Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
857 results
tplmap preview

tplmap

GitHubepinna/tplmap

Server-Side Template Injection and Code Injection Detection and Exploitation Tool

code-analysisexploitationpenetration-testing+2
4.2k4 years ago
CVE-2025-48543 preview

CVE-2025-48543

GitHubgamesarchive/cve-2025-48543

Proof-of-concept exploit for CVE-2025-48543, written in C++. Demonstrates exploitation of a specific vulnerability for security testing and research…

binary-exploitationcode-analysisexploitation+3
559 months ago
CVE-2021-22204 preview

CVE-2021-22204

GitHubassassinukg/cve-2021-22204

Exploit script for CVE-2021-22204, an ExifTool RCE via malicious DjVu files, with manual exploitation steps and reverse shell payloads.

code-analysisexploitationpayload-development+3
284 years ago
CVE-2021-21014 preview

CVE-2021-21014

GitHubhoangkien1020/cve-2021-21014

Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to a file upload restriction bypass. Successful…

code-analysisexploitationpenetration-testing+2
45 years ago
SECURITY-3430 preview

SECURITY-3430

GitHubjenkinsci-cert/security-3430

Java agent that transforms a vulnerable class to block exploitation of CVE-2024-43044 in Jenkins controllers, with optional forced shutdown on…

code-analysisdefensive-toolsexploitation+2
22 years ago
CVE-2020-0601 preview

CVE-2020-0601

GitHubyoanndqr/cve-2020-0601

CurveBall CVE exploitation

code-analysiscryptographyexploitation+3
26 years ago
CVE-2026-4800-POC preview

CVE-2026-4800-POC

GitHubthrealwinky/cve-2026-4800-poc

Proof-of-concept demonstrating remote code execution in lodash template via prototype pollution, with detailed analysis of the attack flow and…

code-analysisexploitationpayload-development+2
36 months ago
Xstream_cve-2022-41966 preview

Xstream_cve-2022-41966

GitHub111ddea/xstream_cve-2022-41966

Debug and proof-of-concept code for CVE-2022-41966, demonstrating exploitation of the XStream deserialization vulnerability in Java.

code-analysisexploitationstatic-analysis+2
33 years ago
CVE-2023-29007_win-version preview

CVE-2023-29007_win-version

GitHubx-defender/cve-2023-29007_win-version

Proof-of-concept exploit for CVE-2023-29007, a Git arbitrary configuration injection vulnerability. Demonstrates exploitation on Windows systems for…

code-analysisexploitationpenetration-testing+2
23 years ago
CVE-2025-67146-CVE-2025-67147 preview

CVE-2025-67146-CVE-2025-67147

GitHubsivaadityacoder/cve-2025-67146-cve-2025-67147

PHP-based exploit module targeting CVE-2025-67146 and CVE-2025-67147 for automated vulnerability exploitation and security assessment.

code-analysisexploitationpenetration-testing+2
6 months ago
CVE-2024-36104 preview

CVE-2024-36104

GitHubggfzx/cve-2024-36104

Exploit tool for CVE-2024-36104 targeting Apache OFBiz code execution vulnerability. Supports single and batch URL scanning with proxy and threading…

code-analysisexploitationpenetration-testing+3
22 years ago
CVE-2026-31431-old-python preview

CVE-2026-31431-old-python

GitHubgrishinpv/cve-2026-31431-old-python

Provides a ctypes wrapper for the splice syscall to enable exploitation of CVE-2026-31431 on Python versions below 3.10, tested on Python 3.7.3.

binary-exploitationcode-analysisexploitation+1
5 months ago
EXPLOIT-CVE-2026-8832- preview

EXPLOIT-CVE-2026-8832-

GitHubfunixone/exploit-cve-2026-8832-

Automated RCE exploit for WordPress WPCode Lite v2.3.5. Executes 6-step exploitation chain via XML-RPC bypass with 8 built-in PHP payloads, including…

code-analysisexploitationpayload-development+5
4 months ago
external_libavc_AOSP10_r33_CVE-2021-0325 preview

external_libavc_AOSP10_r33_CVE-2021-0325

GitHubnanopathi/external_libavc_aosp10_r33_cve-2021-0325

C-based vulnerability analysis and exploitation toolkit targeting AOSP libavc heap overflow (CVE-2021-0325) with static code analysis capabilities.

binary-analysiscode-analysisexploitation+2
11 year ago
CVE-2026-44788 preview

CVE-2026-44788

GitHube-corp-demo/cve-2026-44788

Proof-of-concept exploit for CVE-2026-44788, demonstrating vulnerability exploitation in C# for security testing and validation.

binary-exploitationcode-analysisexploitation+2
3 months ago
cve-2024-37762 preview

cve-2024-37762

GitHubatreb92/cve-2024-37762

Proof-of-concept exploit for authenticated unrestricted file upload leading to remote code execution in MachForm up to version 21, with detailed…

code-analysisexploitationinformation-gathering+3
12 years ago
CVE-2023-27363 preview

CVE-2023-27363

GitHubqwqdanchun/cve-2023-27363

Proof-of-concept exploit for CVE-2023-27363, demonstrating a specific vulnerability with automated exploitation logic for security testing and…

code-analysisexploitationpenetration-testing+2
13 years ago
av_CVE-2020-0162_A10r33 preview

av_CVE-2020-0162_A10r33

GitHubpazhanivelmani/av_cve-2020-0162_a10r33

Exploit for CVE-2020-0162 targeting a specific vulnerability, implemented in C++ for binary exploitation and security testing.

binary-exploitationcode-analysisexploitation+2
5 months ago
Previous12…48Next