Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

101 results

CVE-2024-10629

randomrobbiebf/cve-2024-10629

GPX Viewer <= 2.2.8 - Authenticated (Subscriber+) Arbitrary File Creation

code-analysisexploitationpenetration-testing+2

1 year ago

CVE-2019-19203

tarantula-team/cve-2019-19203

An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function gb18030_mbc_enc_len in file gb18030.c, a UChar pointer is dereferenced…

binary-analysiscode-analysisexploitation+3

6 years ago

CVE-2018-16370

snappyjack/cve-2018-16370

In PESCMS Team 2.2.1, attackers may upload and execute arbitrary PHP code through /Public/?g=Team&m=Setting&a=upgrade by placing a .php file in a…

code-analysisexploitationpenetration-testing+2

8 years ago

CVE-2024-31835

paragbagul111/cve-2024-31835

Cross Site Scripting vulnerability in flatpress CMS Flatpress v1.3 allows a remote attacker to execute arbitrary code via a craftedpayload to the…

code-analysisexploitationpenetration-testing+2

2 years ago

CVE-2019-3396

am6539/cve-2019-3396

Exploit for CVE-2019-3396, a path traversal and RCE vulnerability in Confluence Server, enabling unauthorized file read and remote code execution.

code-analysisexploitationpenetration-testing+2

6 years ago

CVE-2025-47549

d0n601/cve-2025-47549

Ultimate Before After Image Slider & Gallery – BEAF <= 4.6.10 - Authenticated (Admin+) Arbitrary File Upload via beaf_options_save

code-analysisexploitationpayload-generation+3

1 year ago

CVE-2025-47550

d0n601/cve-2025-47550

Instantio - Wordpress Plugin <= 3.3.16 - Authenticated (Admin+) Arbitrary File Upload via ins_options_save

code-analysisexploitationpayload-generation+3

1 year ago

CVE-2024-10516

randomrobbiebf/cve-2024-10516

Swift Performance Lite <= 2.3.7.1 - Unauthenticated Local PHP File Inclusion via 'ajaxify'

code-analysisexploitationpenetration-testing+3

1 year ago

cve-2018-12895-hotfix

bloom-ux/cve-2018-12895-hotfix

Hotfix for file deletion to to code execution vulnerability in WordPress

code-analysisexploitationpenetration-testing+2

4 years ago

CVE-2021-41644

hax3xploit/cve-2021-41644

Remote Code Exection (RCE) vulnerability exists in Sourcecodester Online Food Ordering System 2.0 via a maliciously crafted PHP file that bypasses…

code-analysisexploitationpenetration-testing+2

4 years ago

SigFlip

med0x2e/sigflip

SigFlip is a tool for patching authenticode signed PE files (exe, dll, sys ..etc) without invalidating or breaking the existing signature.

binary-analysiscode-analysisdefensive-tools+5

1.3k3 years ago

CVE-2024-9264

nollium/cve-2024-9264

Exploit for Grafana arbitrary file-read and RCE (CVE-2024-9264)

code-analysisexploitationpayload-generation+4

1311 year ago

WordPress_4.9.8_RCE_POC

brianwrf/wordpress_4.9.8_rce_poc

A simple PoC for WordPress RCE (author priviledge), refer to CVE-2019-8942 and CVE-2019-8943.

code-analysisexploitationpayload-development+3

747 years ago

CVE-2021-22204

assassinukg/cve-2021-22204

Exploit script for CVE-2021-22204, an ExifTool RCE via malicious DjVu files, with manual exploitation steps and reverse shell payloads.

code-analysisexploitationpayload-development+3

284 years ago

CVE-2022-32119

jc175/cve-2022-32119

CVE-2022-32119 - Arox-Unrestricted-File-Upload

code-analysisexploitationpenetration-testing+2

172 years ago

CVE-2022-1329

mcdulltii/cve-2022-1329

WordPress Elementor 3.6.0 3.6.1 3.6.2 RCE POC

code-analysisexploitationpayload-development+3

174 years ago

CVE-2024-9162

d0n601/cve-2024-9162

All-in-One WP Migration and Backup <= 7.86 - Authenticated (Administrator+) Arbitrary PHP Code Injection

code-analysisexploitationpayload-generation+3

71 year ago

CVE-2022-45771

yuriisanin/cve-2022-45771

[PoC] Privilege escalation & code execution via LFI in PwnDoC

code-analysisexploitationpayload-development+4

63 years ago

Previous 1 2 3 456 Next