Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
862 results
CVE-2020-12077 preview

CVE-2020-12077

GitHubrandomrobbiebf/cve-2020-12077

MapPress Maps Pro < 2.53.9 - Remote Code Execution (RCE) due to Incorrect Access Control in AJAX Actions

code-analysisexploitationmisconfiguration+3
1
3 years ago
cve-2024-38821 preview

cve-2024-38821

GitHubmouadk/cve-2024-38821

cve-2024-38821

code-analysisexploitationstatic-analysis+2
21 year ago
CVE-2025-55182 preview

CVE-2025-55182

GitHubycseo-git/cve-2025-55182

a.k.a. React2Shell

code-analysiscontainer-securityctf+7
4 months ago
OpenSSL-1_0_1g_CVE-2015-3195 preview

OpenSSL-1_0_1g_CVE-2015-3195

GitHubtrinadh465/openssl-1_0_1g_cve-2015-3195

OpenSSL toolkit implementing SSL/TLS protocols and a general-purpose cryptography library with ciphers, digests, public key algorithms, and X.509…

binary-analysiscode-analysiscryptography+3
12 years ago
cve-2025-4615 preview

cve-2025-4615

GitHubsh00bx/cve-2025-4615

cve-2025-4615 poc & deep dive

code-analysisconfiguration-auditingexploitation+3
5 months ago
CVE-2026-3296 preview

CVE-2026-3296

GitHubxxconi/cve-2026-3296

CVE-2026-3296 is a CVSS 9.8 Critical unauthenticated PHP Object Injection vulnerability in the Everest Forms WordPress plugin

code-analysisexploitationpayload-development+3
3 months ago
chk_log4j preview

chk_log4j

GitHubgcmurphy/chk_log4j

Some siimple checks to see if JAR file is vulnerable to CVE-2021-44228

code-analysisstatic-analysissupply-chain-security+2
14 years ago
CVE-2026-31156 preview

CVE-2026-31156

GitHubunicorn-hyh/cve-2026-31156

There is a path injection vulnerability in OpenPLC-v3, which arises from the program not performing any validity checks on the file path parameters…

code-analysisexploitationinformation-gathering+3
4 months ago
jackson preview

jackson

GitHubsassoftware/jackson

This repository provides a comprehensive security remediation of denial-of-service and allocation of resources without limits or throttling security…

code-analysisgeneral-purpose-utilitiesstatic-analysis+2
15 months ago
CVE-2026-5059-poc preview

CVE-2026-5059-poc

GitHubvenom203020/cve-2026-5059-poc

Proof-of-concept demonstrating command injection in aws-mcp-server via shell=True, with analysis of the vulnerable code and the fix in v1.7.0.

code-analysisexploitationstatic-analysis+2
5 months ago
cargo-perm preview

cargo-perm

GitHublucas-cauhe/cargo-perm

Cargo exploit from CVE-2023-38497

code-analysisexploitationpayload-development+3
13 years ago
cve-2026-39440-funnelforms-fix preview

cve-2026-39440-funnelforms-fix

GitHub3ele-projects/cve-2026-39440-funnelforms-fix

Drop-in WordPress plugin that blocks the vulnerable Demo Import handler in FunnelForms Pro to mitigate Remote Code Execution (CVE-2026-39440).

code-analysisconfiguration-auditingdefensive-tools+2
4 months ago
CVE-2020-26259 preview

CVE-2020-26259

GitHubal1ex/cve-2020-26259

CVE-2020-26259 &&XStream Arbitrary File Delete

code-analysisexploitationstatic-analysis+2
15 years ago
CVE-2026-51416 preview

CVE-2026-51416

GitHubrenio-wow/cve-2026-51416

Analyzes a specific CVE in WeChat OAuth handler, identifying unbounded HTTP response reads leading to denial of service, with remediation guidance.

code-analysisstatic-analysisvulnerability-analysis+1
4 months ago
struts1-patch preview

struts1-patch

GitHubricedu/struts1-patch

struts1 CVE-2014-0114 classLoader manipulation vulnerability patch

code-analysisexploitationstatic-analysis+2
112 years ago
nextjs-security-scanner preview

nextjs-security-scanner

GitHubaliksir/nextjs-security-scanner

Bash script to detect CVE-2025-55182 (React2Shell) and credential exposure in Next.js projects. Zero dependencies.

code-analysisincident-responsesecret-detection+3
13 months ago
CVE-2017-15708 preview

CVE-2017-15708

GitHubhusoul/cve-2017-15708

Apache synapse 反序列化 CVE–2017–15708

code-analysisexploitationstatic-analysis+2
8 years ago
detect-cve-2018-16858 preview

detect-cve-2018-16858

GitHubphongld97/detect-cve-2018-16858

Python script to detect CVE-2018-16858 vulnerability in target systems, enabling rapid identification and assessment of this specific security flaw.

code-analysisexploitationinformation-gathering+2
16 years ago
Previous1…353637…48Next