Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems Security
General Purpose Utilities
Indicator of Compromise (IOC) Management
OSINT (Open Source Intelligence)
Packet Sniffing & Analysis
Password Cracking
Penetration Testing Frameworks
Phishing Tools
Privilege Escalation
Reconnaissance
Static Analysis
Vulnerability Scanners
Web Vulnerability Scanners
Wi-Fi Auditing
Bluetooth Security
Container Security
Dynamic Analysis (Sandboxing)
Encryption/Decryption Tools
Exploit Frameworks
Identity Management
iOS Security
IoT Security
Memory Forensics
Network Mapping
OSINT for Social Engineering
Password Attacks
Payload Generation
Persistence Mechanisms
Port Scanning
Static Code Analysis (SAST)
Threat Feeds & Aggregators
Vulnerability Analysis
Web Proxies & Interception
Code Analysis
DNS & Subdomain Enumeration
Dynamic Code Analysis (DAST)
Exploitation
Hash Analysis
IDS/IPS Evasion
Impersonation Tools
Lateral Movement
Mobile App Pentesting
Network Forensics
Reverse Engineering
RFID/NFC Tools
SCADA/ICS Security
Scripting & Automation
Serverless Security
Shellcode
Web Application Exploitation
API Security Testing
Configuration Auditing
Data Exfiltration
Debuggers
Forensics
Information Gathering
Mobile Forensics
Network Access Control
Post-Exploitation
Security Virtualization
Phishing
WAF Bypass
Web Security
Fuzzing
Network Security
Steganography
Wireless Security
Data Recovery
Malware Analysis
Digital Forensics
Hardware Hacking
Cryptography
CTF
Penetration Testing
Cloud Security
DevSecOps
Mobile Security
Privacy
Command and Control
Social Engineering
Hardware Security
Utilities & Frameworks
Hardware & IoT Security
Secret Detection
Binary Analysis
Threat Intelligence
Identity & Access Management (IAM)
Supply Chain Security
Authentication
Machine Learning
Intrusion Detection
Papers & Research
Misconfiguration
Subdomain Enumeration
Email Harvesting
Learning & Education
AI-Assisted Reversing
DNS Fuzzing
Red Teaming
Incident Response
Crawler
Curated Resources
Remote Access Tool
Shellcode Generation
Payload Development
Remote Access Trojan
API Security
Anti-Bot
Fingerprint Spoofing
CAPTCHA Bypass
Email Security
DNS Analysis
Chaos Engineering
Learning Paths & Courses
Container Escape
AI Security
Database Security
Firmware Analysis
Anomaly Detection
Log Analysis
Adversarial Attack
Binary Exploitation
Labs & Practice
NewestRelevanceMost popularRecently updated
553 results
CVE-2026-13157 preview

CVE-2026-13157

GitHubminhhk68/cve-2026-13157

Proof of concept and root-cause analysis for an authenticated arbitrary file upload in WordPress Theme Demo Import leading to remote code execution…

code-analysisexploitationpayload-development+4
1 month ago
CVE-2023-33829-POC preview

CVE-2023-33829-POC

GitHubp4x1s/cve-2023-33829-poc

SCM Manager XSS

code-analysisexploitationpenetration-testing+2
33 years ago
CVE-2021-44529 preview

CVE-2021-44529

GitHubjax7sec/cve-2021-44529

Exploit for CVE-2021-44529, a code injection vulnerability in Ivanti EPM Cloud Service Appliance allowing unauthenticated arbitrary code execution as…

code-analysisexploitationpenetration-testing+2
24 years ago
CVE-2026-46591 preview

