Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
91 results
CVE-2024-12877 preview

CVE-2024-12877

GitHubrandomrobbiebf/cve-2024-12877

GiveWP – Donation Plugin and Fundraising Platform <= 3.19.2 - Unauthenticated PHP Object Injection

code-analysisexploitationpayload-generation+4
1 year ago
CVE-2024-49699 preview

CVE-2024-49699

GitHubrandomrobbiebf/cve-2024-49699

ARPrice <= 4.0.3 - Authenticated (Subscriber+) PHP Object Injection

code-analysisexploitationpayload-generation+2
1 year ago
CVE-2018-15133-PoC preview

CVE-2018-15133-PoC

GitHubloaxert/cve-2018-15133-poc

Python exploit for CVE-2018-15133, achieving remote code execution on vulnerable Laravel applications via insecure deserialization of encrypted…

code-analysisexploitationpayload-generation+3
9 months ago
CVE-2026-7393-RCE preview

CVE-2026-7393-RCE

GitHubxmyronn/cve-2026-7393-rce

Proof-of-concept exploit for CVE-2026-7393: unrestricted file upload in Pizzafy Ecommerce System 1.0 allowing authenticated administrators to upload…

code-analysisexploitationpayload-generation+3
3 months ago
CVE-2021-26084 preview

CVE-2021-26084

GitHublleavesl/cve-2021-26084

PoC exploit for CVE-2021-26084, an OGNL injection vulnerability in Atlassian Confluence allowing unauthenticated remote code execution via crafted…

code-analysisexploitationpayload-generation+3
74 years ago
CVE-2022-22947-Spring-Cloud-Gateway preview

CVE-2022-22947-Spring-Cloud-Gateway

GitHubtangxiaofeng7/cve-2022-22947-spring-cloud-gateway

Batch vulnerability scanner and exploit tool for CVE-2022-22947 Spring Cloud Gateway RCE, supporting single-target and mass scanning with SpEL…

code-analysisexploitationpayload-generation+3
714 years ago
CVE-2024-4577 preview

CVE-2024-4577

GitHubianthinus/cve-2024-4577

Proof-of-concept exploit for CVE-2024-4577, a PHP CGI argument injection vulnerability enabling remote code execution via crafted HTTP requests.

code-analysisexploitationpayload-generation+3
1 year ago
CVE-2019-7609 preview

CVE-2019-7609

GitHubmpgn/cve-2019-7609

RCE on Kibana versions before 5.6.15 and 6.6.0 in the Timelion visualizer

code-analysisexploitationpayload-generation+2
566 years ago
CVE-2020-26217-XStream-RCE-POC preview

CVE-2020-26217-XStream-RCE-POC

GitHubnovysodope/cve-2020-26217-xstream-rce-poc

Proof-of-concept exploit for CVE-2020-26217, demonstrating remote code execution via deserialization in XStream with a crafted XML payload.

code-analysisexploitationpayload-generation+2
45 years ago
CVE-2023-27372 preview

CVE-2023-27372

GitHubnuts7/cve-2023-27372

SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mishandled. The fixed versions are 3.2.18,…

code-analysisexploitationpayload-development+3
691 year ago
CVE-2021-41078 preview

CVE-2021-41078

GitHubs-index/cve-2021-41078

nameko Arbitrary code execution due to YAML deserialization

code-analysisexploitationmisconfiguration+3
3 years ago
CVE-2021-42574 preview

CVE-2021-42574

GitHubsimplylu/cve-2021-42574

Encode and decode source code files using Unicode bidi control characters to exploit CVE-2021-42574, enabling invisible injection of malicious logic…

code-analysisexploitationpayload-generation+3
83 years ago
CVE-2022-45771 preview

CVE-2022-45771

GitHubyuriisanin/cve-2022-45771

[PoC] Privilege escalation & code execution via LFI in PwnDoC

code-analysisexploitationpayload-development+4
63 years ago
Vehicle-Service-Management-System-Multiple-File-upload-Leads-to-Code-Execution preview

Vehicle-Service-Management-System-Multiple-File-upload-Leads-to-Code-Execution

GitHubsanupl/vehicle-service-management-system-multiple-file-upload-leads-to-code-execution

CVE-2021-46076 - Sourcecodester Vehicle Service Management System 1.0 is vulnerable to File upload. An attacker can upload a malicious php file in…

code-analysisexploitationpayload-generation+3
3 months ago
sudo-1.8.3p1-patched preview

sudo-1.8.3p1-patched

GitHubperlun/sudo-1.8.3p1-patched

Custom version of sudo 1.8.3p1 with CVE-2021-3156 patches applied

binary-analysiscode-analysisexploitation+2
5 years ago
pocs preview

pocs

GitHubpagvac/pocs

phpMyAdmin '/scripts/setup.php' PHP Code Injection RCE PoC (CVE-2009-1151)

code-analysisexploitationpayload-generation+3
67 years ago
PoC-CVE-2025-3914-Aeropage-WordPress-File-Upload preview

PoC-CVE-2025-3914-Aeropage-WordPress-File-Upload

GitHublvl23ht/poc-cve-2025-3914-aeropage-wordpress-file-upload

CVE-2025-3914-PoC | The Aeropage Sync for Airtable WordPress plugin (≤ v3.2.0) is vulnerable to authenticated arbitrary file uploads due to…

code-analysisexploitationpayload-generation+3
1 year ago
log4j2-prosecutor preview

log4j2-prosecutor

GitHubrodfer0x80/log4j2-prosecutor

Exploit tool for CVE-2021-44228 (Log4Shell) with LDAP/JNDI injection server, payload generation, and single-target exploitation script for testing…

code-analysisexploitationpayload-generation+3
4 years ago
Previous123456Next