Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
17 results
Metabase_CVE-2021-41277 preview

Metabase_CVE-2021-41277

GitHubvulnmachines/metabase_cve-2021-41277

Exploit for Metabase CVE-2021-41277, a local file inclusion vulnerability in custom GeoJSON map support, allowing unauthorized file access.

ctfcurated-resourceseducation+3
4
4 years ago
CVE-2025-27591-Meta-below-LPE preview

CVE-2025-27591-Meta-below-LPE

GitHubrippsec/cve-2025-27591-meta-below-lpe

CVE-2025-27591 – Meta below symlink following local privilege escalation (HackTheBox CTF)

binary-exploitationctfexploitation+3
5 months ago
CVE-2026-3854-lab preview

CVE-2026-3854-lab

GitHubroyaleybovich/cve-2026-3854-lab

Local intentionally vulnerable lab with a guided workshop and CTF challenges for practicing Git push-option RCE, unsafe deserialization,…

ctfeducationexploitation+4
101 month ago
CVE-2025-62215_Windows_Kernel_PE preview

CVE-2025-62215_Windows_Kernel_PE

GitHubabrewer251/cve-2025-62215_windows_kernel_pe

This PoC demonstrates a race condition in the Windows kernel leading to a double-free vulnerability, allowing local privilege escalation to SYSTEM.…

binary-exploitationctfeducation+3
2010 months ago
CVE-2023-52927 preview

CVE-2023-52927

GitHubseadragnol/cve-2023-52927

Local privilege escalation exploit for CVE-2023-52927, a Use-After-Free vulnerability in the Linux kernel netfilter subsystem, with a KASAN trigger…

binary-exploitationctfexploitation+2
91 year ago
cve-lfi-lab preview

cve-lfi-lab

GitHubthecyberfairy/cve-lfi-lab

A hands on lab investigating CVE-2025-39507 from a Tier 1 SOC analyst perspective. Includes log review in Microsoft Sentinel, IP analysis, real world…

ctfeducationincident-response+5
1 year ago
WHS4_CVE-2021-4034 preview

WHS4_CVE-2021-4034

GitHubkrleejihyeong/whs4_cve-2021-4034

Educational PoC and analysis of CVE-2021-4034 (PwnKit) local privilege escalation vulnerability in polkit's pkexec, with a Docker-based lab for…

binary-exploitationctfeducation+5
2 months ago
CVE-2025-11844-smolagents preview

CVE-2025-11844-smolagents

GitHubsparshbiswas-ai/cve-2025-11844-smolagents

Educational sandbox and dynamic proof-of-concept scanner for CVE-2025-11844 XPath injection in Hugging Face smolagents library, enabling local data…

code-analysisctfeducation+3
3 months ago
CVE-2023-4357-Chrome-XXE preview

CVE-2023-4357-Chrome-XXE

GitHubxcanwin/cve-2023-4357-chrome-xxe

[漏洞复现] 全球首款单文件利用 CVE-2023-4357 Chrome XXE 漏洞 EXP, 实现对访客者本地文件窃取. Chrome XXE vulnerability EXP, allowing attackers to obtain local files of visitors.

ctfcurated-resourceseducation+3
2301 year ago
cve-2024-58239 preview

cve-2024-58239

GitHubkhoatran107/cve-2024-58239

Linux kernel TLS subsystem exploit for CVE-2024-58239, achieving privilege escalation via a double-free vulnerability in tcp_rcv_state_process.…

binary-exploitationctfeducation+2
411 months ago
ash-authentication-oauth2-oidc-account-takeover-cve-2026-49757-email-based-user-matching preview

ash-authentication-oauth2-oidc-account-takeover-cve-2026-49757-email-based-user-matching

GitHubhunt-benito/ash-authentication-oauth2-oidc-account-takeover-cve-2026-49757-email-based-user-matching

Proof-of-concept exploit for CVE-2026-49757 demonstrating OAuth2/OIDC account takeover via email-based user matching in AshAuthentication, with…

authenticationauthentication-authorizationctf+5
3 months ago
htb-facts preview

htb-facts

GitHubmattiapertusati/htb-facts

HackTheBox — Facts (Easy/Linux) | CVE-2025-2304 + AWS S3 + SSH Key + Facter PrivEsc

cloud-securityctfeducation+7
5 months ago
CVE-2025-27591-PoC preview

CVE-2025-27591-PoC

GitHubmotechstore/cve-2025-27591-poc

# CVE-2025-27591 PoC — Below Local Privilege Escalation This repository contains a Proof of Concept (PoC) demonstrating the local privilege…

ctfexploitationlabs-practice+3
2 months ago
POC_CVE-2024-4322 preview

POC_CVE-2024-4322

GitHubmj-bin/poc_cve-2024-4322

POC_CVE-2024-4322

ctfeducationexploitation+3
4 months ago
CVE-2022-46364---Apache-CXF-XOP-Include-LFI-PoC preview

CVE-2022-46364---Apache-CXF-XOP-Include-LFI-PoC

GitHubshashivanth009/cve-2022-46364---apache-cxf-xop-include-lfi-poc

Proof-of-concept exploit for CVE-2022-46364, a local file inclusion vulnerability in Apache CXF via crafted XOP Include elements in SOAP requests,…

ctfeducationexploitation+3
16 months ago
CVE-2026-31635 preview

CVE-2026-31635

GitHub0xblackash/cve-2026-31635

CVE-2026-31635

binary-exploitationctfeducation+2
94 months ago
CVE-2025-21756 preview

CVE-2025-21756

GitHubh3raklez/cve-2025-21756

Educational lab demonstrating a use-after-free (UAF) exploit in the Linux kernel's vsock subsystem for local privilege escalation to root, with…

binary-exploitationctfeducation+4
16 months ago