Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
553 results
CVE-2019-19511 preview

CVE-2019-19511

GitHubjra89/cve-2019-19511

Chevereto - 1.0.0 Free - 1.1.4 Free, 3.13.4 Core, Remote Code Execution

code-analysisexploitationpenetration-testing+2
1
6 years ago
sxwp2shell preview

sxwp2shell

GitHubsentinelxofficial/sxwp2shell

WordPress wp2shell pre-auth RCE exploit kit (CVE-2026-63030 + CVE-2026-60137)

code-analysisexploitationpenetration-testing-frameworks+2
12 months ago
CVE-2023-29007_win-version preview

CVE-2023-29007_win-version

GitHubx-defender/cve-2023-29007_win-version

Proof-of-concept exploit for CVE-2023-29007, a Git arbitrary configuration injection vulnerability. Demonstrates exploitation on Windows systems for…

code-analysisexploitationpenetration-testing+2
23 years ago
CVE-2018-20718 preview

CVE-2018-20718

GitHubus3r777/cve-2018-20718

Proof-of-concept exploit for CVE-2018-20718, a PHP object injection vulnerability in Pydio before 8.2.1 enabling unauthenticated remote code…

code-analysisexploitationpenetration-testing+3
37 years ago
CVE-2025-49113-nuclei-template preview

CVE-2025-49113-nuclei-template

GitHubademking/cve-2025-49113-nuclei-template

CVE-2025-49113 - Roundcube <= 1.6.10 Post-Auth RCE via PHP Object Deserialization

code-analysisexploitationpayload-development+3
31 year ago
CVE-2026-53913 preview

CVE-2026-53913

GitHuboscerd/cve-2026-53913

PoC reproducer for CVE-2026-53913 (Apache Camel camel-keycloak): KeycloakSecurityPolicy fails open in the Basic Setup — with no required…

authenticationcode-analysisexploitation+3
11 month ago
CVE-2015-6576 preview

CVE-2015-6576

GitHubcallmejonas/cve-2015-6576

A PoC for the Bamboo deserialization exploit

code-analysisexploitationpenetration-testing+2
210 years ago
CVE-2018-16763 preview

CVE-2018-16763

GitHubdinhbaouit/cve-2018-16763

Pre-authentication remote code execution exploit for FUEL CMS 1.4.1 (CVE-2018-16763). Python-based proof-of-concept for security testing and…

code-analysisexploitationpenetration-testing+2
16 years ago
WordPress-News-and-Blog-Designer-Bundle-CVE-2025-14502 preview

WordPress-News-and-Blog-Designer-Bundle-CVE-2025-14502

GitHubkai-one001/wordpress-news-and-blog-designer-bundle-cve-2025-14502

WordPress的News and Blog Designer Bundle插件在1.1及之前所有版本中,存在通过template参数导致的本地文件包含漏洞。该漏洞使得未经身份验证的攻击者能够包含并执行服务器上的任意.php文件,从而运行这些文件中的任何PHP代码。在允许上传和包含.php文件类型…

code-analysisexploitationpenetration-testing+3
28 months ago
CVE-2025-56819 preview

CVE-2025-56819

GitHubxyyzxc/cve-2025-56819

An issue in Datart v.1.0.0-rc.3 allows a remote attacker to execute arbitrary code via the INIT connection parameter.

code-analysisexploitationpenetration-testing+2
20 years ago
CVE-2024-0679 preview

CVE-2024-0679

GitHubrandomrobbiebf/cve-2024-0679

ColorMag <= 3.1.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation/Activation

code-analysisexploitationpenetration-testing+3
22 years ago
CVE-2016-2098 preview

CVE-2016-2098

GitHubshakun8/cve-2016-2098

CVE-2016-2098 POC

code-analysisexploitationpenetration-testing+2
23 years ago
CVE-2019-5418 preview

CVE-2019-5418

GitHubkailing0220/cve-2019-5418

Ruby on Rails是一个 Web 应用程序框架,是一个相对较新的 Web 应用程序框架,构建在 Ruby 语言之上。这个漏洞主要是由于Ruby on Rails使用了指定参数的render…

code-analysisexploitationpenetration-testing+3
23 years ago
CVE-2024-36104 preview

CVE-2024-36104

GitHubggfzx/cve-2024-36104

Exploit tool for CVE-2024-36104 targeting Apache OFBiz code execution vulnerability. Supports single and batch URL scanning with proxy and threading…

code-analysisexploitationpenetration-testing+3
22 years ago
CVE-2026-25053 preview

CVE-2026-25053

GitHubyadhukrishnam/cve-2026-25053

Vulnerabilities in the Git node allowed authenticated users with permission to create or modify workflows to execute arbitrary system commands or…

code-analysisexploitationpenetration-testing+2
27 months ago
CVE-2022-23935-PoC-Exploit preview

CVE-2022-23935-PoC-Exploit

GitHubdpbe32/cve-2022-23935-poc-exploit

Proof-of-concept exploit for CVE-2022-23935 targeting ExifTool 12.37, demonstrating arbitrary code execution via crafted image metadata.

code-analysisexploitationpayload-development+2
13 years ago
Joomla-CVE-2015-8562-PHP-POC preview

Joomla-CVE-2015-8562-PHP-POC

GitHubrobinhoutevelts/joomla-cve-2015-8562-php-poc

A proof of concept for Joomla's CVE-2015-8562 vulnerability

code-analysisexploitationpayload-development+3
210 years ago
cve-2024-38816-demo preview

cve-2024-38816-demo

GitHubstartsw1th/cve-2024-38816-demo
code-analysisexploitationpenetration-testing+2
21 year ago
Previous1…121314…31Next