Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
85 results
cve-2022-36804 preview

cve-2022-36804

GitHubjunohea/cve-2022-36804

Python exploit for CVE-2022-36804, enabling remote command execution and file transfer on vulnerable Bitbucket Server/Data Center via crafted archive…

command-and-controlexploitationpenetration-testing+2
7 days ago
CVE-2025-5781 preview

CVE-2025-5781

GitHubjasonbernier/cve-2025-5781

Proof-of-concept exploit for CVE-2025-57819 in FreePBX: SQL injection in the AJAX API to execute arbitrary PHP, create a persistent webshell, and…

command-and-controlexploitationpayload-development+3
16 days ago
CVE-2021-22893_HoneyPoC2 preview
Archived

CVE-2021-22893_HoneyPoC2

GitHubzephrfish/cve-2021-22893_honeypoc2

DO NOT RUN THIS.

command-and-controlexploitationpenetration-testing+3
4728 days ago
CVE-2025-54123 preview

CVE-2025-54123

GitHub0xk4rth1/cve-2025-54123

Python proof-of-concept for CVE-2025-54123, demonstrating command injection to RCE in Hoverfly middleware API with credential or token-based…

command-and-controleducationexploitation+3
22 months ago
CVE-2026-6279.py preview

CVE-2026-6279.py

GitHub87achrafg-stack/cve-2026-6279.py

CVE-2026-6279

command-and-controlexploitationpayload-development+5
12 months ago
r2rs preview

r2rs

GitHubhakkuri01/r2rs

Interactive Ruby shell for authorized CVE-2025-55182 (react2shell) testing

command-and-controlexploitationpenetration-testing+3
12 months ago
CVE-2026-41940 preview

CVE-2026-41940

GitHubchristian93111/cve-2026-41940

cPanel/WHM Authentication Bypass (Zero-Day Vulnerability)

authenticationcommand-and-controleducation+6
103 months ago
CVE-2011-2523 preview

CVE-2011-2523

GitHubbyteforgefr/cve-2011-2523

VsFTPd 2.3.4 Backdoor Command Execution

command-and-controlexploitationpayload-generation+3
13 months ago
CVE-2024-28397-Js2Py-RCE preview

CVE-2024-28397-Js2Py-RCE

GitHuby0naldez/cve-2024-28397-js2py-rce

Generates JavaScript payloads to exploit CVE-2024-28397 Js2Py sandbox escape, enabling remote command execution and reverse shells via Python…

command-and-controlexploitationpayload-generation+3
3 months ago
CVE-2025-32434-exploit preview

CVE-2025-32434-exploit

GitHubb1tbit/cve-2025-32434-exploit

A script for exploiting a vulnerability in PyTorch with subsequent RCE in library versions < 2.6.0

command-and-controlexploitationpayload-generation+3
4 months ago
distccd_rce_CVE-2004-2687 preview

distccd_rce_CVE-2004-2687

GitHubmicheaol/distccd_rce_cve-2004-2687

Manual exploit script for CVE-2004-2687 (distccd RCE) that spawns a reverse shell via netcat without Metasploit, targeting remote hosts for…

command-and-controlexploitationpenetration-testing+3
4 months ago
CVE-2025-54123 preview

CVE-2025-54123

GitHubdavidzzo23/cve-2025-54123

Python exploit script for CVE-2025-54123 targeting Hoverfly RCE with command execution and reverse shell capabilities for authorized security testing.

command-and-controleducationexploitation+3
5 months ago
CVE-2018-1049-POC preview

CVE-2018-1049-POC

GitHublukehebe/cve-2018-1049-poc

Remote privilege escalation exploit for CVE-2018-1049 targeting VyOS via SSH-based command injection in a sudo-permitted Perl script, granting root…

command-and-controlexploitationpenetration-testing+3
7 months ago
Mass-CVE-2025-29306 preview

Mass-CVE-2025-29306

GitHubmantanhacker/mass-cve-2025-29306

Mass Exploit for CVE-2025-29306

command-and-controlexploitationpenetration-testing+3
17 months ago
Exploit_CVE-2025-37164 preview

Exploit_CVE-2025-37164

GitHublachhab-anas/exploit_cve-2025-37164

Exploit for the CVE-2025-37164

command-and-controleducationexploitation+2
17 months ago
XWiki-Platform-RCE-CVE-2025-24893 preview

XWiki-Platform-RCE-CVE-2025-24893

GitHub0xdtc/xwiki-platform-rce-cve-2025-24893

Bash exploit for CVE-2025-24893, unauthenticated RCE in XWiki Platform, using template injection in the SolrSearch macro to execute arbitrary system…

command-and-controlexploitationpayload-development+3
8 months ago
CVE-2025-1338 preview

CVE-2025-1338

GitHubjxcaxtc/cve-2025-1338

Proof-of-concept exploit for CVE-2025-1338, a command injection vulnerability in NUUO Camera, with multi-threaded scanning and result output.

command-and-controlexploitationpenetration-testing+2
210 months ago
CVE-2025-50154-Aggressor-Script preview

CVE-2025-50154-Aggressor-Script

GitHubash1996x/cve-2025-50154-aggressor-script

Cobalt Strike Aggressor script that weaponizes LNK and Library-MS files to trigger SMB NTLMv2 hash disclosure, including CVE-2025-24054 bypass, for…

command-and-controlctfeducation+9
111 months ago
Previous12345Next