Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
159 results
d8-copy-fail-mitigation preview

d8-copy-fail-mitigation

GitHubdeckhouse/d8-copy-fail-mitigation

Kubernetes-native CVE-2026-31431 mitigation with automated kernel module blocking, runtime Falco detection rules, and bashible-based node…

cloud-securityconfiguration-auditingcontainer-security+3
4 months ago
cifswitch-check preview

cifswitch-check

GitHubliamromanis101/cifswitch-check

Detection script for CIFSwitch - CVE-2026-46243

cloud-securityconfiguration-auditingcontainer-security+6
3 months ago
CVE-2023-7231 preview

CVE-2023-7231

GitHubbbo513/cve-2023-7231

PoC and Disclosure for CVE-2023-7231 – Memcached Gopher RCE chain

cloud-securitycontainer-securitydata-exfiltration+6
11 year ago
CVE-2025-45955 preview

CVE-2025-45955

GitHubsurendrapuppala7/cve-2025-45955

Proof-of-concept exploit for CVE-2025-45955 demonstrating Server-Side Request Forgery (SSRF) in DonWeb Ferozo hosting platform, enabling internal…

cloud-securityexploitationinformation-gathering+3
18 months ago
FiberBreak preview

FiberBreak

GitHubscumfrog/fiberbreak

React2Shell Exploitation Tool (CVE-2025-55182)

cloud-securitycommand-and-controldata-exfiltration+8
9 months ago
cve-2026-24514-Kubernetes-Dos preview

cve-2026-24514-Kubernetes-Dos

GitHubmbanyamer/cve-2026-24514-kubernetes-dos

Proof-of-concept exploit for CVE-2026-24514, a memory exhaustion denial-of-service in ingress-nginx validating admission webhook, allowing…

cloud-securitycontainer-securityexploitation+2
7 months ago
CVE-2025-1974 preview

CVE-2025-1974

GitHubboianeduard/cve-2025-1974

ingress-nginx admission controller RCE escalation PoC

cloud-securitycontainer-securityeducation+8
8 months ago
CVE-2025-63571 preview

CVE-2025-63571

GitHubrrespxwnss/cve-2025-63571

Proof of concept demonstrating Server-Side Request Forgery in ChatGPT, allowing attackers to force the AI to make arbitrary HTTP requests, exposing…

cloud-securityexploitationinformation-gathering+3
10 months ago
Remediating-CVE-2013-3900-EnableCertPaddingCheck- preview

Remediating-CVE-2013-3900-EnableCertPaddingCheck-

GitHubpkblanks/remediating-cve-2013-3900-enablecertpaddingcheck-

Step-by-step remediation report for CVE-2013-3900 on Windows Server 2019 Azure VM, using Tenable/Nessus credentialed scans and registry hardening to…

cloud-securityconfiguration-auditingeducation+3
11 year ago
CVE-2024-36539 preview

CVE-2024-36539

GitHubabdurahmon3236/cve-2024-36539

PoC exploit for insecure permissions in Contour v1.28.3 that retrieves a Kubernetes service account token and accesses the cluster API, demonstrating…

cloud-securitycontainer-securityexploitation+5
2 years ago
CVE-2024-6387-Mitigation preview

CVE-2024-6387-Mitigation

GitHubzenzue/cve-2024-6387-mitigation

Mitigation Guide for CVE-2024-6387 in OpenSSH

cloud-securityconfiguration-auditingdevsecops+3
2 years ago
CVE-2020-10749 preview

CVE-2020-10749

GitHubknqyf263/cve-2020-10749

Proof-of-concept exploit for CVE-2020-10749 demonstrating Kubernetes MitM attacks via IPv6 rogue router advertisements between pods.

cloud-securitycontainer-securityexploitation+2
256 years ago
vex8s preview

vex8s

GitHubalegrey91/vex8s

Suppress vulnerabilities applying Kubernetes context to scans

cloud-infrastructure-securitycloud-securityconfiguration-auditing+7
3810 days ago
CVE-2026-64640 preview

CVE-2026-64640

GitHuboscerd/cve-2026-64640

Reproducer for CVE-2026-64640 — Apache Polaris Iceberg REST register/register-view vends storage credentials and reads an attacker-chosen metadata…

api-securitycloud-securitydata-exfiltration+5
1 month ago
CVE-2026-40564 preview

CVE-2026-40564

GitHuboscerd/cve-2026-40564

CVE-2026-40564: SSRF via FlinkSessionJob jarURI in apache/flink-kubernetes-operator. Self-contained reproducer that runs on a local kind cluster with…

cloud-securitycontainer-securityexploitation+3
4 months ago
Previous1…89Next