Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
651 results
EH2-PoC preview

EH2-PoC

GitHubrickster5555/eh2-poc

A simple PoC for CVE-2022-46169 a.k.a Cacti Unauthenticated Command Injection, a vulnerability allows an unauthenticated user to execute arbitrary…

command-and-controlexploitationpenetration-testing+2
3 years ago
CVE-2020-7247 preview

CVE-2020-7247

GitHubbytescrappers/cve-2020-7247

This vulnerability exists in OpenBSD’s mail server OpenSMTPD’s “smtp_mailaddr()” function, and affects OpenBSD version 6.6. This allows an attacker…

command-and-controlexploitationpenetration-testing+2
5 years ago
ShockZaum-CVE-2014-6271 preview

ShockZaum-CVE-2014-6271

GitHubw4fz5uck5/shockzaum-cve-2014-6271

Shellshock vulnerability attacker

command-and-controlexploitationpenetration-testing+2
8 years ago
CVE-2023-0669 preview

CVE-2023-0669

GitHubcataliniovita/cve-2023-0669

CVE-2023-0669 GoAnywhere MFT command injection vulnerability

command-and-controlexploitationpenetration-testing+2
3 years ago
CVE-2019-15107 preview

CVE-2019-15107

GitHubg1vi/cve-2019-15107

webmin <=1.920 - RCE via command injection vulnerability

command-and-controlexploitationpenetration-testing+2
3 years ago
CVE-2022-46169 preview

CVE-2022-46169

GitHublof1sec/cve-2022-46169

Cacti v1.2.22: Unauthenticated Command Injection Vulnerability (CVE-2022-46169)

command-and-controlexploitationpenetration-testing+2
1 year ago
CVE-2024-3400-Checker preview

CVE-2024-3400-Checker

GitHubindex2014/cve-2024-3400-checker

A check program for CVE-2024-3400, Palo Alto PAN-OS unauthenticated command injection vulnerability. Palo Alto 防火墙 PAN-OS 远程命令注入检测程序。

command-and-controlexploitationpenetration-testing+2
2 years ago
metasploit-framework preview

metasploit-framework

GitHubrapid7/metasploit-framework

Open-source exploitation framework with modular payload, encoder, and auxiliary system for penetration testing, vulnerability validation, and…

command-and-controlexploitationexploit-frameworks+9
38.8k14h 58m ago
Exploits preview

Exploits

GitHubkmkz/exploits

Original CVEs, exploit PoCs, and security advisories with detailed vulnerability chains, privilege escalation, and container escape techniques for…

command-and-controlcontainer-escapeeducation+6
21716 days ago
CVE-2019-18935 preview

CVE-2019-18935

GitHubnoperator/cve-2019-18935

RCE exploit for a .NET JSON deserialization vulnerability in Telerik UI for ASP.NET AJAX.

command-and-controlexploitationpayload-development+5
3744 years ago
CVE-2021-36260 preview

CVE-2021-36260

GitHubaiminsun/cve-2021-36260

command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation, attacker can exploit the…

command-and-controlexploitationpenetration-testing+3
2984 years ago
DVS preview

DVS

GitHubscorpioneslabs/dvs

D(COM) V(ulnerability) S(canner) AKA Devious swiss army knife - Lateral movement using DCOM Objects

command-and-controlexploitationlateral-movement+3
2565 years ago
BlueSAM preview

BlueSAM

GitHubincursi0n/bluesam

A Cobalt Strike Beacon Object File that exploits the BlueHammer vulnerability that to obtain a copy of the SAM database.

command-and-controlexploitationpayload-development+3
1674 months ago
CVE-2022-39197-patch preview

CVE-2022-39197-patch

GitHubburpheart/cve-2022-39197-patch

CVE-2022-39197 漏洞补丁. CVE-2022-39197 Vulnerability Patch.

command-and-controlexploitationpenetration-testing+3
3173 years ago
react2shell-ultimate preview

react2shell-ultimate

GitHubhackersatyamrastogi/react2shell-ultimate

React2Shell Ultimate - The most comprehensive CVE-2025-66478 Scanner for Next.js RSC RCE vulnerability. Multi-mode detection, WAF bypass, local…

command-and-controlexploitationpayload-generation+4
1528 months ago
CVE-2021-4045 preview

CVE-2021-4045

GitHubhacefresko/cve-2021-4045

Exploit for command injection vulnerability found in uhttpd binary from TP-Link Tapo c200 IP camera

binary-analysiscommand-and-controlembedded-systems-security+6
1171 year ago
CVE-2019-11581 preview

CVE-2019-11581

GitHubjas502n/cve-2019-11581

Atlassian JIRA Template injection vulnerability RCE

command-and-controlexploitationpayload-generation+3
937 years ago
cve-2022-33891 preview

cve-2022-33891

GitHubhuskyhacks/cve-2022-33891

Apache Spark Shell Command Injection Vulnerability

command-and-controlexploitationpayload-generation+3
873 years ago
Previous1…345…37Next