Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
34 results
ghosttester preview

ghosttester

GitHub1and1-serversupport/ghosttester

Script to test vulnarability for CVE-2015-0235

educationexploitationpenetration-testing+2
11 years ago
ghost-checker preview

ghost-checker

GitHubfser/ghost-checker

Test wether you're exposed to ghost (CVE-2015-0235). All kudos go to Qualys Security

code-analysisexploitationpenetration-testing+2
611 years ago
ghost_exploit preview

ghost_exploit

GitHubarm13/ghost_exploit

CVE-2015-0235 EXIM ESTMP GHOST Glibc Gethostbyname() DoS Exploit/PoC

exploitationexploit-frameworkspayload-development+2
411 years ago
CVE-2026-26980-PoC preview

CVE-2026-26980-PoC

GitHubn0bitaemon/cve-2026-26980-poc

Ghost CMS Content API Blind SQL Injection

database-securityexploitationinformation-gathering+4
14 months ago
CVE-2025-66849 preview

CVE-2025-66849

GitHubwojtekchwala/cve-2025-66849

Ghost CMS Privilege Escalation PoC

exploitationpayload-developmentpenetration-testing+3
6 months ago
CVE-2023-40028 preview

CVE-2023-40028

GitHubrvzsec/cve-2023-40028

CVE-2023-40028 PoC Exploit

exploitationinformation-gatheringpenetration-testing+2
31 year ago
Ghost-Path-Traversal-CVE-2023-32235- preview

Ghost-Path-Traversal-CVE-2023-32235-

GitHubaxroux/ghost-path-traversal-cve-2023-32235-

A Directory Traversal attack (also known as path traversal) aims to access files and directories that are stored outside the intended folder.

exploitationinformation-gatheringpenetration-testing+3
43 years ago
CVE-2026-24061 preview

CVE-2026-24061

GitHub0xblackash/cve-2026-24061

CVE-2026-24061

command-and-controlexploitationpenetration-testing+3
117 days ago
cfengine-CVE_2015_0235 preview

cfengine-CVE_2015_0235

GitHubnickanderson/cfengine-cve_2015_0235

gethostbyname*() buffer overflow exploit in glibc - CVE-2015-0235 https://community.qualys.com/blogs/laws-of-vulnerabilities/2015/01/27/the-ghost-vuln…

binary-exploitationexploitationpayload-development+3
111 years ago
Ghost preview

Ghost

GitHubentysec/ghost

Ghost Framework is an Android post-exploitation framework that exploits the Android Debug Bridge to remotely access an Android device.

android-securityexploitationpenetration-testing+2
3.4k1 year ago
ghost-cve-2026-26980 preview

ghost-cve-2026-26980

GitHubdinosn/ghost-cve-2026-26980

CVE-2026-26980 — Ghost CMS Content API SQL Injection Lab (unauthenticated blind SQLi via slug filter ordering)

database-securityeducationexploitation+5
196 months ago
Ghost-5.58-Arbitrary-File-Read-CVE-2023-40028 preview

Ghost-5.58-Arbitrary-File-Read-CVE-2023-40028

GitHub0xdtc/ghost-5.58-arbitrary-file-read-cve-2023-40028

CVE-2023-40028 affects Ghost, an open source content management system, where versions prior to 5.59.1 allow authenticated users to upload files that…

educationexploitationpenetration-testing+3
131 year ago
CVE-2026-26980 preview

CVE-2026-26980

GitHubeqstlab/cve-2026-26980

Ghost Content API SQL Injection

educationexploitationlabs-practice+3
35 months ago
CVE-2026-26980 preview

CVE-2026-26980

GitHubyym8538/cve-2026-26980

Python PoC and Docker lab demonstrating unauthenticated SQL injection in TryGhost Ghost CMS Content API slug filter, extracting database values via a…

database-securityeducationexploitation+5
12 months ago
CVE-2023-40028 preview

CVE-2023-40028

GitHubsyogod/cve-2023-40028

CVE-2023-40028 is a security vulnerability affecting Ghost CMS versions prior to 5.59.1.

educationexploitationpenetration-testing+2
1 year ago
CVE-2023-40028 preview

CVE-2023-40028

GitHubmonke443/cve-2023-40028

Arbitrary file read in Ghost-CMS allows an attacker to upload a malicious ZIP file with a symlink.

educationexploitationpenetration-testing+2
51 year ago
Previous12Next