Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
118 results
CVE-2026-52886 preview

CVE-2026-52886

GitHubv3s9er/cve-2026-52886

Notepad++ CVE-2026-52886 — session.xml backupFilePath starts_with() path traversal (GHSA-rqfm-pw34-r7j6)

data-exfiltrationexploitationvulnerability-analysis
16 days ago
CVE-2026-7020 preview

CVE-2026-7020

GitHubdavidrxchester/cve-2026-7020

POC for CVE-2026-7720 - Ollama tensor digest path traversal

data-exfiltrationexploitationpenetration-testing+2
4 months ago
transfer.sh preview

transfer.sh

GitHubdutchcoders/transfer.sh

Easy and fast file sharing from the command-line.

data-exfiltrationencryption-decryption-toolsgeneral-purpose-utilities
15.9k2 months ago
MANSPIDER preview

MANSPIDER

GitHubblacklanternsecurity/manspider

Spider entire networks for juicy files sitting on SMB shares. Search filenames or file content - regex supported!

data-exfiltrationinformation-gatheringnetwork-security+2
1.4k9 days ago
dnscat2 preview

dnscat2

GitHubiagox86/dnscat2

Encrypted command-and-control tunnel over DNS protocol. Creates stealthy C&C channels for penetration testing, with file transfer, shell access, and…

command-and-controldata-exfiltrationdns-analysis+5
4.0k4 years ago
wave-share preview

wave-share

GitHubggerganov/wave-share

Serverless, peer-to-peer, local file sharing through sound

data-exfiltrationeducationutilities-frameworks+1
2.3k5 years ago
ESFileExplorerOpenPortVuln preview

ESFileExplorerOpenPortVuln

GitHubfs0c131y/esfileexploreropenportvuln

ES File Explorer Open Port Vulnerability - CVE-2019-6447

android-securitydata-exfiltrationexploitation+5
6787 years ago
EmbedPayloadInPng preview

EmbedPayloadInPng

GitHubmaldev-academy/embedpayloadinpng

Embed a payload inside a PNG file

cryptographydata-exfiltrationids-ips-evasion+2
3721 year ago
secretsdump.py preview

secretsdump.py

GitHubfin3ss3g0d/secretsdump.py

Enhanced version of secretsdump.py from Impacket. Adds multi-threading and accepts an input file with a list of target hosts for simultaneous secrets…

data-exfiltrationpassword-attackspenetration-testing+2
2593 years ago
Sleipnir preview

Sleipnir

GitHubnccgroup/sleipnir

Tiny payload for transfer via LOKI - Provides high speed Virtual Channel two way file transfer capabilities

data-exfiltrationpayload-developmentpenetration-testing+1
2711 years ago
CVE-2020-11579 preview

CVE-2020-11579

GitHubshieldersec/cve-2020-11579

Exploit code for CVE-2020-11579, an arbitrary file disclosure through the MySQL client in PHPKB

database-securitydata-exfiltrationexploitation+3
252 years ago
CVE-2026-5061 preview

CVE-2026-5061

GitHub0xmrma/cve-2026-5061

Consul Template validated where a symlink pointed during template evaluation, but its later dependency fetch read the original path. Retargeting the…

code-analysisdata-exfiltrationeducation+2
128 days ago
CVE-2026-36851 preview

CVE-2026-36851

GitHubsyntaxsaiyan/cve-2026-36851

Walkthrough and PoC of File path traversal vulnerability(CVE-2026-36851) for UnPoller 2.33.0

data-exfiltrationeducationexploitation+3
1 month ago
EsFileExplorer-CVE-2019-6447 preview

EsFileExplorer-CVE-2019-6447

GitHubchethine/esfileexplorer-cve-2019-6447

Exploiting Android Vulnerability in ES File Explorer

android-securitydata-exfiltrationexploitation+3
34 years ago
POC-CVE-2025-24104-Py preview

POC-CVE-2025-24104-Py

GitHubmissaels235/poc-cve-2025-24104-py

Proof-of-concept Python script demonstrating iOS file exfiltration via malicious symlink in device backup restoration, targeting the…

data-exfiltrationeducationexploitation+4
31 year ago
React2Shell preview

React2Shell

GitHub4nuxd/react2shell

R2S is a comprehensive exploitation and post-exploitation framework targeting the Next.js React Server Components vulnerability (CVE-2025-55182). It…

command-and-controlcontainer-escapedata-exfiltration+7
8 months ago
CVE-2019-6447 preview

CVE-2019-6447

GitHubh3x0v3rl0rd/cve-2019-6447

Python exploit for CVE-2019-6447 enabling arbitrary file read on ES File Explorer 4.1.9.7.4 for Android. Demonstrates mobile vulnerability…

android-securitydata-exfiltrationexploitation+2
1 year ago
CVE-2024-51747 preview

CVE-2024-51747

GitHubl20170217b/cve-2024-51747

Proof-of-concept exploit for CVE-2024-51747 enabling authenticated file read and deletion via SQLite database manipulation in a web application's…

database-securitydata-exfiltrationexploitation+2
1 year ago
Previous1234567Next