Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

880 results

CVE-2022-1388-PocExp

0x7eteam/cve-2022-1388-pocexp

CVE-2022-1388-PocExp,新增了多线程,F5 BIG-IP RCE exploitation

command-and-controlexploitationpenetration-testing+2

4 years ago

CVE-2024-3400-Palo-Alto-OS-Command-Injection

0xr2r/cve-2024-3400-palo-alto-os-command-injection

Proof-of-concept exploitation steps for CVE-2024-3400, demonstrating unauthenticated command injection in Palo Alto GlobalProtect via crafted cookie…

command-and-controlexploitationpenetration-testing+2

62 years ago

CVE-2025-54123-Poc

kasem545/cve-2025-54123-poc

CVE-2025-54123 Hoverfly Authenticated Middleware Command Injection RCE

command-and-controlexploitationpayload-development+5

76 months ago

CVE-2023-43482

mr-xn/cve-2023-43482

TP-Link ER7206 Omada Gigabit VPN Router uhttpd freeStrategy Command injection Vulnerability

command-and-controlexploitationpenetration-testing+3

62 years ago

CVE-2026-20841

hamzamalik3461/cve-2026-20841

🛠 Demonstrate remote code execution in Windows Notepad via markdown links exploiting unsecured URL protocols.

command-and-controlexploitationpayload-development+3

16 days ago

CVE-2018-18649

snowming04/cve-2018-18649

CVE-2018-18649 EXP

command-and-controlexploitationpenetration-testing+2

46 years ago

ShadowTech-Rat

retrobyte/shadowtech-rat

An example of a remote administration tool.

command-and-controlpenetration-testingpost-exploitation+3

410 years ago

ivanti-CVE-2024-21887

oways/ivanti-cve-2024-21887

POC Checker for ivanti CVE-2024-21887 Command injcetion

command-and-controlexploitationpenetration-testing+2

72 years ago

F5-BIG-IP-RCE-CVE-2022-1388

angus-team/f5-big-ip-rce-cve-2022-1388

Multi-threaded Python scanner for CVE-2022-1388, an F5 BIG-IP remote code execution vulnerability. Supports single URL and batch file input, with…

command-and-controlexploitationpenetration-testing+3

54 years ago

Apache-Struts-2-CVE-2017-5638-Exploit-

r4v3nbl4ck/apache-struts-2-cve-2017-5638-exploit-

Exploit created by: R4v3nBl4ck end Pacman

command-and-controlexploitationpenetration-testing+3

39 years ago

langflow-rce-exploit

0-d3y/langflow-rce-exploit

Remote Code Execution Exploit for Langflow (CVE-2025-3248) - [ By S4Tech ]

command-and-controlexploitationpayload-development+8

71 year ago

CVE-2026-10523-Ivanti-sentry

gagaltotal/cve-2026-10523-ivanti-sentry

Proof-of-concept detection tool for Ivanti Sentry authentication bypass and remote code execution vulnerabilities (CVE-2026-10520, CVE-2026-10523).…

authenticationcommand-and-controlexploitation+3

33 months ago

Peyara

capture0x/peyara

Peyara Remote Mouse v1.0.1- Remote Code Execution (RCE)

command-and-controlexploitationpenetration-testing+3

33 months ago

cve-2023-51467

vulncheck-oss/cve-2023-51467

A go-exploit for Apache OFBiz CVE-2023-51467

command-and-controlexploitationpayload-development+5

61 year ago

CVE-2023-42791_CVE-2024-23666

synacktiv/cve-2023-42791_cve-2024-23666

Exploitations scripts for CVE-2023-42791 and CVE-2024-23666.

command-and-controlexploitationpenetration-testing+5

61 year ago

CVE-2025-49844

zain3311/cve-2025-49844

Exploit CVE-2025-49844 Redis Lua UAF vulnerability to execute arbitrary shellcode and establish persistent backdoor access on vulnerable Redis…

command-and-controlexploitationpayload-development+3

26 days ago

sdwan-cve-2021-1480

xmco/sdwan-cve-2021-1480

PoC materials to exploit the CVE-2021-1480 on Cico SD-WAN.

command-and-controlexploitationnetwork-security+3

45 years ago

CVE-2025-69212-PoC

tohib09/cve-2025-69212-poc

Proof-of-concept exploit for CVE-2025-69212: OS command injection in OpenSTAManager <= 2.9.8 via malicious .p7m filename in ZIP upload, enabling…

command-and-controlexploitationpenetration-testing+2

43 months ago

Previous 1…192021…49 Next