Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
648 results
grafana-CVE-2021-43798 preview

grafana-CVE-2021-43798

GitHubhalencarjunior/grafana-cve-2021-43798

Rust-based scanner for Grafana path traversal vulnerability (CVE-2021-43798). Checks hosts for the flaw and reads arbitrary files from affected…

educationexploitationvulnerability-scanners+1
4 years ago
CVE-2024-5522 preview

CVE-2024-5522

GitHubgeniuszly/cve-2024-5522

PoC exploit scanner for CVE-2024-5522 in WordPress. Scans target URLs with custom payloads to identify vulnerable sites, outputting color-coded…

educationexploitationpayload-development+3
102 years ago
CVE-2026-31431-Checker-Mitigator preview

CVE-2026-31431-Checker-Mitigator

GitHubzenzue/cve-2026-31431-checker-mitigator

Detects and mitigates CVE-2026-31431, a Linux kernel local privilege escalation vulnerability, with optional PoC execution for isolated testing.

educationexploitationprivilege-escalation+1
6 months ago
CVE-2021-42013 preview

CVE-2021-42013

GitHubbassonicolas/cve-2021-42013

CVE-2021-42013 Vulnerability Scanner This Python script checks for the Remote Code Execution (RCE) vulnerability (CVE-2021-42013) in Apache 2.4.50.

educationexploitationpenetration-testing+2
32 years ago
SmartScanner-Source preview

SmartScanner-Source

GitHubfauxrougee/smartscanner-source

Web vulnerability scanner built with C++17 and Qt 6, featuring a GUI, CLI, configurable crawling, and JSON reports. Reconstructed for educational…

configuration-auditingcrawlereducation+7
21 month ago
CVE-2025-64446-PoC---FortiWeb-Path-Traversal preview

CVE-2025-64446-PoC---FortiWeb-Path-Traversal

GitHubfevar54/cve-2025-64446-poc---fortiweb-path-traversal

Proof-of-concept exploit and detection scanner for CVE-2025-64446, a critical path traversal vulnerability in Fortinet FortiWeb allowing remote…

educationexploitationpenetration-testing+3
711 months ago
React2Shell-PoC-CVE-2025-55182 preview

React2Shell-PoC-CVE-2025-55182

GitHublitndat/react2shell-poc-cve-2025-55182

PoC scanner and exploit for CVE-2025-55182 (React2Shell) RCE vulnerability in React Server Components. Detects vulnerable servers and executes remote…

educationexploitationlabs-practice+4
4 months ago
CVE-2023-5359 preview

CVE-2023-5359

GitHubenzocipher/cve-2023-5359

CVE-2023-5359 scanner for W3 Total Cache cleartext storage vulnerability. Detects exposed credentials (API keys, OAuth tokens) in publicly accessible…

educationexploitationinformation-gathering+3
0 years ago
CVE-2024-27954 preview

CVE-2024-27954

GitHubr0otk3r/cve-2024-27954

Python-based scanner for CVE-2024-27954, a Local File Inclusion vulnerability in the WordPress wp-automatic plugin. Supports multithreaded scanning,…

educationexploitationinformation-gathering+3
1 year ago
CVE-2025-29927 preview

CVE-2025-29927

GitHubsagsooz/cve-2025-29927

🔐 Python-based smart scanner for CVE-2025-29927 — Next.js middleware authentication bypass vulnerability. Detects meta refresh, keyword-based…

authenticationeducationpenetration-testing+3
1 year ago
CVE-2025-55182 preview

CVE-2025-55182

GitHubthemehackers/cve-2025-55182

a critical Remote Code Execution (RCE) vulnerability in React Server Components (RSC). It also includes a realistic "Lab Environment" to safely test…

educationexploitationlabs-practice+3
228 months ago
CVE-2024-34470 preview

CVE-2024-34470

GitHubbigb0x/cve-2024-34470

POC and bulk scanner for CVE-2024-34470

educationexploitationinformation-gathering+3
52 years ago
CVE-2025-34085 preview

CVE-2025-34085

GitHub0xgh057r3c0n/cve-2025-34085

WordPress Simple File List Unauthenticated RCE Exploit

educationexploitationpayload-generation+3
21 year ago
CVE-2025-52691-poc preview

CVE-2025-52691-poc

GitHubrimbadirgantara/cve-2025-52691-poc

Proof-of-concept exploit for CVE-2025-52691: unauthenticated arbitrary file upload leading to RCE in SmarterMail. Includes vulnerability scanner,…

educationexploitationpayload-generation+5
310 months ago
React2Shell-PoC-CVE-2025-55182 preview

React2Shell-PoC-CVE-2025-55182

GitHubeagle-nett/react2shell-poc-cve-2025-55182

Proof-of-concept exploit for CVE-2025-55182 (React2Shell) RCE vulnerability in React Server Components. Includes a scanner for vulnerable hosts and a…

educationexploitationlabs-practice+4
7 months ago
CVE-2022-37122-Exploit preview

CVE-2022-37122-Exploit

GitHubbughuntar/cve-2022-37122-exploit

CVE-2022-37122 Path Traversal Scanner

educationexploitationinformation-gathering+3
121 year ago
tscan preview

tscan

GitHubcumakurt/tscan

Python-based scanner that detects and exploits CVE-2026-24061 telnetd authentication bypass, enabling root shell access on vulnerable GNU Inetutils…

educationexploitationnetwork-security+4
29 months ago
CVE-2023-3460 preview

CVE-2023-3460

GitHubdiego-tella/cve-2023-3460

Exploit and scanner for CVE-2023-3460, a WordPress Ultimate Member plugin privilege escalation vulnerability allowing unauthenticated admin account…

educationexploitationpenetration-testing+2
73 years ago
Previous123…36Next