Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

2894 results

CVE-2024-34470

osvaldotenorio/cve-2024-34470

Proof-of-concept exploit for CVE-2024-34470: unauthenticated path traversal in HSC Mailinspector's /public/loader.php, enabling arbitrary file read…

exploitationinformation-gatheringpenetration-testing+2

2 years ago

CVE-2024-56331

griisemine/cve-2024-56331

Proof-of-concept exploit for CVE-2024-56331, demonstrating Local File Inclusion in Uptime Kuma via improper URL handling in the real-browser monitor.…

exploitationinformation-gatheringpenetration-testing+3

11 year ago

codoforum

prasanthc41m/codoforum

CVE-2020-5842 Stored XSS Vulnerability in Codoforum 4.8.3

educationexploitationinformation-gathering+3

13 years ago

CVE-2022-0482_exploit

mija-pilkaite/cve-2022-0482_exploit

A final project for "Network Security" class at NYCU (National Yang Ming Chiao Tung University, Taiwan). Exploiting a CVE in "EasyAppointments"…

educationexploitationinformation-gathering+3

12 years ago

CVE-2025-69604

graypixel2121/cve-2025-69604

Proof-of-concept exploit for CVE-2025-69604, demonstrating privilege escalation via malicious package installation in SuperDuper backup tasks on…

educationexploitationprivilege-escalation+2

9 months ago

CVE-2024-46987

ik0nw/cve-2024-46987

Exploit for CVE-2024-46987 path traversal in Camaleon CMS enabling arbitrary file download and automated SSH key extraction via brute-force.

exploitationinformation-gatheringpassword-attacks+3

9 months ago

CVE-2025-63946-Tencent-PC-Manager-EoP

alexlee820/cve-2025-63946-tencent-pc-manager-eop

Proof-of-concept exploit for CVE-2025-63946, a local privilege escalation in Tencent PC Manager via symlink attacks on temporary directories,…

binary-exploitationexploitationprivilege-escalation+2

8 months ago

CVE-2025-45467

zgsnj123/cve-2025-45467

Proof-of-concept exploit for CVE-2025-45467, demonstrating remote code execution on Unitree Go1 robotic dogs via insecure MD5-based firmware…

embedded-systems-securityexploitationfirmware-analysis+5

11 year ago

CVE-2026-29909-MRCMS-vulnerability

qflksheep/cve-2026-29909-mrcms-vulnerability

Unauthenticated directory enumeration PoC for MRCMS V3.1.2, exploiting missing authentication in /admin/file/list.do to disclose server directory…

exploitationinformation-gatheringpenetration-testing+2

7 months ago

CVE-2025-50433

0xmandor/cve-2025-50433

Proof of concept for a critical Monnit Cloud account takeover (CVE-2025-50433), exploiting missing token-email validation in password reset and…

authenticationexploitationinformation-gathering+3

11 months ago

CVE-2025-25257

imbas007/cve-2025-25257

Python-based exploit tool for CVE-2025-25257 in FortiWeb. Automates SQL injection detection, webshell upload, and remote command execution on…

command-and-controlexploitationinformation-gathering+3

11 year ago

CVE-2025-55182-Terminal

mrsol0/cve-2025-55182-terminal

This is a POC for testing your projects that are vulnerable to CVE-2025-55182 with a terminal and ability to scan a list

exploitationpayload-generationpenetration-testing+3

11 months ago

atlas-tj-actions-poc

hexbornestudio/atlas-tj-actions-poc

PoC for CVE-2025-54416 tj-actions/branch-names command injection

command-and-controldata-exfiltrationeducation+3

6 months ago

CVE-2025-5777

rashedhasan090/cve-2025-5777

Python exploit for CVE-2025-5777 (CitrixBleed 2) memory leak in Citrix NetScaler. Sends malformed POST requests to leak ~127 bytes of RAM per…

exploitationinformation-gatheringpenetration-testing+2

11 months ago

CVE-2026-30655

brynax/cve-2026-30655

Security advisory for CVE-2026-30655: unauthenticated SQL injection in esiclivre (/reset/index.php).

database-securityexploitationinformation-gathering+2

7 months ago

cve-2026-24514-Kubernetes-Dos

mbanyamer/cve-2026-24514-kubernetes-dos

Proof-of-concept exploit for CVE-2026-24514, a memory exhaustion denial-of-service in ingress-nginx validating admission webhook, allowing…

cloud-securitycontainer-securityexploitation+2

8 months ago

CVE-2026-26720-Twenty-RCE

dillonkirsch/cve-2026-26720-twenty-rce

Proof-of-concept for authenticated remote code execution in Twenty CRM via unsandboxed serverless workflow functions, allowing arbitrary Node.js…

cloud-securitycode-analysisexploitation+3

9 months ago

cve-2021-42013

ranasen-rat/cve-2021-42013

Python exploit script for Apache 2.4.50 CVE-2021-42013 path traversal and remote code execution, with bulk scanning and Docker lab for hands-on…

educationexploitationlabs-practice+3

9 months ago

Previous 1…99100Next