Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Capture The Flag platforms, challenge creation, solving tools, and competitive cybersecurity frameworks.

Kitploit recommended

Top tools

10 selected

pwntools

gallopsled/pwntools

13.6k2 days ago

pwndbg

pwndbg/pwndbg

10.8k1 day ago

gef

hugsy/gef

8.3k2 months ago

RsaCtfTool

rsactftool/rsactftool

7.1k12 days ago

CyberChef

gchq/cyberchef

35.6k0 days ago

Ciphey

bee-san/ciphey

21.6k17h 23m ago

how2heap

shellphish/how2heap

8.8k5 months ago

ROPgadget

jonathansalwan/ropgadget

4.5k4 months ago

Ropper

sashs/ropper

2.1k2 months ago

#10

zsteg

zed-0xff/zsteg

1.6k9 months ago

Newest Relevance Most popular Recently updated

1090 results

CVE-2025-64512_PoC

jinook-kim/cve-2025-64512_poc

Python PoC for CVE-2025-64512, a pdfminer.six pickle deserialization RCE. Generates gzipped pickle payloads and polyglot PDFs, then delivers them to…

payload-generationvulnerability-analysisexploitation+5

1 month ago

CVE-2026-44578-next-js-ssrf

isaca0315/cve-2026-44578-next-js-ssrf

este laboratorio puede estar bien o mal esta el pruebas pero debe funcionar preguntale a la IA hahah

vulnerability-analysisexploitationweb-application-exploitation+4

1 month ago

CVE-2026-41651

gbuyssens/cve-2026-41651

Local privilege escalation via TOCTOU race condition in PackageKit's.

privilege-escalationvulnerability-analysisexploitation+2

3 months ago

cve-2024-4577-lab

khwajasaad267-coder/cve-2024-4577-lab

Docker-based CTF lab demonstrating CVE-2024-4577 PHP-CGI argument injection leading to RCE. Includes vulnerable PHP 5.4.1 CGI, exploit scripts, and…

vulnerability-analysisexploitationweb-application-exploitation+4

2 months ago

CVE-2026-60004-gitea-0day

sachinart/cve-2026-60004-gitea-0day

CVE-2026-60004 — Gitea <= 1.27.0 Pre-Auth RCE

exploitationweb-application-exploitationpost-exploitation+3

3 months ago

CVE-2026-30225-OliveTin-RCE

hackerking24/cve-2026-30225-olivetin-rce

Proof-of-concept exploit for OliveTin unauthenticated RCE (CVE-2026-30225) via insecure guest defaults and unvalidated argument types, enabling root…

privilege-escalationvulnerability-analysisexploitation+5

1 month ago

CVE-2023-33733-Exploit-PoC

l41kaa/cve-2023-33733-exploit-poc

Python exploit script for CVE-2023-33733 targeting web applications. Automates authentication, session extraction, and reverse shell delivery for…

payload-generationvulnerability-analysisexploitation+3

32 years ago

CVE-2024-2961-XXE-Exploit

qinglove777/cve-2024-2961-xxe-exploit

CVE-2024-2961 (CNEXT) PHP file-read to RCE exploit adapted to an XXE/CTF channel

vulnerability-analysisexploitationweb-application-exploitation+3

1 month ago

CVE-2026-29782-OpenSTAManager-RCE

hackerking24/cve-2026-29782-openstamanager-rce

Proof-of-concept exploit for CVE-2026-29782, chaining SQL injection and PHP object injection to achieve remote code execution in OpenSTAManager.…

vulnerability-analysisexploitationweb-application-exploitation+2

1 month ago

CVE-2025-4138_tarfile_filter_bypass

thefizzyfish/cve-2025-4138_tarfile_filter_bypass

CVE-2025-4138 - Python Arbitrary file write outside extraction directory

payload-generationvulnerability-analysisexploitation+3

38 months ago

CVE-2026-39987

alreadyclosed/cve-2026-39987

CVE-2026-39987 for marimo 0.20.4 PoC

exploitationweb-application-exploitationctf+2

3 months ago

CVE-2018-6789

beraphin/cve-2018-6789

Exploit for CVE-2018-6789, a heap buffer overflow in Exim's base64 decoding, achieving remote code execution via chunk overlap and ACL string…

vulnerability-analysisexploitationctf+3

36 years ago

CVE-2023-20938-poc

byt3quester/cve-2023-20938-poc

Local privilege escalation proof-of-concept for CVE-2023-20938, a use-after-free in Android binder, achieving root and disabling SELinux on…

android-securityprivilege-escalationexploitation+3

14 months ago

CVE-2026-9198

ywh-jfellus/cve-2026-9198

Proof of Concept for CVE-2026-9198 - IBM Langflow Unauthenticated RCE via Auto-Login Bypass

vulnerability-analysisexploitationweb-application-exploitation+4

3 months ago

CVE-2025-32432

cd-ratel/cve-2025-32432

Working PoC for CVE-2025-32432 - Craft CMS <= 5.6.16 unauthenticated RCE via Yii2 PhpManager gadget + nginx access.log poisoning

vulnerability-analysisexploitationweb-application-exploitation+4

25 months ago

CVE-2023-25690_lab

giordy0424/cve-2023-25690_lab

HTTP Request Smuggling lab: Apache 2.4.55 CRLF injection

vulnerability-analysisweb-application-exploitationctf+3

2 months ago

CVE-2024-27198_Lab

cmpnn-romain/cve-2024-27198_lab

Lab for the CVE-2024-27198

vulnerability-analysisexploitationweb-application-exploitation+8

1 month ago

CVE-2025-29927-PoC

ritinify/cve-2025-29927-poc

Proof-of-concept exploit for CVE-2025-29927, a Next.js middleware authorization bypass. Includes a vulnerable target lab and Python script to verify…

exploitationweb-application-exploitationctf+3

2 months ago

Previous 1…293031…61 Next