Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

38 results

cve-2019-15107

adampawelczyk/cve-2019-15107

Proof-of-concept exploit for CVE-2019-15107 (Webmin <= 1.920) enabling unauthenticated RCE via command injection.

command-and-controlexploitationpayload-generation+3

6 months ago

dameflare

boydhacks/dameflare

Python 3 exploit for CVE-2019-3980. Unauthenticated RCE as SYSTEM via SolarWinds Dameware MRC smart card authentication bypass.

command-and-controlexploitationids-ips-evasion+6

47 months ago

CVE-2019-9193-Postgresql-RCE

cybersrmutl/cve-2019-9193-postgresql-rce

Python exploit script for CVE-2019-9193, enabling remote code execution on vulnerable PostgreSQL databases via authenticated command injection.

command-and-controldatabase-securityexploitation+2

9 months ago

CVE-2019-9624

x0rbeexd/cve-2019-9624

Authenticated RCE for Webmin 1.9.0

command-and-controlexploitationpayload-development+3

9 months ago

CVE-2025-53770

exfil0/cve-2025-53770

A sophisticated, wizard-driven Python exploit tool targeting CVE-2025-53770, a critical (CVSS 9.8) unauthenticated remote code execution (RCE)…

command-and-controlexploitationids-ips-evasion+7

51 year ago

Exim-CVE-2019-10149

voyageronne/exim-cve-2019-10149

PoC for exploitation of vulnerability CVE-2019-10149

command-and-controlexploitationpayload-generation+2

1 year ago

CVE-2019-0232

dharan10/cve-2019-0232

Hi this is a revised and enhanced code for CVE-2019-0232

command-and-controlexploitationpayload-generation+3

21 year ago

CVE-2019-1010174

nketiahgodfred/cve-2019-1010174

CImg Library v.2.3.3 - command injection

code-analysiscommand-and-controlexploitation+2

11 year ago

CVE-2019-25065-exploit

sagisar1/cve-2019-25065-exploit

A POC for CVE-2019-25065, os command injection in OpenNetAdmin

command-and-controlexploitationpenetration-testing+2

1 year ago

Exihibitor-RCE

thehunt1s0n/exihibitor-rce

Exihibitor Web Ui 1.7.1 RCE, CVE-2019-5029

command-and-controlexploitationpenetration-testing+3

52 years ago

CVE-2019-15107

g1vi/cve-2019-15107

webmin <=1.920 - RCE via command injection vulnerability

command-and-controlexploitationpenetration-testing+2

3 years ago

CVE-2019-2729_creal

luchoane/cve-2019-2729_creal

PoC for exploiting CVE-2019-2729 on WebLogic

command-and-controlexploitationpenetration-testing+3

34 years ago

webmin_1.920

hadrian3689/webmin_1.920

Python3 exploit for CVE-2019-15107 Webmin 1.920 unauthenticated remote command execution, delivering reverse shells or firewall-evading…

command-and-controlexploitationpenetration-testing+3

4 years ago

CVE-2019-15107

whokilleddb/cve-2019-15107

CVE-2019-15107 Webmin Exploit in C

command-and-controlexploitationpayload-development+3

35 years ago

weblogic2021

somatrasss/weblogic2021

CVE-2021-1994、CVE-2021-2047、CVE-2021-2064、CVE-2021-2108、CVE-2021-2075、CVE-2019-17195、CVE-2020-14756、CVE-2021-2109

command-and-controlexploitationpenetration-testing+3

125 years ago

CVE-2019-12725

gougou123-hash/cve-2019-12725

Batch scanner and exploit for CVE-2019-12725, a ZeroShell command injection vulnerability. Supports single URL testing, mass scanning, and…

command-and-controlexploitationpenetration-testing+2

5 years ago

CVE-2019-25024

codexlynx/cve-2019-25024

Python exploit for CVE-2019-25024, an unauthenticated command injection vulnerability in OpenRepeater, enabling remote command execution on affected…

command-and-controlexploitationpenetration-testing+2

5 years ago

weaponized-0604

gh0st0ne/weaponized-0604

Automated tool to exploit sharepoint CVE-2019-0604

command-and-controlexploitationpayload-generation+3

85 years ago

Previous12 3 Next