Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

86 results

CVE-2015-7214

llamakko/cve-2015-7214

Proof-of-concept exploit for CVE-2015-7214 demonstrating Same-Origin Policy bypass in Firefox 42.0 via data and view-source URIs, with local and…

exploitationpenetration-testingvulnerability-analysis+2

10 years ago

cve-2018-12386

hydra3evil/cve-2018-12386

CVE-2018-12386 - Firefox Sandboxed RCE Exploit for Linux (Firefox <v62.0.3)

binary-exploitationeducationexploitation+4

27 years ago

React2Shell

muhammaduwais/react2shell

A Firefox extension for detecting React2Shell vulnerabilities (CVE-2025-55182 & CVE-2025-66478) in web applications.

educationinformation-gatheringpenetration-testing+2

27 months ago

MozCache

busindre/mozcache

Simple shell script to perform forensic analysis of the Mozilla-Browsers cache (Firefox, Iceweasel and Seamonkey).

digital-forensicsforensics

18 years ago

CVE-2024-4367-hands-on

penguincabinet/cve-2024-4367-hands-on

Hands-on lab to learn CVE-2024-4367 (Firefox PDF.js RCE) with PoC generation, vulnerable browser launch, and patched version verification.

educationexploitationlabs-practice+2

1 year ago

Archived

CVE-2022-28281

0vercl0k/cve-2022-28281

PoC for CVE-2022-28281 a Mozilla Firefox Out of bounds write.

binary-exploitationexploitationvulnerability-analysis+1

734 years ago

cve-2024-4367-PoC-fixed

zombie-kaiser/cve-2024-4367-poc-fixed

PDF.js是由Mozilla维护的基于JavaScript的PDF查看器。此漏洞允许攻击者在打开恶意 PDF 文件后立即执行任意 JavaScript 代码。这会影响所有 Firefox 用户（<126），因为 Firefox 使用 PDF.js 来显示 PDF 文件，但也严重影响了许多基于…

exploitationpayload-generationvulnerability-analysis+1

122 years ago

CVE-2019-9791

sp0pielar/cve-2019-9791

Exploit chain for CVE-2019-9791 & CVE-2019-11708 against firefox 65.0 on windows 64bit

exploitationpayload-developmentpenetration-testing+1

25 years ago

CVE-2025-4322-Exploit

indominusrexes/cve-2025-4322-exploit

Critical CVE-2025-4322 exploit for Firefox on Windows enabling sandbox escape and arbitrary code execution. Includes download link and technical…

exploitationmalware-analysispenetration-testing+2

11 year ago

heartbleed-extention

proactiverisk/heartbleed-extention

A firefox extension and checker for CVE-2014-0160

exploitationpenetration-testingvulnerability-scanners+1

112 years ago

Trespasser

defineid/trespasser

CVE-2026-74970, Fission site isolation bypass in Firefox WebRender

exploitationvulnerability-analysisweb-application-exploitation+1

25 days ago

CVE-2022-26485

mistymntncop/cve-2022-26485

Proof-of-concept exploit for CVE-2022-26485 targeting Firefox 78.0 on Windows, demonstrating a remote code execution vulnerability in the browser's…

exploitationpenetration-testingvulnerability-analysis+1

173 years ago

CVE-2019-17026

lsw29475/cve-2019-17026

Proof-of-concept exploit for CVE-2019-17026, a Firefox vulnerability enabling arbitrary code execution via crafted JavaScript.

exploitationvulnerability-analysisweb-application-exploitation

35 years ago

cve-2018-12386

0xlyte/cve-2018-12386

CVE-2018-12386 - Firefox Sandboxed RCE Exploit for Linux (Firefox <v62.0.3)

binary-exploitationeducationexploitation+2

26 years ago

Previous 1 2 3 45Next