Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
22 results
CVE-2026-7777-Rust-Use-After-Free-in-Unsafe-Web-Server preview

CVE-2026-7777-Rust-Use-After-Free-in-Unsafe-Web-Server

GitHubgeorge0papasotiriou/cve-2026-7777-rust-use-after-free-in-unsafe-web-server

Demonstrates a Rust use-after-free in a web server with vulnerable code and a multithreaded trigger to show memory corruption and possible code…

binary-exploitationeducationexploitation+2
1 month ago
Cryptolocker preview

Cryptolocker

GitHubajayrandhawa/cryptolocker

CryptoLocker is open source files encrypt-er. Crypto is developed in Visual C++. It has features encrypt all file, lock down the system and send keys…

educationencryption-decryption-toolsmalware-analysis
1431 month ago
CVE-2025-62215_Windows_Kernel_PE preview

CVE-2025-62215_Windows_Kernel_PE

GitHubabrewer251/cve-2025-62215_windows_kernel_pe

This PoC demonstrates a race condition in the Windows kernel leading to a double-free vulnerability, allowing local privilege escalation to SYSTEM.…

binary-exploitationctfeducation+3
199 months ago
CVE-2026-6433 preview

CVE-2026-6433

GitHubmurrez/cve-2026-6433

PoC for CVE-2026-6433: WordPress FlipperCode Custom CSS, JS & PHP (≤2.0.7) — unauthenticated SQLi to RCE. Python 3 stdlib; single target or bulk…

educationexploitationpayload-development+4
22 months ago
CVE-2026-6271 preview

CVE-2026-6271

GitHubxxconi/cve-2026-6271

Automated scanner for CVE-2026-6271, a critical unauthenticated arbitrary file upload leading to RCE in the WordPress Career Section plugin. Supports…

educationexploitationpayload-generation+4
3 months ago
CVE-2024-6387 preview

CVE-2024-6387

GitHubd0rb/cve-2024-6387

Multithreaded Python exploit for OpenSSH CVE-2024-6387 RCE vulnerability, leveraging a signal handler race condition to achieve root access on target…

educationexploitationpayload-development+3
522 years ago
CVE-2025-29927-scanner preview

CVE-2025-29927-scanner

GitHubolimpiofreitas/cve-2025-29927-scanner

Python scanner that detects Next.js instances vulnerable to CVE-2025-29927, identifies versions, and tests for authentication bypass via the…

authenticationeducationexploitation+3
11 year ago
awesome-rust-security preview

awesome-rust-security

GitHubosirislab/awesome-rust-security

Curated list of awesome projects and resources related to Rust and computer security

binary-analysiscloud-securitycryptography+9
6052 years ago
CVE-2023-49103 preview

CVE-2023-49103

GitHubcreacitysec/cve-2023-49103

Multi-threaded Python PoC scanner for CVE-2023-49103 that checks large URL lists for exposed phpinfo() output with .htaccess bypass via /.css path…

educationexploitationpenetration-testing+2
302 years ago
CVE-2023-48842 preview

CVE-2023-48842

GitHubcreacitysec/cve-2023-48842

Multi-threaded command injection exploit for D-Link Go-RT-AC750 (CVE-2023-48842) that accepts IP:port lists and outputs valid credentials.

command-and-controleducationexploitation+3
62 years ago
CVE-2026-24061 preview

CVE-2026-24061

GitHubkyukazamiqq/cve-2026-24061

Multi-threaded Telnet vulnerability scanner that exploits CVE-2026-24061 via environment variable injection, verifies root access, and provides an…

educationexploitationnetwork-security+3
2 months ago
RscScan-cve-2025-55182 preview

RscScan-cve-2025-55182

GitHubveilvulp/rscscan-cve-2025-55182

RscScan: Professional cross-platform vulnerability scanner for Next.js Server Actions (CVE-2025-55182). Detects critical RCE flaws with…

educationexploitationpenetration-testing+3
38 months ago
CVE-2025-31650 preview

CVE-2025-31650

GitHubobscura-cert/cve-2025-31650

Multi-threaded HTTP/2 request flood tool targeting Apache Tomcat 10.1.10-10.1.39 using malformed priority headers for DoS stability testing. Strictly…

educationpenetration-testingvulnerability-analysis+1
1 year ago
ZX-DDoS preview

ZX-DDoS

GitHubbogglo/zx-ddos

Python-based DDoS tool for educational network stress testing. Supports multi-threaded attacks against IP/URL targets with configurable worker count…

educationnetwork-securitypenetration-testing
514 months ago
CVE-2026-56290 preview

CVE-2026-56290

GitHubjenderal92/cve-2026-56290

CVE-2026-56290 - Mass Exploit for Joomla Com_pagebuilderck component (Unrestricted File Upload → RCE). Multi-threaded, automatic CSRF bypass, PHP…

command-and-controleducationexploitation+5
51 month ago
CVE-2026-15826-CVE-2026-15748 preview

CVE-2026-15826-CVE-2026-15748

GitHubhorkimhab/cve-2026-15826-cve-2026-15748

Multithreaded Python scanner for CVE-2026-15826 and CVE-2026-15748; checks target lists, supports verbose logging, configurable threads, and custom…

educationpenetration-testingvulnerability-analysis+1
16 days ago
CVE-2023-46604-RCE preview

CVE-2023-46604-RCE

GitHubnkeshawarz/cve-2023-46604-rce

Python-based remote code execution exploit for Apache ActiveMQ deserialization vulnerability (CVE-2023-46604) with multi-threaded scanning and XML…

educationexploitationpenetration-testing+3
42 years ago
CVE-2026-5615 preview

CVE-2026-5615

GitHubsahmsec/cve-2026-5615

Python proof-of-concept for CVE-2026-5615, a stored XSS in VvvebJs, demonstrating SVG upload exploitation with multi-threaded scanning and validation.

educationexploitationpenetration-testing+3
3 months ago
Previous12Next