Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

13322 results

CVE-2025-29927-exploit

nekicj/cve-2025-29927-exploit

next.js CVE-2025-29927 vulnerability exploit

exploitationpenetration-testingvulnerability-analysis+1

1 year ago

x-stream__xstream_CVE-2020-26217_1-4-14-java77

shoucheng3/x-stream__xstream_cve-2020-26217_1-4-14-java77

Java library for XML serialization and deserialization, with a focus on the CVE-2020-26217 deserialization vulnerability exploit.

code-analysisdynamic-analysis-sandboxingexploitation+3

1 year ago

Settings_10-r33_CVE-2020-0394_02

pazhanivel07/settings_10-r33_cve-2020-0394_02

Android Settings app vulnerability exploit targeting CVE-2020-0394 for privilege escalation testing on Android 10 devices.

android-securitybinary-exploitationexploitation+2

4 years ago

log4shell-example

chilit-nl/log4shell-example

The goal of this project is to demonstrate the log4j cve-2021-44228 exploit vulnerability in a spring-boot setup, and to show how to fix it.

code-analysiseducationexploitation+3

4 years ago

libvirt-CVE-2014-1447

tagatac/libvirt-cve-2014-1447

Libvirt - Unauthenticated DoS Vulnerability (Exploit & Time Randomization to Thwart It)

cloud-securityexploitationpenetration-testing+1

4 years ago

CVE-2023-50387

pablodiz/cve-2023-50387

DNS vulnerability exploit for CVE-2023-50387 with automated RRSIG key generation and Docker-based attack simulation against vulnerable and patched…

dns-analysiseducationexploitation+3

1 year ago

CVE-2019-6447-ESfile-explorer-exploit

febinrev/cve-2019-6447-esfile-explorer-exploit

ES File Explorer v4.1.9.7.4 Open port vulnerability exploit. CVE-2019-6447

android-securityexploitationmobile-security+2

5 years ago

CVE-2024-23692_Exploit

999gawkboyy/cve-2024-23692_exploit

HFS 2.3m SERVER RCE Vulnerability exploit

educationexploitationpenetration-testing+2

1 year ago

CVE-2021-43008-AdminerRead

p0dalirius/cve-2021-43008-adminerread

Exploit tool for CVE-2021-43008 Adminer 1.0 up to 4.6.2 Arbitrary File Read vulnerability

exploitationinformation-gatheringpenetration-testing+3

852 years ago

Cisco-UCS-Manager-2.2-1d-Remote-Command-Execution

fuzzlove/cisco-ucs-manager-2.2-1d-remote-command-execution

Cisco Bug: CSCur90888 - Cisco UCS Manager Remote Command Execution Vulnerability

exploitationpenetration-testingred-teaming+2

5 years ago

CVE-2024-45519

p33d/cve-2024-45519

SMTP vulnerability scanner and exploit script that checks for CVE-2024-45519 and establishes a reverse shell on vulnerable servers.

exploitationpayload-generationpenetration-testing+3

422 years ago

spring4shell-exploit-poc

fourcorelabs/spring4shell-exploit-poc

Exploit a vulnerable Spring application with the Spring4Shell (CVE-2022-22965) Vulnerability.

educationexploitationpayload-generation+3

444 years ago

CVE-2017-5123

0x5068656e6f6c/cve-2017-5123

Exploits Linux kernel CVE-2017-5123 to achieve local privilege escalation; includes C source, static build instructions, and a write-up on the…

binary-exploitationeducationexploitation+1

58 years ago

Sync_Breeze_Enterprise_10_6_24_-DOS

egebalci/sync_breeze_enterprise_10_6_24_-dos

Sync Breeze Enterprise 10.6.24 - Denial Of Service Vulnerability

exploitationvulnerability-analysisweb-application-exploitation

28 years ago

CVE-2024-6387-Updated-x64bit

principalanthony/cve-2024-6387-updated-x64bit

Private x64 RCE exploit for CVE-2024-6387 [02.07.2024] from exploit.in

command-and-controlexploitationpayload-generation+3

32 years ago

CVE-2022-33891

drlinuxofficial/cve-2022-33891

CVE-2022-33891 Exploit For Apache Spark

exploitationpayload-generationpenetration-testing+3

14 years ago

CVE-2026-41940_exploit

george1-adel/cve-2026-41940_exploit

Python exploit for CVE-2026-41940, a critical CRLF injection in cPanel/WHM cpsrvd that bypasses authentication and 2FA, granting root-level access…

authentication-authorizationexploitationpayload-development+4

13 months ago

CVE-2021-4773

alexs18/cve-2021-4773

Step-by-step tutorial demonstrating how to set up a vulnerable Apache 2.4.49 environment and exploit CVE-2021-41773 path traversal using Kali Linux…

educationexploitationlabs-practice+3

11 months ago

Previous 123…100 Next