Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

551 results

Confluence-CVE-2021-26084

30579096/confluence-cve-2021-26084

OGNL Injection in Confluence server version < 7.12.5

code-analysisexploitationpenetration-testing+2

5 years ago

CVE-2019-5418-Rails3

ztgrace/cve-2019-5418-rails3

Rails 3 PoC of CVE-2019-5418

code-analysisexploitationpenetration-testing+2

3 years ago

CVE-2026-23885

thedeepopc/cve-2026-23885

Proof-of-concept exploit for CVE-2026-23885, an authenticated RCE in AlchemyCMS via eval() injection, with technical analysis and remediation…

code-analysisexploitationpenetration-testing+2

8 months ago

go-get-rce

d4rkshell/go-get-rce

CVE-2018-6574

code-analysisexploitationpenetration-testing+2

7 years ago

POC-CVE-2018-6574

killtr0/poc-cve-2018-6574

Proof-of-concept exploit for CVE-2018-6574 targeting a Go web server vulnerability. Demonstrates remote code execution via crafted HTTP requests.

code-analysisexploitationpenetration-testing+2

5 years ago

CVE-2018-7211-PoC

c3r34lk1ll3r/cve-2018-7211-poc

Proof-of-concept exploit for CVE-2018-7211 targeting iDashboards 9.6b. Python script for encrypting/decrypting strings to demonstrate the…

code-analysisexploitationpenetration-testing+2

8 years ago

magento2-template-filter-patch

wubinworks/magento2-template-filter-patch

Magento 2 patch for CVE-2022-24086, CVE-2022-24087. Fix the RCE vulnerability and related bugs by performing deep template variable escaping. If you…

code-analysisexploitationmisconfiguration+3

1 year ago

CVE-2016-3714

tommiionfire/cve-2016-3714

Proof-of-concept exploit for CVE-2016-3714, a remote code execution vulnerability in ImageMagick's MVG file processing. Demonstrates shell command…

code-analysisexploitationpenetration-testing+2

10 years ago

asf__tapestry-5_CVE-2019-0207_5-4-4

shoucheng3/asf__tapestry-5_cve-2019-0207_5-4-4

Proof-of-concept exploit for CVE-2019-0207 in Apache Tapestry 5.4.4, demonstrating remote code execution via deserialization vulnerability.

code-analysisexploitationpenetration-testing+2

1 year ago

CVE-2013-0156

r3dkn33-zz/cve-2013-0156

Arbitrary deserialization that can be used to trigger SQL injection and even Code execution

code-analysisexploitationpenetration-testing+2

7 years ago

CVE-2025-67887

reewardius/cve-2025-67887

1C-Bitrix <= 25.100.500 (Translate Module) Remote Code Execution Vulnerability

code-analysisexploitationpenetration-testing+2

9 months ago

CVE-2024-42471-PoC

themcsam/cve-2024-42471-poc

unzip-stream file write/overwrite vulnerability

code-analysisexploitationpenetration-testing+2

1 year ago

CVE-2024-50482

randomrobbiebf/cve-2024-50482

Woocommerce Product Design <= 1.0.0 - Unauthenticated Arbitrary File Upload

code-analysisexploitationpenetration-testing+3

1 year ago

Pluck-Exploitation-by-skdevils

skdevils/pluck-exploitation-by-skdevils

# Exploit Title: Pluck CMS 4.7.16 - Remote Code Execution (RCE) (Authenticated) # Date: 13.03.2022 # Exploit Author: Ashish Koli (Shikari) # Vendor…

code-analysisexploitationpenetration-testing+2

3 years ago

CVE-2020-13933Project

kingbangq/cve-2020-13933project

此项目为复现CVE-2020-13933 shiro漏洞所搭建的简易springboot+shiro项目

code-analysisexploitationpenetration-testing+2

3 months ago

Spring-Cloud-Gateway-CVE-2022-22947

summer177/spring-cloud-gateway-cve-2022-22947

Spring Cloud Gateway远程代码执行漏洞

code-analysisexploitationpenetration-testing+2

4 years ago

CVE-2016-0793

tafamace/cve-2016-0793

code-analysisexploitationpenetration-testing+2

7 years ago

govuln-CVE-2023-47108

bahe-msft/govuln-cve-2023-47108

Analyzes and addresses CVE-2023-47108, providing vulnerability assessment and remediation guidance for affected systems.

code-analysisexploitationpenetration-testing+2

2 years ago

Previous 1…181920…31 Next