaler). Scans a single host and reports vulnerability status…

exploitationpenetration-testingvulnerability-analysis+2

1 year ago

CVE-2024-40898

anilpatel199n/cve-2024-40898

This Python script checks for the presence of CVE-2024-40898, a critical vulnerability in Apache HTTP Server that may allow SSL/TLS certificate…

educationexploitationpenetration-testing+2

11 year ago

CVE-2026-30048

0xn4no/cve-2026-30048

Stored XSS vulnerability in NotChatbot WebChat <=1.5.0 with PoC payloads, impact analysis, and remediation guidance for secure chat history rendering.

exploitationpapers-researchvulnerability-analysis+2

7 months ago

CVE-2025-65345

tlekrean/cve-2025-65345

An authenticated Directory Traversal vulnerability in laravel-file-manager v3.3.1 and below allows attackers with access to the file manager…

educationexploitationinformation-gathering+3

11 months ago

CVE-2026-2964-Lab

thegenetic/cve-2026-2964-lab

Educational lab demonstrating CVE-2026-2964, a prototype pollution vulnerability in web-audio-recorder-js leading to RCE. Includes vulnerable and…

code-analysiseducationexploitation+4

7 months ago

CVE-2026-21876

cves-labs/cve-2026-21876

Docker-based lab environment for reproducing and exploiting CVE-2026-1357, with step-by-step setup and Burp Suite exploitation guidance.

educationexploitationlabs-practice+2

6 months ago

Apache-Authentication-Flaw-Research-CVE-2024-38476-

abanop22333/apache-authentication-flaw-research-cve-2024-38476-

Technical research paper analyzing CVE-2024-38476, a critical Apache HTTP Server vulnerability enabling SSRF, information disclosure, and potential…

educationincident-responsepapers-research+3

9 months ago

CVE-2026-25596

lagathos/cve-2026-25596

Proof-of-concept for a stored XSS vulnerability in InvoicePlane 1.7.0 via the product unit name field, including vulnerable code locations and…

exploitationpenetration-testingvulnerability-analysis+2

7 months ago

CVE-2026-25595

lagathos/cve-2026-25595

Stored XSS vulnerability in InvoicePlane 1.7.0 via unsanitized invoice number field, with proof-of-concept and remediation details.

educationexploitationpapers-research+3

7 months ago

MajorDoMo-CVE-2026-27179

p3nt3st3r-star/majordomo-cve-2026-27179

Proof-of-concept and scanner for CVE-2026-27179, demonstrating vulnerability behavior in controlled environments for academic research and defensive…

exploitationpenetration-testingvulnerability-analysis+2

7 months ago

leaflet-cve-2025-69993

pierfrancescoconti/leaflet-cve-2025-69993

Proof-of-concept for CVE-2025-69993: Cross-Site Scripting in Leaflet's bindPopup() method. Includes advisory, impact analysis, and a demo Angular…

educationlabs-practicevulnerability-analysis+2

6 months ago

wargame_Re-LS

m0d0ri205/wargame_re-ls

CTF challenge exploiting CVE-2025-0184 DOCX SSRF vulnerability to access internal admin service and retrieve a flag. Includes exploit generator and…

ctfeducationexploitation+3

11 year ago

React-Router-CVE-2025-61686-

kai-one001/react-router-cve-2025-61686-

Detailed analysis of CVE-2025-61686, a path traversal vulnerability in React Router's file session storage, including root cause, attack scenarios,…

code-analysiseducationexploitation+3

9 months ago

React-Next-Scanner

furkankayapinar/react-next-scanner

CVE-2025-55182 and CVE-2025-66478

api-securitypenetration-testingstatic-analysis+3

10 months ago

Previous 1…9899100 Next