Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

1540 results

CVE-2026-47883

daehyuh/cve-2026-47883

Minimal proof-of-concept for Spring Framework UrlHandlerFilter open redirect (CVE-2026-47883), demonstrating crafted double-slash requests produce…

exploitationvulnerability-analysisweb-application-exploitation+1

26 days ago

CVE-2014-4481

feliam/cve-2014-4481

Apple CoreGraphics framework fails to validate the input when parsing CCITT group 3 encoded data resulting in a heap overflow condition. A small heap…

binary-exploitationexploitationios-security+3

511 years ago

CVE-2025-48595-Exploit

xiaobailovesstirring/cve-2025-48595-exploit

CVE-2025-48595 Android Framework Integer Overflow PoC - 优化版

android-securitybinary-exploitationexploitation+2

24 days ago

Project-CVE-2026-75604

e4zyy/project-cve-2026-75604

Python-based exploitation framework for CVE-2026-75604, enabling authorized pentesters to validate Next.js Windows cache traversal vulnerabilities…

exploitationpayload-developmentpenetration-testing+4

221 days ago

R4venzCl4w

sc4rfurry/r4venzcl4w

A Modular Framework for Pentesters and Bug Hunters written in python.

information-gatheringnetwork-mappingosint+4

51 year ago

Spring4Shell

loneyers/spring4shell

Spring4Shell , Spring Framework RCE (CVE-2022-22965) , Burpsuite Plugin

api-security-testingexploitationpenetration-testing+3

44 years ago

CVE-2026-6875-PoC-Exploit

tc4dy/cve-2026-6875-poc-exploit

CVE-2026-6875 ServiceNow Pre-Auth RCE Framework 🔥 JS Injection → Sandbox Escape → RCE → Root. Features: --detect, --exec, reverse/interactive shell,…

exploitationlateral-movementpenetration-testing+7

31 month ago

offsec-osgi-exploits

visionspacetec/offsec-osgi-exploits

Collection of exploits targeting OSGi Java framework versions 3.1.1–3.20 for penetration testing and vulnerability exploitation.

exploitationpenetration-testingred-teaming+2

32 years ago

Zhilly

sacriphanius/zhilly

🛡️ AI-powered portable cybersecurity & pentesting assistant built on ESP32-S3 (LilyGO T-Embed CC1101 & T-Watch S3). Features voice-controlled RF…

embedded-systems-securityhardware-hackingiot-security+6

21 month ago

poc-2025-9074

xwpdx0/poc-2025-9074

Docker API CVE-2025-9074 PoC (Proof-Of-Concept). A sophisticated exploitation framework for CVE-2025-9074, targeting unauthenticated Docker API…

cloud-infrastructure-securitycommand-and-controlcontainer-security+7

49 months ago

CVE-2025-68664-LangGrinch-PoC

ak-cybe/cve-2025-68664-langgrinch-poc

A testing framework to identify and demonstrate deserialization vulnerabilities in LangChain Core (<0.3.81). Educational use only

ai-securitycode-analysiseducation+6

38 months ago

CVE-2025-48595-Android-Framework-Integer-Overflow-

fevar54/cve-2025-48595-android-framework-integer-overflow-

PoC de CVE-2025-48595: desbordamiento de entero en multiples ubicaciones del Framework de Android.

android-securitybinary-exploitationexploitation+3

13 months ago

FortiWeb-cve-2025-64446-RCE-exploit

cerberusmrxi/fortiweb-cve-2025-64446-rce-exploit

Security research tool for FortiWeb CVE-2025-64446 vulnerability. Automated exploitation framework with advanced logging, real-time metrics, proxy…

exploitationinformation-gatheringpenetration-testing+3

21 month ago

AEMPWN

zoomdbz/aempwn

CVE-2025-54253 | CVE-2025-54254 | Adobe Experience Manager Forms XXE → RCE Framework

exploitationpayload-developmentpenetration-testing+3

47 months ago

cve-2025-55182-scanner

xkillbit/cve-2025-55182-scanner

Passive vulnerability scanner for CVE-2025-55182 and CVE-2025-66478, detecting unauthenticated RCE in React Server Components via framework…

exploitationinformation-gatheringpenetration-testing+3

49 months ago

abyss-c2

flags-alt/abyss-c2

Full-stack C2 framework for IoT exploitation (CVE-2020-25078) with real-time web panel, multi-source target acquisition, vulnerability scanning,…

command-and-controleducationexploit-frameworks+7

24 months ago

VQ-RefluxCore

vulnquest58/vq-refluxcore

is an advanced security research framework designed to model, analyze, and demonstrate Local Privilege Escalation (LPE) mechanics associated with…

binary-exploitationctfeducation+5

1 month ago

BitLock-Crypto-Research

dereeqw/bitlock-crypto-research

Framework de investigación sobre criptovirología avanzada. Implementación de Handshake ECDHE, cifrado autenticado AES-GCM y ejecución fileless en…

command-and-controlcryptographyeducation+6

46 months ago

Previous 1…686970…86 Next