Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Categories

Penetration Testing

Penetration testing methodologies, frameworks, reporting, and automation tools.

NewestRelevanceMost popularRecently updated
19034 results
CVE-2026-18504-CVE-2026-16732 preview

CVE-2026-18504-CVE-2026-16732

GitHubhorkimhab/cve-2026-18504-cve-2026-16732

Educational repository for documenting and testing CVE proof-of-concept exploits inside isolated labs, virtual machines, and authorized penetration…

vulnerability-analysisexploitationpenetration-testing+2
2 days ago
cve-2026-15748 preview

cve-2026-15748

GitHubyora1928/cve-2026-15748

Scans WordPress Forminator for CVE-2026-15748 unauthenticated RCE. Detects vulnerable sites, crawls forms, extracts nonces, runs safe upload tests.

web-vulnerability-scannersexploitationweb-application-exploitation+4
22 days ago
CVE-2026-15826-CVE-2026-15748 preview

CVE-2026-15826-CVE-2026-15748

GitHubhorkimhab/cve-2026-15826-cve-2026-15748

Multithreaded Python scanner for CVE-2026-15826 and CVE-2026-15748; checks target lists, supports verbose logging, configurable threads, and custom…

vulnerability-scannersvulnerability-analysispenetration-testing+1
3 days ago
CVE-2026-19650-CVE-2026-19478 preview

CVE-2026-19650-CVE-2026-19478

GitHubhorkimhab/cve-2026-19650-cve-2026-19478

Proof-of-concept exploit resources for CVE-2026-19650 and CVE-2026-19478 targeting a GitLab GraphQL vulnerability, intended for authorized research,…

vulnerability-analysisexploitationweb-application-exploitation+4
3 days ago
impersonate-proxy preview

impersonate-proxy

GitHubytkoka/impersonate-proxy

A local MITM proxy that lets you control TLS fingerprints (JA3/JA4), HTTP/2 fingerprints, HTTP header order, and User-Agent — all from a single YAML…

web-proxies-interceptionimpersonation-toolswaf-bypass+3
72 days ago
awesome-ai-security preview

awesome-ai-security

GitHubgmh5225/awesome-ai-security

A curated list of AI Security materials and resources for Pentesters, Bug Hunters, and Security Researchers.

ctfpenetration-testingpapers-research+7
393 days ago
Juicy-Potato-x86 preview

Juicy-Potato-x86

GitHubivanitlearning/juicy-potato-x86

Windows privilege escalation exploit that abuses service token impersonation to execute arbitrary commands with SYSTEM privileges, designed for x86…

privilege-escalationexploitationpost-exploitation+2
1356 years ago
CVE-2026-33017-FireFlow preview

CVE-2026-33017-FireFlow

GitHubl4st98/cve-2026-33017-fireflow

Proof-of-concept RCE for Langflow CVE-2026-33017 using a malicious custom component to execute OS commands via build_public_tmp and retrieve output…

exploitationweb-application-exploitationctf+4
3 days ago
cve-2026-41042 preview

cve-2026-41042

GitHublulztigre/cve-2026-41042

Exploits unauthenticated RCE in Apache Gravitino < 1.2.1 via H2 JDBC INIT; hosts SQL/Java payloads, executes commands, and exfiltrates output over…

vulnerability-analysisexploitationweb-application-exploitation+2
3 days ago
Log4ShellAuditor preview

Log4ShellAuditor

GitHubc00ln3t/log4shellauditor

An autonomous reflective Go agent for full-cycle security auditing, WAF evasion, OOB LDAP verification, self-remediation (auto-patching), and…

vulnerability-scannerspayload-generationport-scanning+6
14 days ago
EITS-Portal-Exploit-CVE-2026-31367-PoC preview

EITS-Portal-Exploit-CVE-2026-31367-PoC

GitHubhereticl1nk/eits-portal-exploit-cve-2026-31367-poc

PoC exploit for unauthenticated RCE in EITS Admin Dashboard v2.4.0 via command injection in /api/v1/debug, allowing arbitrary OS command execution on…

vulnerability-analysisexploitationweb-application-exploitation+2
4 days ago
CVE-2026-26980 preview

CVE-2026-26980

GitHubvognik/cve-2026-26980

Unauthenticated SQL injection exploit for Ghost CMS Content API (CVE-2026-26980); dumps database tables from SQLite/MySQL with active/passive checks…

vulnerability-analysisexploitationweb-application-exploitation+4
104 days ago
CVE-2026-20079 preview

CVE-2026-20079

GitHubcyberauth/cve-2026-20079

Implements the CVE-2026-20079 authentication-bypass-to-root-RCE chain against Cisco Secure FMC using fingerprint, check, proof, and interactive…

vulnerability-analysisexploitationweb-application-exploitation+3
3 days ago
CVE-2026-59310 preview

CVE-2026-59310

GitHubbiutrap/cve-2026-59310

Proof-of-concept exploit for CVE-2026-59310, demonstrating remote path traversal via crafted syslog messages to write arbitrary log files on VMware…

vulnerability-analysisexploitationweb-application-exploitation+2
4 days ago
CVE-2026-71203-PoC preview

CVE-2026-71203-PoC

GitHubnel-droid/cve-2026-71203-poc

PoC: changedetection.io unauthenticated OpenAPI schema disclosure (CVE-2026-71203, Medium 5.3)

vulnerability-analysisexploitationapi-security-testing+4
4 days ago
CVE-2026-71205-PoC preview

CVE-2026-71205-PoC

GitHubnel-droid/cve-2026-71205-poc

PoC: changedetection.io unlimited login brute-force, no rate limiting (CVE-2026-71205, Medium 6.5)

password-attacksvulnerability-analysisexploitation+4
4 days ago
CVE-2025-49132 preview

CVE-2025-49132

GitHubaleewyy/cve-2025-49132

Minimal proof-of-concept exploit for CVE-2025-49132 in Pterodactyl panels; reads PHP files to extract database credentials and enable unauthorized…

vulnerability-analysisexploitationweb-application-exploitation+3
2 months ago
Wildfire preview

Wildfire

GitHubdefineid/wildfire

CVE-2026-39154 · Stored XSS in CometChat JS SDK

vulnerability-analysisexploitationweb-application-exploitation+4
3 days ago
Previous1…345…1058Next