Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
107 results
JavaScript-Example preview

JavaScript-Example

GitHubseal-sec-demo-2/javascript-example

Seal Security example — vulnerable npm app (EJS CVE-2022-29078) remediated to sealed versions; GitHub Actions + Jenkins integration

code-analysisdevsecopseducation+3
24 days ago
Bad secure rails app preview

Bad secure rails app

GitLabvivian.maes/bad-secure-rails-app
code-analysiseducationmisconfiguration+3
1 month ago
CVE-2026-38360 preview

CVE-2026-38360

GitHuba1ohadance/cve-2026-38360

Advisory: CVE-2026-38360 path traversal (CWE-22) in dash-uploader (Python/PyPI)

code-analysiseducationexploitation+3
23 months ago
CVE-2024-41662 preview

CVE-2024-41662

GitHubsh3bu/cve-2024-41662

Markdown XSS leads to RCE in VNote version <=3.18.1

code-analysisexploitationstatic-analysis+2
42 years ago
Java-Example preview

Java-Example

GitHubseal-sec-demo-2/java-example

Seal Security example — vulnerable Maven app (SnakeYAML CVE-2022-1471) remediated to sealed versions; GitHub Actions + Jenkins integration

code-analysisdevsecopseducation+3
1 month ago
CVE-2026-34038 preview

CVE-2026-34038

GitHubthemehackers/cve-2026-34038

CVE-2026-34038: Authenticated Remote Command Injection in Coolify

code-analysiseducationexploitation+3
11 month ago
rails-cve-2012-5664-test preview

rails-cve-2012-5664-test

GitHubphusion/rails-cve-2012-5664-test

Demo app showing how the Rails CVE-2013-5664 vulnerability works.

code-analysisdatabase-securityeducation+2
213 years ago
CVE-2024-52302 preview

CVE-2024-52302

GitHubd3sca/cve-2024-52302

PoC exploit for CVE-2024-52302: unrestricted file upload in common-user-management Spring Boot app leading to remote code execution via…

code-analysisexploitationpayload-generation+3
11 year ago
CVE-2023-30253-PoC preview

CVE-2023-30253-PoC

GitHubg4nkd/cve-2023-30253-poc

I couldn’t find a PoC for CVE-2023-30253, so I developed an effective one

code-analysisexploitationpenetration-testing+2
12 years ago
CVE-2025-55182 preview

CVE-2025-55182

GitHuboguri-souhei/cve-2025-55182

CVE-2025-55182 の検証用

code-analysiseducationexploitation+3
8 months ago
jenkinsci__git-client-plugin_CVE-2019-10392_2-8-4 preview

jenkinsci__git-client-plugin_CVE-2019-10392_2-8-4

GitHubshoucheng3/jenkinsci__git-client-plugin_cve-2019-10392_2-8-4

Jenkins plugin providing Git APIs for automated repository operations including fetch, checkout, merge, and tag, with support for credential-based…

authenticationcode-analysisdevsecops+2
1 year ago
spring-boot-cve-2022-22965 preview

spring-boot-cve-2022-22965

GitHubsnicoll-scratches/spring-boot-cve-2022-22965

Showcase of overridding the Spring Framework version in older Spring Boot versions

code-analysiseducationexploitation+2
4 years ago
CVE-2019-5420 preview

CVE-2019-5420

GitHubtrickstersec/cve-2019-5420

Exploit for the Rails CVE-2019-5420

code-analysisexploitationpenetration-testing+2
4 years ago
grails3-cve-2022-27772 preview

grails3-cve-2022-27772

GitHubpuneetbehl/grails3-cve-2022-27772

Proof-of-concept exploit for CVE-2022-27772 targeting Grails 3.3 framework's custom TomcatEmbeddedServletContainerFactory, demonstrating insecure…

code-analysisexploitationpenetration-testing+2
4 years ago
CVE-2020-5245 preview

CVE-2020-5245

GitHublycshub/cve-2020-5245

Proof-of-concept exploit for CVE-2020-5245, demonstrating expression language injection in Dropwizard REST endpoints via crafted HTTP parameters.

code-analysisexploitationpenetration-testing+2
3 years ago
spring-RCE-CVE-2022-22965 preview

spring-RCE-CVE-2022-22965

GitHubenokiy/spring-rce-cve-2022-22965

Educational analysis and proof-of-concept exploit for CVE-2022-22965, a Spring MVC/WebFlux remote code execution vulnerability via data binding on…

code-analysiseducationexploitation+2
4 years ago
Codecepticon preview
Archived

Codecepticon

GitHubaccenture/codecepticon

.NET/PowerShell/VBA Offensive Security Obfuscator

code-analysiscommand-and-controlids-ips-evasion+5
5272 years ago
Previous123456Next