Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
15 results
grav-cve-2024-28116 preview

grav-cve-2024-28116

GitHubbebarossi/grav-cve-2024-28116

Analysis and Docker reproduction of CVE-2024-28116 - SSTI with sandbox bypass in Grav CMS

educationexploitationlabs-practice+3
11 days ago
CVE-2025-24893_Analysis preview

CVE-2025-24893_Analysis

GitHubmattiacervelli/cve-2025-24893_analysis

Self-contained Docker lab that reproduces CVE-2025-24893, an unauthenticated SSTI-to-RCE in XWiki SolrSearch, and compares vulnerable vs patched…

educationexploitationlabs-practice+5
11 days ago
CVE-2026-11104-Python-SSTI-via-Jinja2-attr-Filter-Bypass preview

CVE-2026-11104-Python-SSTI-via-Jinja2-attr-Filter-Bypass

GitHubgeorge0papasotiriou/cve-2026-11104-python-ssti-via-jinja2-attr-filter-bypass

PoC exploit for CVE-2026-11104 demonstrating Jinja2 attr filter bypass in Flask, enabling server-side template injection and remote code execution.

educationexploitationpenetration-testing+3
26 days ago
cve-2026-9558-poc preview

cve-2026-9558-poc

GitHubcovepseng/cve-2026-9558-poc

Exploitability PoC for CVE-2026-9558 (SSTI Mautic Theme)

educationexploitationlabs-practice+5
1 month ago
CVE-2026-38165-SSTI- preview

CVE-2026-38165-SSTI-

GitHubat190510-cuong/cve-2026-38165-ssti-

CVE-2026-38165 (SSTI)

code-analysiseducationexploitation+3
12 months ago
SGLang-0.5.9-RCE preview

SGLang-0.5.9-RCE

GitHubstuub/sglang-0.5.9-rce

Proof of Concept exploitation of CVE-2026-5760 - RCE in SGLang 0.5.9 via malicious GGUF

code-analysisctfeducation+5
54 months ago
CVE-2026-33154 preview

CVE-2026-33154

GitHubredyank/cve-2026-33154

Proof-of-concept exploit for CVE-2026-33154, demonstrating remote code execution via SSTI in Dynaconf's Jinja resolver, with analysis and mitigation…

code-analysiseducationexploitation+2
4 months ago
CVE-2025-64087-SSTI- preview

CVE-2025-64087-SSTI-

GitHubat190510-cuong/cve-2025-64087-ssti-

CVE-2025-64087 (SSTI)

code-analysiseducationexploitation+3
15 months ago
POC_CVE-2025-14700 preview

POC_CVE-2025-14700

GitHubsecdongle/poc_cve-2025-14700

Proof of Concept for Authenticated RCE in Crafty Controller

educationexploitationpenetration-testing+3
8 months ago
Blackash-CVE-2025-53833 preview

Blackash-CVE-2025-53833

GitHubiqingshan/blackash-cve-2025-53833

CVE-2025-53833

educationexploitationpenetration-testing+2
1 year ago
GenGravSSTIExploit preview

GenGravSSTIExploit

GitHubgeniuszly/gengravsstiexploit

is a PoC Python script that exploits an authenticated Server-Side Template Injection (SSTI) vulnerability in Grav CMS versions <= 1.7.44…

educationexploitationpayload-generation+2
71 year ago
GenCrushSSTIExploit preview

GenCrushSSTIExploit

GitHubgeniuszly/gencrushsstiexploit

is a PoC for CVE-2024-4040 tool for exploiting the SSTI vulnerability in CrushFTP

authenticationeducationexploitation+3
81 year ago
CVE-2023-30145 preview

CVE-2023-30145

GitHubparagbagul111/cve-2023-30145

Camaleon CMS v2.7.0 contain a Server-Side Template Injection (SSTI) vulnerability

code-analysiseducationexploitation+3
73 years ago
cachet_2.4.0-dev preview

cachet_2.4.0-dev

GitHubhadrian3689/cachet_2.4.0-dev

Python exploit script for CVE-2021-39174 Cachet information disclosure and remote code execution via Twig Server-Side Template Injection, with…

educationexploitationinformation-gathering+3
3 years ago
CVE-2022-29078 preview

CVE-2022-29078

GitHubmiko550/cve-2022-29078

vuln ejs 3.1.6 docker

educationexploitationlabs-practice+2
83 years ago