Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

140 results

CVE-2026-22777

si13nttt/cve-2026-22777

Proof-of-concept exploit chaining CRLF injection in ComfyUI-Manager's config endpoint with an arbitrary git install to achieve unauthenticated remote…

command-and-controlexploitationpayload-development+5

1 month ago

CVE-2026-33017

maxprog-svg/cve-2026-33017

CVE-2025-62593 — Ray Unauthenticated RCE Exploit is an unauthenticated remote code execution vulnerability in the Ray distributed AI compute engine.

command-and-controlexploitationreconnaissance+3

1 month ago

CVE-2025-1338

jxcaxtc/cve-2025-1338

Proof-of-concept exploit for CVE-2025-1338, a command injection vulnerability in NUUO Camera, with multi-threaded scanning and result output.

command-and-controlexploitationpenetration-testing+2

21 year ago

CVE-2025-59287

garvitv14/cve-2025-59287

Automated exploit for CVE-2025-59287, an unauthenticated RCE in WSUS, featuring payload generation, reverse shell listener, and AES encryption with…

command-and-controlexploitationpayload-generation+4

161 year ago

CVE-2025-10230

dptsec/cve-2025-10230

Proof-of-concept exploit for CVE-2025-10230, a Samba WINS hook command injection vulnerability, demonstrating limited 15-character command execution.

command-and-controlexploitationpenetration-testing+2

61 year ago

CVE-2025-69212-Exploit

pasindu-sd/cve-2025-69212-exploit

Automated exploit for CVE-2025-69212 command injection in OpenSTAManager, featuring admin authentication, malicious ZIP upload, and reverse shell or…

command-and-controlexploitationpayload-development+2

2 months ago

CVE-2025-5781

jasonbernier/cve-2025-5781

Proof-of-concept exploit for CVE-2025-57819 in FreePBX: SQL injection in the AJAX API to execute arbitrary PHP, create a persistent webshell, and…

command-and-controlexploitationpayload-development+3

2 months ago

Nextjs_Exploit_Tool

se1zer/nextjs_exploit_tool

Next.js RSC RCE Exploit Tool (CVE-2025-55182)

command-and-controlexploitationpayload-generation+5

53 months ago

CVE-2026-39808

samu-delucas/cve-2026-39808

PoC for Unauthenticated RCE in FortiSandbox via CVE-2026-39808

command-and-controlexploitationpenetration-testing+2

96 months ago

CVE-2025-55182

faithtiannn/cve-2025-55182

CVE-2025-55182漏洞检测工具

command-and-controlexploitationpayload-development+5

29 months ago

printerbugnew

decoder-it/printerbugnew

The DCERPC only printerbug.py version

authenticationcommand-and-controlexploitation+5

2341 year ago

CVE-2025-55182-GUI

m3ngx1ng/cve-2025-55182-gui

CVE-2025-55182 漏洞检测与利用工具（GUI版）

command-and-controlexploitationpayload-development+5

110 months ago

CVE-2025-55182-Waf

l0n3m4n/cve-2025-55182-waf

CVE-2025-55182 RCE vulnerability in Next.js/React RSC servers (exploit and scanner)

command-and-controlexploitationpayload-generation+5

210 months ago

Blackash-CVE-2025-61757

ngominhquocngu/blackash-cve-2025-61757

CVE-2025-61757

command-and-controlexploitationpenetration-testing+3

11 months ago

CVE-2025-3248

r0otk3r/cve-2025-3248

Scanner and exploit for CVE-2025-3248, an unauthenticated RCE in Langflow AI. Includes a vulnerability checker and a reverse shell payload generator…

command-and-controlexploitationpayload-development+5

11 year ago

react2shell-exploit

rubensuxo-eh/react2shell-exploit

React2Shell-Exploit — Complete exploitation framework for CVE-2025-55182, including Python exploit, Docker vulnerable lab, Burp Suite manual and…

command-and-controleducationexploit-frameworks+6

410 months ago

CVE-2025-55182-Simple-Scanner

satriarizka/cve-2025-55182-simple-scanner

High-fidelity RCE scanner for CVE-2025-55182 affecting Next.js RSC. Supports mass scanning, command execution, and automated recon pipelines. Built…

command-and-controleducationexploitation+5

10 months ago

CVE-2025-68613

secjoker/cve-2025-68613

基于Pocsuite3 框架编写的漏洞验证与利用脚本，用于检测 n8n工作流自动化工具中的认证后远程代码执行漏洞（RCE）

command-and-controlexploitationpayload-development+4

10 months ago

Previous12…8 Next