Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Categories

Code Analysis

Static and dynamic code analysis, SAST, DAST, and code review tools.

Kitploit recommended

Top tools

10 selected
semgrep preview#1

semgrep

GitHubsemgrep/semgrep
16.2k6 days ago
codeql preview#2

codeql

GitHubgithub/codeql
10.3k15h 29m ago
sonarqube preview#3

sonarqube

GitHubsonarsource/sonarqube
11.2k20h 47m ago
infer preview#4

infer

GitHubfacebook/infer
15.7k2 days ago
ghidra preview#5

ghidra

GitHubnationalsecurityagency/ghidra
71.1k1 day ago
radare2 preview#6

radare2

GitHubradareorg/radare2
24.5k9h 30m ago
capa preview#7

capa

GitHubmandiant/capa
6.1k1 day ago
bandit preview#8

bandit

GitHubpycqa/bandit
8.2k9 days ago
gosec preview#9

gosec

GitHubsecurego/gosec
8.9k1 day ago
bearer preview#10

bearer

GitHubbearer/bearer
2.7k5 days ago
NewestRelevanceMost popularRecently updated
2188 results
MUT-BC-SS-01 preview

MUT-BC-SS-01

GitHubdedellix/mut-bc-ss-01

Mutation testing on X.509 Certificate Validation IN OpenSSL v.1.1.1h, based on CVE-2021-3450.

vulnerability-analysiscode-analysisfuzzing+3
4 months ago
DrupalCVE-2018-7602 preview

DrupalCVE-2018-7602

GitHubcyberharsh/drupalcve-2018-7602

Exploit for Drupal CVE-2018-7602 remote code execution vulnerability via double URL encoding bypass of sanitize() filter. Includes Docker-based lab…

vulnerability-analysiscode-analysisexploitation+3
16 years ago
CVE-2026-34038 preview

CVE-2026-34038

GitHubthemehackers/cve-2026-34038

CVE-2026-34038: Authenticated Remote Command Injection in Coolify

vulnerability-analysiscode-analysisexploitation+3
14 months ago
cve-2026-25541-fuel-analysis preview

cve-2026-25541-fuel-analysis

GitHubtrajanox/cve-2026-25541-fuel-analysis

CVE-2026-25541 impact analysis for Fuel infrastructure (bytes crate integer overflow)

vulnerability-analysiscode-analysissupply-chain-security+3
14 months ago
CVE-2020-1947 preview

CVE-2020-1947

GitHubstarkchristmas/cve-2020-1947

Proof-of-concept and analysis for CVE-2020-1947, a YAML deserialization remote code execution vulnerability in Apache ShardingSphere UI, including…

vulnerability-analysiscode-analysisexploitation+3
16 years ago
gin-vulnerable preview

gin-vulnerable

GitHubdannyendortest/gin-vulnerable

Demo consumer for gin v1.7.0 (CVE-2023-29401) — Context.FileAttachment with user input. endorctl scan target.

vulnerability-analysiscode-analysisweb-application-exploitation+3
5 months ago
CVE-2025-6440 preview

CVE-2025-6440

GitHubsahmsec/cve-2025-6440

CVE-2025-6440

vulnerability-analysiscode-analysisexploitation+4
16 months ago
nginx-rift-scanner preview

nginx-rift-scanner

GitHubsimota/nginx-rift-scanner

Detect-only scanner for CVE-2026-42945 (NGINX Rift), a heap overflow in ngx_http_rewrite_module. Version detection + nginx.conf pattern analysis.…

static-analysisvulnerability-scannersvulnerability-analysis+3
15 months ago
nextjs-cve-2026-23870-checker preview

nextjs-cve-2026-23870-checker

GitHubemresandikci/nextjs-cve-2026-23870-checker

Checker and fixer for all 13 vulnerabilities in the Next.js May 2026 security release (CVE-2026-23870)

vulnerability-scannerscode-analysisweb-security+3
15 months ago
CVE-2023-27363 preview

CVE-2023-27363

GitHubqwqdanchun/cve-2023-27363

Proof-of-concept exploit for CVE-2023-27363, demonstrating a specific vulnerability with automated exploitation logic for security testing and…

vulnerability-analysiscode-analysisexploitation+2
13 years ago
Vlun-Agent-X preview

Vlun-Agent-X

GitHubrenweimeng/vlun-agent-x

VulnAgent-X: A Layered Agentic Framework for Repository-Level Vulnerability Detection

static-analysisdynamic-analysis-sandboxingvulnerability-analysis+4
17 months ago
CVE-2024-39306 preview

CVE-2024-39306

GitHubapena-ba/cve-2024-39306

Proof-of-concept exploit for CVE-2024-39306, a SQL injection vulnerability in ChurchCRM <= 5.8.0 that allows authenticated remote code execution.…

vulnerability-analysiscode-analysisexploitation+2
12 years ago
nextjs-security-scanner preview

nextjs-security-scanner

GitHubaliksir/nextjs-security-scanner

Bash script to detect CVE-2025-55182 (React2Shell) and credential exposure in Next.js projects. Zero dependencies.

vulnerability-scannerscode-analysisweb-security+3
15 months ago
wordpress-batch-rce-lab preview

wordpress-batch-rce-lab

GitHubzenithgenius/wordpress-batch-rce-lab

CVE-2026-63030: WordPress REST batch-endpoint array desync. Mechanism, detection, mitigation, and a safe reproduction lab.

vulnerability-analysiscode-analysisexploitation+6
13 months ago
CVE-2023-34598 preview

CVE-2023-34598

GitHublserein/cve-2023-34598

Gibbon本地文件包含漏洞（CVE-2023-34598）

vulnerability-analysiscode-analysisexploitation+2
13 years ago
struts1-patch preview

struts1-patch

GitHubricedu/struts1-patch

struts1 CVE-2014-0114 classLoader manipulation vulnerability patch

static-analysisvulnerability-analysiscode-analysis+2
112 years ago
CVE-2021-32648 preview

CVE-2021-32648

GitHubdaftspunk/cve-2021-32648

Provides a manual patch for October CMS authentication bypass vulnerabilities CVE-2021-32648 and CVE-2021-29487 by converting loose to strict…

vulnerability-analysiscode-analysisweb-security+1
14 years ago
CVE-2025-30921 preview

CVE-2025-30921

GitHubdottak/cve-2025-30921

PoC of CVE-2025-30921

vulnerability-analysiscode-analysisexploitation+3
11 year ago
Previous1…717273…100Next