Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
247 results
CVE-2021-44228-docker-example preview

CVE-2021-44228-docker-example

GitHubdicanio/cve-2021-44228-docker-example

Docker-based demonstration of CVE-2021-44228 (Log4Shell) exploitation, featuring a vulnerable Java server, malicious LDAP server, and data…

data-exfiltrationeducationexploitation+3
1
4 years ago
cve-2022-31749 preview

cve-2022-31749

GitHubiveresk/cve-2022-31749

PoC checker for CVE-2022-31749 exploiting a parameter injection vulnerability in WatchGuard SSH interface to exfiltrate hashed user passwords via FTP.

authenticationdata-exfiltrationexploitation+3
14 years ago
POC-ES-File-Explorer-CVE-2019-6447 preview

POC-ES-File-Explorer-CVE-2019-6447

GitHubjulio-cfa/poc-es-file-explorer-cve-2019-6447

Bash PoC script exploiting CVE-2019-6447 in ES File Explorer to list files, photos, videos, apps, and download files from vulnerable Android devices.

android-securitydata-exfiltrationexploitation+3
4 years ago
informer preview

informer

GitHubpaulpierre/informer

A Telegram Mass Surveillance Bot in Python

crawlerdata-exfiltrationimpersonation-tools+3
1.7k10 months ago
CVE-2024-4367-POC-PDFJS preview

CVE-2024-4367-POC-PDFJS

GitHubelamani-drawing/cve-2024-4367-poc-pdfjs

PoC (Proof of Concept) de la CVE-2024-4367 - Vulnérabilité RCE dans libwebp. Démonstration complète incluant : création de payloads, scénarios…

data-exfiltrationeducationexploitation+4
11 year ago
CVE-2026-11111-TOCTOU-in-File-Permission-Check-Before-Open preview

CVE-2026-11111-TOCTOU-in-File-Permission-Check-Before-Open

GitHubgeorge0papasotiriou/cve-2026-11111-toctou-in-file-permission-check-before-open

Educational CVE PoC for a TOCTOU file-permission race in Flask; uses symlink replacement during the check-open window to disclose sensitive files.

data-exfiltrationeducationexploitation+4
1 month ago
CVE-2023-36802 preview

CVE-2023-36802

GitHubnhh9905/cve-2023-36802

Old CVE, but new way to leak everything.

binary-exploitationdata-exfiltrationexploitation+3
1 month ago
Grassmarlin-CVE-2026-6807-XXE-POC preview

Grassmarlin-CVE-2026-6807-XXE-POC

GitHubsectestannaquinn/grassmarlin-cve-2026-6807-xxe-poc

Reverse Engineered based on CISA disclosure of new CVE

data-exfiltrationexploitationpayload-development+3
24 months ago
Apache-Solr-Arbitrary-File-Read preview

Apache-Solr-Arbitrary-File-Read

GitHubmurataydemir/apache-solr-arbitrary-file-read

[No CVE] Apache Solr Arbitrary File Read

data-exfiltrationexploitationinformation-gathering+4
15 years ago
CVE-2025-32965-xrpl-js-poc preview

CVE-2025-32965-xrpl-js-poc

GitHubyusufdalbudak/cve-2025-32965-xrpl-js-poc

CVE Kodu: CVE-2025-32965 Zafiyet Türü: Supply Chain Attack (CWE-506: Embedded Malicious Code) Hedef: xrpl.js kütüphanesinin 4.2.1–4.2.4 ve 2.14.2…

data-exfiltrationeducationexploitation+3
1 year ago
CVE-2026-15409 preview

CVE-2026-15409

GitHubch4120n/cve-2026-15409

Proof-of-Concept exploit for CVE-2026-15409 (SonicWall SMA 1000 RCE) via Erlang distribution over WebSocket. Achieves unauthenticated remote code…

data-exfiltrationexploitationpenetration-testing+4
31 month ago
drupal-jsonapi-sqli-scanner preview

drupal-jsonapi-sqli-scanner

GitHubridhinva/drupal-jsonapi-sqli-scanner

Scanner: CVE-2026-9082 Drupal PostgreSQL SQLi via JSON:API — Python scanner for unauthenticated SQLi leading to RCE (CISA KEV)

database-securitydata-exfiltrationexploitation+5
226 days ago
CVE-2026-60004 preview

CVE-2026-60004

GitHubshinthink/cve-2026-60004

CVE-2026-60004 — Gitea/Forgejo Diffpatch Git Hook RCE. Bare clone → post-index-change hook injection. CVSS 9.8 | CWE-94 | Gitea < 1.27.1

data-exfiltrationexploitationpenetration-testing+4
1 month ago
CVE-2025-10681 preview

CVE-2025-10681

GitHubmichaeladamgroberman/cve-2025-10681

CVE-2025-10681: Hardcoded Azure Blob Storage Account Key — Gardyn Home Kit (ICSA-26-055-03)

cloud-securitydata-exfiltrationembedded-systems-security+8
3 months ago
CVE-2026-42527 preview

CVE-2026-42527

GitHuboscerd/cve-2026-42527

Reproducer for CVE-2026-42527 — Apache Camel permissive default ObjectInputFilter admits java.net.URL, enabling a DNS-based out-of-band side channel

data-exfiltrationdns-analysisexploitation+3
1 month ago
CVE-2025-67906 preview

CVE-2025-67906

GitHubfranckferman/cve-2025-67906

MISP <= 2.5.27 - Stored Cross-Site Scripting via Workflow Engine (doT.js Template Injection).

data-exfiltrationexploitationinformation-gathering+5
25 months ago
CVE-2009-0229-PoC preview

CVE-2009-0229-PoC

GitHubzveriu/cve-2009-0229-poc

PoC for CVE-2009-0229 "Print Spooler Read File Vulnerability" LPE AFR (related to CVE-2020-1048)

data-exfiltrationexploitationlateral-movement+4
36 years ago
CVE-2026-41653 preview

CVE-2026-41653

GitHubastaruf/cve-2026-41653

Proof-of-concept exploit for CVE-2026-41653, a stored XSS in BentoPDF that enables silent file exfiltration and WASM supply-chain hijacking.

data-exfiltrationexploitationpayload-development+2
4 months ago
Previous12…14Next