Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
101 results
CVE-2024-47051 preview

CVE-2024-47051

GitHubmallo-m/cve-2024-47051

Mautic < 5.2.3 Authenticated RCE

code-analysisexploitationpayload-development+3
51 year ago
CVE-2024-0195-SpiderFlow preview

CVE-2024-0195-SpiderFlow

GitHubgh-ost00/cve-2024-0195-spiderflow

CVE-2024-0195 Improper Control of Generation of Code ('Code Injection')

code-analysisexploitationpayload-generation+3
52 years ago
CVE-2020-0601 preview

CVE-2020-0601

GitHubyanghaoi/cve-2020-0601

PoC for CVE-2020-0601- Windows CryptoAPI (Crypt32.dll) POC: https://github.com/ollypwn/CurveBall

binary-exploitationcode-analysiscryptography+3
15 years ago
WordPress-News-and-Blog-Designer-Bundle-CVE-2025-14502 preview

WordPress-News-and-Blog-Designer-Bundle-CVE-2025-14502

GitHubkai-one001/wordpress-news-and-blog-designer-bundle-cve-2025-14502

WordPress的News and Blog Designer Bundle插件在1.1及之前所有版本中,存在通过template参数导致的本地文件包含漏洞。该漏洞使得未经身份验证的攻击者能够包含并执行服务器上的任意.php文件,从而运行这些文件中的任何PHP代码。在允许上传和包含.php文件类型…

code-analysisexploitationpenetration-testing+3
28 months ago
CVE-2023-43838 preview

CVE-2023-43838

GitHubrootd4ddy/cve-2023-43838

Public disclosure for CVE-2023-31584.

code-analysisexploitationpenetration-testing+2
13 years ago
CVE-2025-50472 preview

CVE-2025-50472

GitHubbefore-rain/cve-2025-50472

Proof-of-concept exploit for CVE-2025-50472, a deserialization RCE vulnerability in ModelScope ms-swift's ModelFileSystemCache via malicious .mdl…

code-analysisexploitationpayload-development+3
11 year ago
DjVuLibre-poc-CVE-2025-53367 preview

DjVuLibre-poc-CVE-2025-53367

GitHubkevinbackhouse/djvulibre-poc-cve-2025-53367

Proof-of-concept exploit for CVE-2025-53367, a vulnerability in the DjVuLibre library. Demonstrates exploitation of a memory corruption bug in DjVu…

binary-analysiscode-analysisexploitation+3
1 year ago
CVE-2024-6330 preview

CVE-2024-6330

GitHubrandomrobbiebf/cve-2024-6330

GEO my WordPress < 4.5.0.2 - Unauthenticated LFI to RCE/PHAR Deserialization

code-analysisexploitationpayload-development+3
1 year ago
CVE-2025-46078 preview

CVE-2025-46078

GitHubyggcwhat/cve-2025-46078

Vulnerability Description

code-analysisexploitationmisconfiguration+3
1 year ago
CVE-2025-46080 preview

CVE-2025-46080

GitHubyggcwhat/cve-2025-46080

Details

code-analysisexploitationmisconfiguration+3
1 year ago
CVE-2019-17234b-Exploit preview

CVE-2019-17234b-Exploit

GitHubadministra1tor/cve-2019-17234b-exploit

Wordpress IgniteUp plugin < 3.4.1 allows unauthenticated users to arbitrarily delete files on the webserver possibly causing DoS.

code-analysisexploitationpenetration-testing+2
5 years ago
Previous123456Next