Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Categories

Penetration Testing

Penetration testing methodologies, frameworks, reporting, and automation tools.

NewestRelevanceMost popularRecently updated
19035 results
CVE-2026-23479 preview

CVE-2026-23479

GitHubhackspeak/cve-2026-23479

Redis UAF RCE PoC collection for CVE-2026-23479: safe version checker, exploit module, GDB-assisted PoC, and Sigma detection rules for authorized…

vulnerability-scannersvulnerability-analysisexploitation+5
1
1 day ago
CVE-2026-53365 preview

CVE-2026-53365

GitHubhackspeak/cve-2026-53365

Local privilege escalation exploit targeting a Linux kernel io_uring AF_VSOCK reference-count bug, using page-cache manipulation to overwrite…

privilege-escalationvulnerability-analysisexploitation+2
11 day ago
POC-CVE-2026-63030-CVE-2026-60137- preview

POC-CVE-2026-63030-CVE-2026-60137-

GitHubtrandonga3/poc-cve-2026-63030-cve-2026-60137-

Exploit chain for WordPress Core using REST API route-confusion and SQL injection for unauthenticated RCE, privilege escalation, and full server…

privilege-escalationvulnerability-analysisexploitation+6
1 day ago
ksmbrace preview

ksmbrace

GitHubturtlearm/ksmbrace

ksmbd CVEs: CVE-2026-31717, CVE-2026-68083

authentication-authorizationdefensive-toolsvulnerability-analysis+3
51 day ago
CVE-2025-24893_Analysis preview

CVE-2025-24893_Analysis

GitHubmattiacervelli/cve-2025-24893_analysis

Self-contained Docker lab that reproduces CVE-2025-24893, an unauthenticated SSTI-to-RCE in XWiki SolrSearch, and compares vulnerable vs patched…

payload-generationvulnerability-analysisexploitation+5
1 day ago
CVE-2026-53959 preview

CVE-2026-53959

GitHubanirbala98/cve-2026-53959

4gaBoards < 3.3.9 - User Information Disclosure

vulnerability-analysisexploitationweb-application-exploitation+5
12 days ago
CVE-2025-24799 preview

CVE-2025-24799

GitHubrosemary1337/cve-2025-24799

Exploits GLPI CVE-2025-24799 via unauthenticated time-based blind SQL injection to extract usernames and password hashes from glpi_users for…

vulnerability-analysisexploitationweb-application-exploitation+2
11 months ago
CVE-2025-6934 preview

CVE-2025-6934

GitHubrosemary1337/cve-2025-6934

Automated PoC exploit for WordPress Opal Estate Pro that detects vulnerable versions, retrieves nonce, and creates unauthorized administrator…

vulnerability-analysisexploitationweb-application-exploitation+3
11 months ago
CVE-2026-41089 preview

CVE-2026-41089

GitHubjelasin/cve-2026-41089

Pre-auth PoC for CVE-2026-41089 Netlogon CLDAP stack overflow via UDP/389, triggering LSASS crash/DC reboot. Includes exploit script, root-cause…

vulnerability-analysisexploitationnetwork-security+3
2 months ago
CVE-2026-47858 preview

CVE-2026-47858

GitHubrealstatus/cve-2026-47858

Proof-of-concept exploit for unauthenticated JMX RCE in Spring Tools live information mode, using MLet remote class loading to execute arbitrary…

payload-generationvulnerability-analysisexploitation+1
1 day ago
CVE-2026-19478 preview

CVE-2026-19478

GitHubrenzi25031469/cve-2026-19478

Detects CVE-2026-19478 in GitLab CE/EE with a non-destructive Nuclei template that triggers the GraphQL fallback-field method invocation via touch…

web-vulnerability-scannersvulnerability-analysisweb-application-exploitation+4
2 days ago
SpringPeace preview

SpringPeace

GitHubvirtualesp/springpeace

(Hopefully) A tool to root for (most) Android devices through CVE-2026-43499

android-securitypayload-generationexploitation+4
1 month ago
memdumper preview

memdumper

GitHubcenobyte-vincit/memdumper

Abuses macOS debugger entitlements and DYLD_INSERT_LIBRARIES to dump or search a running process's memory while shifting EDR attribution to a signed…

memory-forensicsids-ips-evasioninformation-gathering+4
13 days ago
fastgpt-sandbox-audit preview

fastgpt-sandbox-audit

GitHubqianlijaingshan/fastgpt-sandbox-audit

FastGPT Python sandbox escape chain audit tool (CVE-2026-32128 related, v4.14.8 inspect chain)

static-analysisdynamic-analysis-sandboxingvulnerability-analysis+4
2 days ago
CVE-2026-14669 preview

CVE-2026-14669

GitHubhackspeak/cve-2026-14669

Proof-of-concept exploit for CVE-2026-14669, a PostgreSQL to_char() timezone abbreviation heap buffer overflow enabling RCE through information leak…

vulnerability-analysisexploitationpenetration-testing+4
12 days ago
CVE-2021-1675-PrintNightmare-Analysis preview

CVE-2021-1675-PrintNightmare-Analysis

GitHubvelessecurity/cve-2021-1675-printnightmare-analysis

Technical write-up and analysis of PrintNightmare (CVE-2021-1675 / CVE-2021-34527), covering RCE/LPE exploitation, detection via Windows event logs,…

privilege-escalationreconnaissancevulnerability-analysis+6
2 days ago
CVE-2026-73292 preview

CVE-2026-73292

GitHubcamillegr/cve-2026-73292

Proof-of-concept exploit for CVE-2026-73292: CSRF attack on Semaphore UI password change endpoint, serving a malicious page that silently resets an…

vulnerability-analysisexploitationweb-application-exploitation+3
2 days ago
CVE-2026-70376 preview

CVE-2026-70376

GitHubilhomjonr/cve-2026-70376

Advisory and Python PoC for Pluck CMS CSRF: fail-open Referer check plus double-extension upload enables webshell deployment and remote code…

vulnerability-analysisexploitationweb-application-exploitation+3
8 days ago
Previous123…1058Next