Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

880 results

PNGboomer-CVE-2026-77622

squ1shification/pngboomer-cve-2026-77622

Sliver HTTP(S) C2 PNG bomb DoS exploit — GHSA-663m-7x7m-g4fw (CVE-2026-77622)

command-and-controlexploitationpenetration-testing+2

1 month ago

CVE-2022-36446

emirpolatt/cve-2022-36446

CVE-2022-36446 - Webmin 1.996 Remote Code Execution

command-and-controlexploitationpenetration-testing+3

34 years ago

CVE-2020-11652-POC

limon768/cve-2020-11652-poc

This is a fix POC CVE-2020-11651 & CVE-2020-11651

command-and-controlexploitationpenetration-testing+2

42 years ago

CVE-2024-3273-EXPLOIT

k3ystr0k3r/cve-2024-3273-exploit

A PoC exploit for CVE-2024-3273 - D-Link Remote Code Execution RCE

command-and-controlexploitationpenetration-testing+3

52 years ago

CVE-2021-3129

axianke/cve-2021-3129

CVE-2021-3129

command-and-controlexploitationpenetration-testing+2

52 years ago

CVE-2024-13985

crimsonfiedofficial/cve-2024-13985

Technical advisory and proof-of-concept for CVE-2024-13985, a critical unauthenticated remote code execution vulnerability in Dahua EIMS via command…

command-and-controlexploitationpenetration-testing+3

22 months ago

CVE-2026-27626-PoC

0xh7ml/cve-2026-27626-poc

OliveTin is a self-hosted web UI for exposing predefined shell commands to end users. This repository contains a proof-of-concept demonstrating two…

command-and-controlexploitationpayload-development+4

12 months ago

CVE-2026-21962

thumpbo/cve-2026-21962

Exploit script for CVE-2026-21962, enabling remote command execution on vulnerable web servers with single-target, batch, and reverse shell modes.

command-and-controlexploitationpenetration-testing+2

28 months ago

CVE-2025-32433

0x7556/cve-2025-32433

CVE-2025-32433 Erlang/OTP SSH RCE Exploit SSH远程代码执行漏洞EXP

command-and-controlexploitationpenetration-testing+3

33 months ago

cve-2023-25194

vulncheck-oss/cve-2023-25194

A go-exploit for Apache Druid CVE-2023-25194

command-and-controlexploitationpayload-development+3

41 year ago

-CVE-2022-1609

0xsojalsec/-cve-2022-1609

Bash poc for CVE-2022-1609 WordPress Weblizar Backdoor

command-and-controlexploitationpenetration-testing+3

34 years ago

CVE-2024-0012

0xjessie21/cve-2024-0012

CVE-2024-0012 PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015) RCE POC

authenticationcommand-and-controlexploitation+3

31 year ago

CVE-2023-38120

warber0x/cve-2023-38120

Adtran SR400ac ping Command Injection Remote Code Execution Vulnerability

command-and-controlexploitationpenetration-testing+2

32 years ago

CVE-2025-24813-apache-tomcat

imbas007/cve-2025-24813-apache-tomcat

Nuclei Template CVE-2025–24813

command-and-controlexploitationpenetration-testing+2

31 year ago

CVE-2025-69212-Exploit

pasindu-sd/cve-2025-69212-exploit

Automated exploit for CVE-2025-69212 command injection in OpenSTAManager, featuring admin authentication, malicious ZIP upload, and reverse shell or…

command-and-controlexploitationpayload-development+2

1 month ago

sendmail-clamav-exploit-CVE-2007-4560

strikoder-premium/sendmail-clamav-exploit-cve-2007-4560

Python RCE exploit for Sendmail with ClamAV-Milter <0.91.2 (CVE-2007-4560). Remote root command injection via SMTP RCPT TO headers.

command-and-controlexploitationpayload-development+3

49 months ago

CVE-2019-2729_creal

luchoane/cve-2019-2729_creal

PoC for exploiting CVE-2019-2729 on WebLogic

command-and-controlexploitationpenetration-testing+3

34 years ago

CVE-2023-34468

ozcanpng/cve-2023-34468

CVE-2023-34468 Apache NiFi ExecuteSQL H2 RUNSCRIPT RCE PoC

command-and-controlexploitationpayload-development+4

2 months ago

Previous 1…232425…49 Next