Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Categories

Code Analysis

Static and dynamic code analysis, SAST, DAST, and code review tools.

Kitploit recommended

Top tools

10 selected
semgrep preview#1

semgrep

GitHubsemgrep/semgrep
16.2k8 days ago
codeql preview#2

codeql

GitHubgithub/codeql
10.3k11h 36m ago
sonarqube preview#3

sonarqube

GitHubsonarsource/sonarqube
11.2k9h 10m ago
infer preview#4

infer

GitHubfacebook/infer
15.7k2 days ago
ghidra preview#5

ghidra

GitHubnationalsecurityagency/ghidra
71.1k9h 43m ago
radare2 preview#6

radare2

GitHubradareorg/radare2
24.5k9h 13m ago
capa preview#7

capa

GitHubmandiant/capa
6.1k19h 13m ago
bandit preview#8

bandit

GitHubpycqa/bandit
8.2k11 days ago
gosec preview#9

gosec

GitHubsecurego/gosec
8.9k3 days ago
bearer preview#10

bearer

GitHubbearer/bearer
2.7k7 days ago
NewestRelevanceMost popularRecently updated
2198 results
CVE-2026-20251 preview

CVE-2026-20251

GitHubreactivezero/cve-2026-20251

CVE-2026-20251 — Splunk Secure Gateway jsonpickle deserialization RCE (CVSS 8.8) | ReactiveZero Security Research

vulnerability-analysiscode-analysisexploitation+5
34 months ago
CVE-2026-51992 preview

CVE-2026-51992

GitHubtheliimbo/cve-2026-51992

Proof-of-concept and detailed writeup for CVE-2026-51992, an SQL injection vulnerability in ClickHouse PostgreSQL dictionaries allowing arbitrary…

vulnerability-analysiscode-analysisexploitation+3
3 months ago
CVE-2026-64638 preview

CVE-2026-64638

GitHubdungsocool/cve-2026-64638

Proof-of-concept exploit for CVE-2026-64638: reflected XSS in WordPress login chained with DOM clobbering to achieve admin account takeover and…

phishing-toolsvulnerability-analysiscode-analysis+4
3 months ago
VulnScan preview

VulnScan

GitHubtorchiachristian/vulnscan

Scanner di vulnerabilità web in Python: SQL injection, XSS , path traversal, security headers. Crawler, dashboard Flask, report in un PDF

static-analysisvulnerability-scannersweb-vulnerability-scanners+5
23 months ago
CVE-2020-24750 preview

CVE-2020-24750

GitHubal1ex/cve-2020-24750

CVE-2020-24750

vulnerability-analysiscode-analysisexploitation+2
14 months ago
halo-2.25.4-CVE-2026-67919 preview

halo-2.25.4-CVE-2026-67919

GitHubunpredictable21/halo-2.25.4-cve-2026-67919

Demonstrates an authenticated remote code execution vulnerability in Halo 2.25.4 via unvalidated plugin URI installation, including technical…

vulnerability-analysiscode-analysisexploitation+2
2 months ago
CVE-2021-43811 preview

CVE-2021-43811

GitHubs-index/cve-2021-43811

awslabs/sockeye Code injection via unsafe YAML loading CVE-2021-43811

payload-generationvulnerability-analysiscode-analysis+3
24 years ago
CVE-2026-0303 preview

CVE-2026-0303

GitHubyonliud/cve-2026-0303

Checkov PoC: arbitrary code execution through auto-loaded configuration and unsigned external Python checks.

static-analysisvulnerability-analysiscode-analysis+5
1 month ago
CVE-2026-52832-PoC-exploit-nuclio-dashboard preview

CVE-2026-52832-PoC-exploit-nuclio-dashboard

GitHubmdvpat/cve-2026-52832-poc-exploit-nuclio-dashboard

Nuclio Dashboard (NOP mode) accepts unauthenticated POST /api/functions. The spec.handler field isn't path-validated, so…

container-securityvulnerability-analysiscode-analysis+3
3 months ago
CVE-2022-37705 preview

CVE-2022-37705

GitHubmaherazzouzi/cve-2022-37705

Amanda 3.5.1 second LPE.

privilege-escalationstatic-analysisvulnerability-analysis+4
34 years ago
CVE-2025-49132 preview

CVE-2025-49132

GitHubpopyue/cve-2025-49132

CVE For Pterodactyl (For Study and Education)

vulnerability-analysiscode-analysisexploitation+4
48 months ago
CVE-2026-25731 preview

CVE-2026-25731

GitHubdxleryt/cve-2026-25731

Proof of Concept for a Server-Side Template Injection (SSTI) vulnerability in Calibre’s Templite engine (GHSA-xrh9-w7qx-3gcc). Demonstrates arbitrary…

vulnerability-analysiscode-analysisexploitation+2
49 months ago
CVE-2026-13157 preview

CVE-2026-13157

GitHubminhhk68/cve-2026-13157

Proof of concept and root-cause analysis for an authenticated arbitrary file upload in WordPress Theme Demo Import leading to remote code execution…

vulnerability-analysiscode-analysisexploitation+4
3 months ago
POC-CVE-2025-66034 preview

POC-CVE-2025-66034

GitHubv3cn4x00/poc-cve-2025-66034

Automated exploit for CVE-2025-66034, chaining path traversal and XML injection in fontTools varLib to achieve unauthenticated remote code execution…

payload-generationvulnerability-analysiscode-analysis+5
47 months ago
CVE-2026-49097 preview

CVE-2026-49097

GitHuboscerd/cve-2026-49097

PoC reproducer for CVE-2026-49097 (Apache Camel camel-irc): the non-Camel-prefixed irc.sendTo header escapes the HTTP header filter and overrides the…

vulnerability-analysiscode-analysisexploitation+3
3 months ago
CVE-2026-19264 preview

CVE-2026-19264

GitHubdarklycn1976/cve-2026-19264

CVE-2026-19264 - Critical unauthenticated path traversal to full instance takeover in Postiz (< 2.22.1). Technical writeup: decode-order bypass,…

vulnerability-analysiscode-analysisexploitation+3
2 months ago
CVE-2023-6553 preview

CVE-2023-6553

GitHubdungsocool/cve-2023-6553

Proof-of-concept exploit and technical write-up for CVE-2023-6553, an unauthenticated PHP file inclusion vulnerability enabling remote code execution…

vulnerability-analysiscode-analysisexploitation+3
3 months ago
CVE-2026-5029-Exploit preview

CVE-2026-5029-Exploit

GitHub0x00phantom-hat/cve-2026-5029-exploit

Proof-of-concept exploit for CVE-2026-5029, delivering unauthenticated remote code execution via the run-code MCP tool on exposed HTTP endpoints.…

vulnerability-scannerscode-analysisexploitation+3
3 months ago
Previous1…515253…100Next