Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
26 results
CVE-2021-25646 preview

CVE-2021-25646

GitHubgps1949/cve-2021-25646

Python exploit for Apache Druid remote code execution (CVE-2021-25646) with reverse shell and command execution capabilities.

command-and-controlexploitationpenetration-testing+3
1 year ago
CVE-2021-36749 preview

CVE-2021-36749

GitHubjun-5heng/cve-2021-36749

Apache Druid LoadData 任意文件读取漏洞 / Code By:Jun_sheng

exploitationinformation-gatheringpenetration-testing+2
4 years ago
CVE-2021-34045 preview

CVE-2021-34045

GitHubal1ex/cve-2021-34045

Novel-plus-install-v3.5.3-Druid Unauthorized access

exploitationinformation-gatheringmisconfiguration+2
35 years ago
CVE-2021-44228-Log4j-lookup-Rce preview

CVE-2021-44228-Log4j-lookup-Rce

GitHubm1nggod/cve-2021-44228-log4j-lookup-rce

Detailed analysis and proof-of-concept for CVE-2021-44228 (Log4j RCE), including environment setup, vulnerability analysis, JNDI injection mechanism,…

educationexploitationpapers-research+3
44 years ago
CVE-2025-59390- preview

CVE-2025-59390-

GitHubdaeda1usuk/cve-2025-59390-

CVE-2025-59390 and ThreadLocalRandom Inverse

authenticationexploitationpassword-attacks+3
19 months ago
RCE-PoC-CVE-2021-25646 preview

RCE-PoC-CVE-2021-25646

GitHubtiemio/rce-poc-cve-2021-25646

A proof-of-concept for the CVE-2021-25646, which allows for Command Injection

command-and-controleducationexploitation+3
11 year ago
apache_druid_CVE-2021-36749 preview

apache_druid_CVE-2021-36749

GitHubzwlsix/apache_druid_cve-2021-36749

CVE-2021-36749 Docker 漏洞复现

educationexploitationlabs-practice+2
14 years ago
CVE-2021-36750 preview

CVE-2021-36750

GitHubmamba-4-ever/cve-2021-36750

Proof-of-concept exploit for CVE-2021-36749, demonstrating SSRF via Druid's HTTP InputSource to read local files. Useful for security testing and…

exploitationinformation-gatheringpenetration-testing+2
4 years ago
Previous12Next