Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
41 results
CVE-2026-75898 preview

CVE-2026-75898

GitHubt3bik/cve-2026-75898

Proof-of-concept for CVE-2026-75898, an SSRF in RAGFlow's Invoke component. Demonstrates the vulnerability with unmodified source, includes E2E…

educationexploitationpapers-research+2
2 days ago
DInvoke preview

DInvoke

GitHubthewover/dinvoke

Dynamically invoke arbitrary unmanaged code from managed code without PInvoke.

adversarial-attackpayload-developmentpost-exploitation+1
7943 years ago
DInvoke_rs preview

DInvoke_rs

GitHubkudaes/dinvoke_rs

Dynamically invoke arbitrary unmanaged code

binary-analysisids-ips-evasionpayload-development+3
3661 month ago
Outpacket preview

Outpacket

GitHubn00py/outpacket

This cheatsheet maps common impacket workflows to their modern alternatives

authenticationcurated-resourceseducation+6
3033 months ago
Invoke-ArgFuscator preview

Invoke-ArgFuscator

GitHubwietze/invoke-argfuscator

Invoke-ArgFuscator is an open-source, cross-platform PowerShell module that helps generate obfuscated command-lines for common system-native…

curated-resourcesids-ips-evasionpayload-generation+2
2806 months ago
Locksmith preview

Locksmith

GitHubjakehildreth/locksmith

A small tool built to find and fix common misconfigurations in Active Directory Certificate Services.

configuration-auditingdefensive-toolsmisconfiguration+2
1.6k28 days ago
Invoke-DCSync preview

Invoke-DCSync

GitHubal1ex/invoke-dcsync

Invoke-DCSync

exploitationlateral-movementpassword-attacks+3
15 years ago
CVE-2025-54100 preview

CVE-2025-54100

GitHubxiaolvchen/cve-2025-54100

CVE-2025-54100(PowerShell 远程代码执行漏洞)

educationexploitationpayload-development+3
17 months ago
CVE-2024-4577_PowerShell preview

CVE-2024-4577_PowerShell

GitHubtntrock/cve-2024-4577_powershell

使用PowsrShell掃描CVE-2024-4577

educationexploitationpenetration-testing+3
1 year ago
CVE-2024-4577 preview

CVE-2024-4577

GitHubianthinus/cve-2024-4577

Proof-of-concept exploit for CVE-2024-4577, a PHP CGI argument injection vulnerability enabling remote code execution via crafted HTTP requests.

code-analysisexploitationpayload-generation+3
1 year ago
Invoke-SelfSignedWebRequest preview

Invoke-SelfSignedWebRequest

GitHub0sm0s1z/invoke-selfsignedwebrequest

This repo exists as a quick and dirty arsenal of methods and scripts to subvert .NET SSL/TLS certificate validation in PowerShell and press on with…

command-and-controlids-ips-evasionpenetration-testing+4
129 years ago
Invoke-DumpMDEConfig preview

Invoke-DumpMDEConfig

GitHubblacksnufkin/invoke-dumpmdeconfig

PowerShell script to dump Microsoft Defender Config, protection history and Exploit Guard Protection History (no admin privileges required )

configuration-auditingdefensive-toolsforensics+3
1552 years ago
jsonorg-fp1 preview

jsonorg-fp1

GitHubscabench/jsonorg-fp1

simple application with a (unreachable!) CVE-2022-45688 vulnerability

educationpapers-researchstatic-analysis+2
2 years ago
CVE-2025-48827 preview

CVE-2025-48827

GitHubsh4den/cve-2025-48827

This repository contains a proof-of-concept exploit for CVE-2025-48827, a critical authentication bypass vulnerability affecting vBulletin…

authenticationeducationexploitation+3
12 months ago
CVE-2025-7771 preview

CVE-2025-7771

GitHubgabriel-lacorte/cve-2025-7771

Arbitrary Function Call Exploit using the ThrottleStop driver

binary-exploitationexploitationprivilege-escalation+2
126 months ago
ABC preview

ABC

GitHubhzachev/abc

CVE-2017-11882

command-and-controlexploitationpayload-generation+2
8 years ago
printix-CVE-2022-29554 preview

printix-CVE-2022-29554

GitHubcomparedarray/printix-cve-2022-29554

A "Mishandling of Input to API" or "Exposed Dangerous Method or Function" vulnerability in PrintixService.exe, in Kofax Printix's "Printix Secure…

api-securityexploitationmisconfiguration+3
34 years ago
CVE-2025-53691 preview

CVE-2025-53691

GitHubblueisbeautiful/cve-2025-53691

Remote code execution (RCE) through insecure deserialization

exploitationpayload-developmentpenetration-testing+2
0 years ago
Previous123Next