Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
88 results
MalEval preview

MalEval

GitHubzhengxr930/maleval

Official code for the ISSTA 2026 paper: Is "Knowing It’s Malicious" Enough? Evaluating LLMs for Fine-Grained Malware Behavior Auditing

ai-securityandroid-securitycode-analysis+5
5
2 months ago
VulTriage preview

VulTriage

GitHubvinsontang1/vultriage

The code of VulTriage: Triple-Path Context Augmentation for LLM-Based Vulnerability Detection

ai-securitycode-analysiseducation+4
104 months ago
PHPUnit_eval-stdin_RCE preview

PHPUnit_eval-stdin_RCE

GitHubludy-dev/phpunit_eval-stdin_rce

(CVE-2017-9841) PHPUnit_eval-stdin_php Remote Code Execution

code-analysisexploitationpenetration-testing+2
65 years ago
CVE-2022-22965 preview

CVE-2022-22965

GitHubkhidottrivi/cve-2022-22965

In-depth technical analysis of CVE-2022-22965 (Spring4Shell) with environment setup, debug walkthrough, and exploit chain breakdown for educational…

code-analysiseducationexploitation+3
44 years ago
TrustworthyRAG preview

TrustworthyRAG

GitHubgpt-laboratory/trustworthyrag

An Evaluation Agent for Detecting Misinformation and Knowledge Poisoning in Retrieval-Augmented Generation Systems.

ai-securityanomaly-detectioncode-analysis+2
3 months ago
react-cve-2025-55182 preview

react-cve-2025-55182

GitHubniokagi/react-cve-2025-55182

Test & Analyze the CVE-2025-55182 vulnerability within Next.js Server Actions

code-analysiseducationexploitation+5
9 months ago
apache-struts-cve-2017-9805 preview

apache-struts-cve-2017-9805

GitHubrvermeulen/apache-struts-cve-2017-9805

Exploit for Apache Struts CVE-2017-9805, a remote code execution vulnerability in the REST plugin. Enables penetration testing and security…

code-analysisexploitationpenetration-testing+3
5 years ago
grails3-cve-2022-27772 preview

grails3-cve-2022-27772

GitHubpuneetbehl/grails3-cve-2022-27772

Proof-of-concept exploit for CVE-2022-27772 targeting Grails 3.3 framework's custom TomcatEmbeddedServletContainerFactory, demonstrating insecure…

code-analysisexploitationpenetration-testing+2
4 years ago
web2py-e94946d-CVE-2016-3957 preview

web2py-e94946d-CVE-2016-3957

GitHubsj/web2py-e94946d-cve-2016-3957

web2py/web2py @ e94946d

authenticationcode-analysisdatabase-security+3
7 years ago
dnSpy preview
Archived

dnSpy

GitHubdnspy/dnspy

.NET debugger and assembly editor

binary-analysisbinary-exploitationcode-analysis+8
29.7k5 years ago
CVE-2018-1270 preview
Archived

CVE-2018-1270

GitHubcaledoniaproject/cve-2018-1270

Spring messaging STOMP protocol RCE

code-analysiseducationexploitation+2
1138 years ago
React2Shell-CVE-2025-55182-original-poc preview

React2Shell-CVE-2025-55182-original-poc

GitHublachlan2k/react2shell-cve-2025-55182-original-poc

Original proof-of-concept exploits for React2Shell (CVE-2025-55182), demonstrating remote code execution in Next.js applications via Webpack chunk…

code-analysisexploit-frameworkspayload-development+3
1.1k9 months ago
sxwp2shell preview

sxwp2shell

GitHubsentinelxofficial/sxwp2shell

WordPress wp2shell pre-auth RCE exploit kit (CVE-2026-63030 + CVE-2026-60137)

code-analysisexploitationpenetration-testing-frameworks+2
12 months ago
CVE-2023-46818 preview

CVE-2023-46818

GitHubsyfi/cve-2023-46818

Metasploit Modules

code-analysisexploit-frameworkspayload-development+3
1 year ago
-CVE-2024-31211 preview

-CVE-2024-31211

GitHubabdurahmon3236/-cve-2024-31211

Metasploit module that exploits a WordPress unserialization vulnerability (CVE-2024-31211) in WP_HTML_Token to achieve remote code execution.

code-analysisexploit-frameworkspayload-development+3
2 years ago
CVE-2024-6366 preview

CVE-2024-6366

GitHubabdurahmon3236/cve-2024-6366

Metasploit exploit module for CVE-2024-6366, an unauthenticated file upload remote code execution in WordPress User Profile Builder before 3.11.8,…

code-analysisexploit-frameworkspayload-development+3
2 years ago
Previous12345Next