Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
121 results
CVE-2023-27372-SPIP-4.2.1-Unauthenticated-RCE-PoC preview

CVE-2023-27372-SPIP-4.2.1-Unauthenticated-RCE-PoC

GitHubestebanzarate/cve-2023-27372-spip-4.2.1-unauthenticated-rce-poc

Proof-of-concept exploit for unauthenticated remote code execution in SPIP < 4.2.1 via PHP object injection in the password reset form. Provides…

code-analysisexploitationpayload-development+3
18 months ago
CVE-2025-55182 preview

CVE-2025-55182

GitHubsun977/cve-2025-55182

CVE-2025-55182 检测方式和攻击利用

code-analysisexploitationpayload-development+3
110 months ago
cve-2025-55182-poc preview

cve-2025-55182-poc

GitHubmonarchfish/cve-2025-55182-poc

Proof-of-concept for CVE-2025-55182 (React2Shell): unauthenticated RCE in React Server Components / Next.js via Flight protocol deserialization.

code-analysisexploitationpayload-development+3
7 months ago
CVE-2026-0848-PoC-Improper-Input-Validation preview

CVE-2026-0848-PoC-Improper-Input-Validation

GitHubfevar54/cve-2026-0848-poc-improper-input-validation

PoC de CVE-2026-0848: validacion de entrada indebida en NLTK que permite ejecucion de codigo via StanfordSegmenter.

code-analysisexploitationpayload-development+2
6 months ago
Exploit-CVE-2025-68613 preview

Exploit-CVE-2025-68613

GitHubali-py3/exploit-cve-2025-68613

Proof-of-concept exploit for a critical RCE vulnerability in n8n (CVE-2025-68613), demonstrating arbitrary command execution via expression injection…

code-analysisexploitationpayload-development+3
10 months ago
CVE-2025-55816 preview

CVE-2025-55816

GitHubpartywavesec/cve-2025-55816

CVE-2025-55816 HotelDruid 3.0.7

code-analysisexploitationpayload-development+3
10 months ago
CVE-2025-55182 preview

CVE-2025-55182

GitHubbyte16384/cve-2025-55182

proof

code-analysisexploitationpayload-development+2
10 months ago
CVE-2024-24926 preview

CVE-2024-24926

GitHubmoften/cve-2024-24926

Vulnerabilidad CVE-2024-24926 afecta al tema Brooklyn de WordPress

code-analysisexploitationpayload-development+3
1 year ago
CVE-2024-4577 preview

CVE-2024-4577

GitHubwilss0n/cve-2024-4577

Proof-of-concept exploit for CVE-2024-4577 enabling remote code execution in vulnerable PHP versions 8.1-8.3. Includes customizable arguments for…

code-analysisexploitationpayload-development+3
1 year ago
CVE-2025-22510 preview

CVE-2025-22510

GitHubdottak/cve-2025-22510

PoC of CVE-2025-22510

code-analysisexploitationpayload-development+3
1 year ago
CVE-2024-28397-js2py-Sandbox-Escape preview

CVE-2024-28397-js2py-Sandbox-Escape

GitHubcyber-warrior-sec/cve-2024-28397-js2py-sandbox-escape

Proof-of-concept exploit for CVE-2024-28397, a sandbox escape in js2py allowing remote code execution via crafted JavaScript, with a dynamic patch…

code-analysisexploitationpayload-development+3
2 years ago
CVE-2024-40110 preview

CVE-2024-40110

GitHubabdurahmon3236/cve-2024-40110

Proof-of-concept script demonstrating unauthenticated remote code execution in Sourcecodester Poultry Farm Management System via the vulnerable…

code-analysisexploitationpayload-development+3
2 years ago
CVE-2024-9290 preview

CVE-2024-9290

GitHubrandomrobbiebf/cve-2024-9290

Super Backup & Clone - Migrate for WordPress <= 2.3.3 - Unauthenticated Arbitrary File Upload

code-analysisexploitationpayload-development+3
1 year ago
Previous1234567Next