CVE-2026-46591

GitHuboscerd/cve-2026-46591

Reproducer for CVE-2026-46591: Apache Camel camel-neo4j Cypher injection via property names in CamelNeo4jMatchProperties, enabling authorization…

code-analysisdatabase-securityexploitation+3
2 months ago
CVE-2026-9691 preview

CVE-2026-9691

GitHubizxci/cve-2026-9691

CVE-2026-9691: Integration for ActiveCampaign and Contact Form 7, WPForms, Elementor, Ninja Forms <= 1.1.1 Unauthenticated PHP Object Injection PoC,…

code-analysisexploitationpenetration-testing+2
3 months ago
Bash-Script-CVE-2018-16763 preview

Bash-Script-CVE-2018-16763

GitHubkxisxr/bash-script-cve-2018-16763

FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This can lead to Pre-Auth Remote…

code-analysisexploitationpenetration-testing+2
24 years ago
CVE-2026-12277 preview

CVE-2026-12277

GitHubmoritakaaz/cve-2026-12277

Frontend File Manager Plugin (WordPress) <= 23.6 - Unauthenticated Arbitrary File Deletion to RCE

code-analysisexploitationpayload-development+4
2 months ago
CVE-2022-36532 preview

CVE-2022-36532

GitHublutrasecurity/cve-2022-36532

Proof-of-concept exploit script for CVE-2022-36532 enabling authenticated remote code execution via file upload in Bolt CMS 5.1.12 and below.

code-analysisexploitationpenetration-testing+2
34 years ago
Jenkins-CVE-2017-1000353 preview

Jenkins-CVE-2017-1000353

GitHubr00t4dm/jenkins-cve-2017-1000353

Proof-of-concept exploit for Jenkins CVE-2017-1000353, a remote code execution vulnerability via unsafe deserialization in the CLI interface.

code-analysisexploitationpenetration-testing+2
33 years ago
CVE-2017-9805 preview

CVE-2017-9805

GitHubshakun8/cve-2017-9805

CVE-2017-9805 POC

code-analysisexploitationpenetration-testing+2
33 years ago
CVE-2025-22783 preview

CVE-2025-22783

GitHubdottak/cve-2025-22783

PoC of CVE-2025-22783

code-analysisexploitationpenetration-testing+2
31 year ago
CVE-2023-50071 preview

CVE-2023-50071

GitHubgeraldoalcantara/cve-2023-50071

Multiple SQL injection vulnerabilities in /customer_support/ajax.php?action=save_department in Customer Support System 1.0 allow authenticated…

code-analysisdatabase-securityexploitation+3
32 years ago
ediop3PHP preview

ediop3PHP

GitHubbreadsquad/ediop3php

A PHP CVE-2025-1219 SCANNER. In bash no root.

code-analysisexploitationpenetration-testing+2
31 year ago
CVE-2026-44788 preview

CVE-2026-44788

GitHube-corp-demo/cve-2026-44788

Proof-of-concept exploit for CVE-2026-44788, demonstrating vulnerability exploitation in C# for security testing and validation.

binary-exploitationcode-analysisexploitation+2
2 months ago
CVE-2018-1000533 preview

CVE-2018-1000533

GitHubdddo0/cve-2018-1000533

Proof-of-concept exploit for CVE-2018-1000533, a remote code execution vulnerability in GitList 0.6.0 via unsanitized input in the search function,…

code-analysisexploitationpenetration-testing+2
2 months ago
test_for6387 preview

test_for6387

GitHubawusan125/test_for6387

test code for cve-2024-6387

binary-exploitationcode-analysisexploitation+2
31 year ago
mcpshield preview

mcpshield

GitHubcsinexus/mcpshield

Drop-in fix for the unpatched MCP STDIO command-injection flaw (CVE-2026-30623 family)

api-security-testingcode-analysiscommand-and-control+3
2 months ago
CVE-2026-33454 preview

CVE-2026-33454

GitHuboscerd/cve-2026-33454

Reproducer for CVE-2026-33454: Apache Camel camel-mail header injection to RCE via camel-exec

code-analysisexploitationpayload-development+3
12 months ago
Previous1…101112…31Next