Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
421 results
CVE-2026-52943 preview

CVE-2026-52943

GitHubvn-lazyming/cve-2026-52943

This is a Linux Kernel Local Privilege Escalation PoC code for CVE-2026-52943 a use-after-free in skbuff.c, my first 0day found by me in linux kernel

binary-exploitationeducationexploitation+3
8
1 month ago
FreeMOCA preview

FreeMOCA

GitHubiqsec-lab/freemoca
android-securityeducationmachine-learning+3
1 month ago
CVE-2026-20637-AppleSEPKeyStore-UAF preview

CVE-2026-20637-AppleSEPKeyStore-UAF

GitHub0xjohnnydev/cve-2026-20637-applesepkeystore-uaf

CVE-2026-20637: AppleSEPKeyStore Use-After-Free — iOS/macOS kernel vulnerability (patched in 26.4)

binary-exploitationexploitationios-security+2
551 month ago
IKEV2-POC preview

IKEV2-POC

GitHubepsilonpointori/ikev2-poc

IKEv2, ikeext.dll, CVE-2026-33824, double free, heap grooming, ROP, SKF fragmentation, Windows exploit, anti-debug, obfuscation, API hooking,…

binary-exploitationcommand-and-controlexploit-frameworks+3
41 month ago
By-Poloss..-..CVE-2026-12432-PoC preview

By-Poloss..-..CVE-2026-12432-PoC

GitHubpolosss/by-poloss..-..cve-2026-12432-poc

WP Full Stripe Free <= 8.4.3 - Missing Authorization

exploitationmisconfigurationpenetration-testing+3
11 month ago
mutillidae preview

mutillidae

GitHubwebpwnized/mutillidae

OWASP Mutillidae II is a free, open-source, deliberately vulnerable web application providing a target for web-security training. This is an…

ctfeducationlabs-practice+3
1.5k1 month ago
nginx-rift-detector preview

nginx-rift-detector

GitHublimo57640-crypto/nginx-rift-detector

Free NGINX Rift CVE-2026-42945 detector for version, rewrite config, ASLR, crash logs, and exploitation indicators.

configuration-auditingdefensive-toolsincident-response+3
1 month ago
CVE-2023-20938-poc preview

CVE-2023-20938-poc

GitHubbyt3quester/cve-2023-20938-poc
android-securitybinary-exploitationctf+3
12 months ago
cve-2024-1086-writeup preview

cve-2024-1086-writeup

GitHubluisbuilds-data/cve-2024-1086-writeup
binary-exploitationeducationexploitation+2
2 months ago
CVE-2026-43655-AppleM2ScalerCSCDriver-UAF preview

CVE-2026-43655-AppleM2ScalerCSCDriver-UAF

GitHubsomisomair/cve-2026-43655-applem2scalercscdriver-uaf

Public disclosure for CVE-2026-43655 AppleM2ScalerCSCDriver use-after-free

binary-exploitationexploitationhardware-security+4
2 months ago
CVE-2026-11551-PoC preview

CVE-2026-11551-PoC

GitHububaydev/cve-2026-11551-poc
authenticationcode-analysisexploitation+5
2 months ago
CVE-2026-42530 preview

CVE-2026-42530

GitHubv4ltonn/cve-2026-42530

Scanner PoC for CVE-2026-42530 -- nginx 1.31.0-1.31.1 HTTP/3 QPACK encoder stream Use-After-Free (CVSS 9.2)

exploitationfuzzingnetwork-security+2
42 months ago
CVE-2026-42530 preview

CVE-2026-42530

GitHub0xblackash/cve-2026-42530

CVE-2026-42530

educationexploitationnetwork-security+3
22 months ago
CVE-2026-46215-POC preview

CVE-2026-46215-POC

GitHub0xcyberstan/cve-2026-46215-poc
binary-exploitationctfeducation+4
112 months ago
CVE-2025-49132 preview

CVE-2025-49132

GitHubvimmwy/cve-2025-49132

A script that gives you the credentials of a Pterodactyl panel vulnerable to CVE-2025-49132

exploitationinformation-gatheringpassword-attacks+3
12 months ago
CVE-2025-49132 preview

CVE-2025-49132

GitHubaleewyy/cve-2025-49132

Minimal proof-of-concept exploit for CVE-2025-49132 in Pterodactyl panels; reads PHP files to extract database credentials and enable unauthorized…

database-securityexploitationinformation-gathering+3
2 months ago
Glass preview

Glass

GitHubazw413/glass

Glass - a fast and free IDA Pro alternative

android-securitybinary-analysisdebuggers+7
1932 months ago
obsidian-osint-templates preview

obsidian-osint-templates

GitHubwebbreacher/obsidian-osint-templates

These templates are suggestions of how the Obsidian notetaking tool can be used during an OSINT investigation. The example data in those files should…

curated-resourceseducationinformation-gathering+2
8022 months ago
Previous1…678…24Next