Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
24 results
CVE-2023-4863 preview

CVE-2023-4863

GitHubjpsbern/cve-2023-4863

Generates WebP images that trigger CVE-2023-4863 heap buffer overflow in libwebp, using tunable OFFSET/VALUE constants for exploit testing and…

binary-exploitationexploitationpayload-generation
4 months ago
cve-2025-22294 preview

cve-2025-22294

GitHubmirmeweu/cve-2025-22294

the task from C*****k

exploitationpenetration-testingvulnerability-analysis+3
10 months ago
CVE-2019-14811-in-pdf-exploit preview

CVE-2019-14811-in-pdf-exploit

GitHubmatejsmycka/cve-2019-14811-in-pdf-exploit

This exploit targets CVE-2019-14811 in GS environments where PostScript output is not reflected, but is executed such as PDF previews via png images.

exploitationpayload-developmentpenetration-testing+2
1 year ago
XBadManners preview

XBadManners

GitHubttffdd/xbadmanners

Tool for CVE-2018-16323

data-exfiltrationexploitationmemory-forensics+2
837 years ago
XWFAcropalypse preview

XWFAcropalypse

GitHubpolitoinc/xwfacropalypse

X-Ways Acropalypse extension detects CVE-2023-21036 in common images

data-recoverydigital-forensicsexploitation+2
4 months ago
CVE-2025-54962 preview

CVE-2025-54962

GitHubeyodav/cve-2025-54962

Authenticated users can upload arbitrary files (e.g. .html, .svg) as profile images in OpenPLC Runtime. These files are publicly accessible without…

educationexploitationpenetration-testing+3
1 year ago
webp_Android10_r33_CVE-2023-1999 preview

webp_Android10_r33_CVE-2023-1999

GitHubpazhanivelmani/webp_android10_r33_cve-2023-1999
binary-analysiscode-analysisexploitation+3
1 year ago
CVE-2024-43160 preview

CVE-2024-43160

GitHubktn1990/cve-2024-43160

The BerqWP – Automated All-In-One PageSpeed Optimization Plugin for Core Web Vitals, Cache, CDN, Images, CSS, and JavaScript plugin for WordPress is…

exploitationpayload-generationpenetration-testing+3
21 year ago
CVE-2026-27771 preview

CVE-2026-27771

GitHubportbuster1337/cve-2026-27771

CVE-2026-27771 - Gitea/Forgejo Container Registry Auth Bypass Exploit PoC - Pull private container images without authentication

authentication-authorizationcontainer-securityeducation+5
192 months ago
cve-2026-20896-gitea-poc preview

cve-2026-20896-gitea-poc

GitHubszybnev/cve-2026-20896-gitea-poc

CVE-2026-20896 Gitea Docker X-WEBAUTH-USER auth bypass checker

authentication-authorizationexploitationpenetration-testing+3
101 month ago
CVE-2024-1086 preview

CVE-2024-1086

GitHubnotselwyn/cve-2024-1086

Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including…

binary-exploitationeducationexploitation+4
2.5k2 years ago
CVE-2023-47129 preview

CVE-2023-47129

GitHubcyber-wo0dy/cve-2023-47129

Statamic CMS versions <4.33.0 vulnerable to "Remote Code Execution"

exploitationpayload-generationvulnerability-analysis+1
32 years ago
CVE-2022-26711 preview

CVE-2022-26711

GitHubxpcmdshell/cve-2022-26711

Integer overflow in Apple ImageIO WebP parsing (macOS/iOS)

binary-exploitationexploitationfuzzing+3
47 months ago
CVE-2025-60787-Detection-motionEye-RCE-via-Config-Injection preview

CVE-2025-60787-Detection-motionEye-RCE-via-Config-Injection

GitHubgarethmsheldon/cve-2025-60787-detection-motioneye-rce-via-config-injection
container-securityexploitationintrusion-detection+5
5 months ago
CVE-2020-15778 preview

CVE-2020-15778

GitHubyifanzhg/cve-2020-15778
command-and-controlcontainer-securityexploitation+3
32 years ago
Blind-SSRF-CVE-2020-15002 preview

Blind-SSRF-CVE-2020-15002

GitHubskr0x1c0/blind-ssrf-cve-2020-15002

https://hackerone.com/reports/865652

exploitationport-scanningreconnaissance+2
5 years ago
cve-2022-44268 preview

cve-2022-44268

GitHubjkobierczynski/cve-2022-44268
ctfexploitationinformation-gathering+3
1 year ago
PIL-CVE-2017-8291 preview

PIL-CVE-2017-8291

GitHubhkcfs/pil-cve-2017-8291

CVE-2017-8291 CTF with docker and examples

ctfeducationexploitation+3
1 year ago
Previous12Next