Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
2060 results
CVE-2018-11235 preview

CVE-2018-11235

GitHubnthuong95/cve-2018-11235

Proof-of-concept exploit for CVE-2018-11235, a remote code execution vulnerability in Git submodules. Demonstrates exploitation of malicious…

binary-exploitationcode-analysisexploitation+2
6 years ago
GHSA-4cx5-89vm-833x-POC preview

GHSA-4cx5-89vm-833x-POC

GitHubjacklosingheart/ghsa-4cx5-89vm-833x-poc

GHSA-4cx5-89vm-833x/CVE-2024-52800

code-analysisexploitationpenetration-testing+2
1 year ago
CVE-2024-6387 preview

CVE-2024-6387

GitHubjack0we/cve-2024-6387

Proof-of-concept exploit for CVE-2024-6387, a remote code execution vulnerability in OpenSSH server, demonstrating exploitation techniques for…

code-analysisexploitationfuzzing+2
2 years ago
CVE-2018-7600. preview

CVE-2018-7600.

GitHubtpdlshdmlrkfmcla/cve-2018-7600.

CVE-2018-7600.

code-analysisexploitationpenetration-testing+2
1 year ago
CVE-2018-6574 preview

CVE-2018-6574

GitHubnsbyte/cve-2018-6574

Go-based proof-of-concept exploit for CVE-2018-6574, demonstrating remote code execution via crafted requests to vulnerable Go applications.

code-analysisexploitationpenetration-testing+2
3 years ago
CVE-2024-6330 preview

CVE-2024-6330

GitHubrandomrobbiebf/cve-2024-6330

GEO my WordPress < 4.5.0.2 - Unauthenticated LFI to RCE/PHAR Deserialization

code-analysisexploitationpayload-development+3
1 year ago
test preview

test

GitHubchenzhuo0618/test

Proof-of-concept exploit for CVE-2017-1000117, demonstrating a remote code execution vulnerability in Git.

binary-analysiscode-analysisexploitation+2
9 years ago
CVE-2010-2387 preview

CVE-2010-2387

GitHublogsec/cve-2010-2387

Proof-of-concept exploit for CVE-2010-2387, a privilege escalation vulnerability in GNOME Display Manager (GDM). Includes C source code targeting the…

binary-analysiscode-analysisexploitation+2
4 years ago
jenkinsci__script-security-plugin_CVE-2023-24422_1228.vd93135a_2fb_25 preview

jenkinsci__script-security-plugin_CVE-2023-24422_1228.vd93135a_2fb_25

GitHubshoucheng3/jenkinsci__script-security-plugin_cve-2023-24422_1228.vd93135a_2fb_25

Jenkins plugin providing script approval workflows and Groovy sandboxing to enforce secure script execution, with ACL-aware permission checks and…

api-securityauthentication-authorizationcode-analysis+5
6 months ago
CVE-2024-41302-Bookea-tu-Mesa-is-vulnerable-to-SQL-Injection preview

CVE-2024-41302-Bookea-tu-Mesa-is-vulnerable-to-SQL-Injection

GitHubpatrickdeanramos/cve-2024-41302-bookea-tu-mesa-is-vulnerable-to-sql-injection

Bookea-tu-Mesa is vulnerable to SQL Injection

code-analysiseducationstatic-code-analysis+3
2 years ago
CVE-2024-6366 preview

CVE-2024-6366

GitHubabdurahmon3236/cve-2024-6366

Metasploit exploit module for CVE-2024-6366, an unauthenticated file upload remote code execution in WordPress User Profile Builder before 3.11.8,…

code-analysisexploit-frameworkspayload-development+3
2 years ago
CVE-2024-53677-Exploitation preview

CVE-2024-53677-Exploitation

GitHubhopsypopsy8/cve-2024-53677-exploitation

Step-by-step walkthrough for exploiting Apache Struts CVE-2024-53677 RCE via file upload manipulation, including OGNL injection, payload embedding,…

code-analysiseducationexploitation+6
1 year ago
CVE-2024-24140 preview

CVE-2024-24140

GitHubburaksevben/cve-2024-24140

Proof-of-concept exploit demonstrating SQL injection in the Daily Habit Tracker App, enabling unauthorized database access and data extraction.

code-analysisexploitationpenetration-testing+2
2 years ago
CVE-2020-0601_PoC preview

CVE-2020-0601_PoC

GitHubjoelbts/cve-2020-0601_poc

Demonstration of CVE-2020-0601 aka curveball. Based on the PoC's available at https://github.com/kudelskisecurity/chainoffools and…

code-analysiscryptographyexploitation+3
2 years ago
CVE-2018-6574 preview

CVE-2018-6574

GitHubnoname-nohost/cve-2018-6574

Proof-of-concept exploit for CVE-2018-6574, a remote code execution vulnerability in Go's net/http package via crafted HTTP requests.

code-analysisexploitationpenetration-testing+2
5 years ago
CVE-2019-5420 preview

CVE-2019-5420

GitHubtrickstersec/cve-2019-5420

Exploit for the Rails CVE-2019-5420

code-analysisexploitationpenetration-testing+2
4 years ago
CVE-2023-30253 preview

CVE-2023-30253

GitHubbluetoothstrawberry/cve-2023-30253

Dolibarr 17.0.0 PHP Code Injection Exploit

code-analysisexploitationpenetration-testing+2
1 year ago
CVE-2017-7504-poc preview

CVE-2017-7504-poc

GitHubwudidwo/cve-2017-7504-poc

Proof-of-concept exploit for CVE-2017-7504 targeting JBoss 4.x JBossMQ JMS deserialization vulnerability. Includes usage help via -h flag.

code-analysisexploitationpayload-generation+3
1 year ago
Previous1…979899100Next