Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
139 results
zimaos-cve-2026-28286-arbitrary-file-write preview

zimaos-cve-2026-28286-arbitrary-file-write

GitHubrushi9/zimaos-cve-2026-28286-arbitrary-file-write

PoC and verification toolkit for CVE-2026-28286, an arbitrary file write vulnerability in ZimaOS, exploiting API misconfiguration to write files…

api-security-testingexploitationpenetration-testing+3
2
5 months ago
CVE-2026-9198 preview

CVE-2026-9198

GitHubcuteecat/cve-2026-9198

CVE-2026-9198利用代码

api-security-testingexploitationpenetration-testing+3
1 month ago
CVE-2026-48206 preview

CVE-2026-48206

GitHuboscerd/cve-2026-48206

Reproducer for CVE-2026-48206: Apache Camel camel-jira IssueKey (and other non-Camel-prefixed) header injection driving arbitrary JIRA issue…

api-security-testingeducationexploitation+3
1 month ago
CVE-2026-46592 preview

CVE-2026-46592

GitHuboscerd/cve-2026-46592

Reproducer for CVE-2026-46592: Apache Camel camel-cxf operationName header injection redirecting the invoked SOAP operation (confused deputy) from a…

api-security-testingeducationexploitation+3
1 month ago
CVE-2026-46453 preview

CVE-2026-46453

GitHuboscerd/cve-2026-46453

Reproducer for CVE-2026-46453 — Apache Camel camel-elasticsearch-rest-client unprefixed-header injection (operation/query override via inbound HTTP…

api-security-testingeducationexploitation+3
2 months ago
CVE-2026-49099 preview

CVE-2026-49099

GitHuboscerd/cve-2026-49099

PoC reproducer for CVE-2026-49099 (Apache Camel camel-salesforce): the non-Camel-prefixed sObjectQuery header escapes the HTTP header filter and…

api-security-testingeducationexploitation+3
1 month ago
CVE-2023-23752 preview

CVE-2023-23752

GitHubsaboor-hakimi/cve-2023-23752

CVE-2023-23752 nuclei template

api-security-testingexploitationinformation-gathering+3
43 years ago
CVE-2026-46588 preview

CVE-2026-46588

GitHuboscerd/cve-2026-46588

Reproducer for CVE-2026-46588: Apache Camel camel-couchdb CouchDb* header injection (operation confusion) subverting a write-only endpoint into read…

api-security-testingeducationexploitation+3
2 months ago
CVE-2026-46587 preview

CVE-2026-46587

GitHuboscerd/cve-2026-46587

Reproducer for CVE-2026-46587: Apache Camel camel-couchbase CCB_* header injection enabling document disclosure, tampering, and TTL-forced data…

api-security-testingeducationexploitation+3
2 months ago
CVE-2026-48204 preview

CVE-2026-48204

GitHuboscerd/cve-2026-48204

Reproducer for CVE-2026-48204: Apache Camel camel-mongodb-gridfs gridfs.* header injection overriding the GridFS operation (enumerate/read/delete…

api-security-testingexploitationpenetration-testing+2
1 month ago
CVE-2026-35616-check preview

CVE-2026-35616-check

GitHubbishopfox/cve-2026-35616-check

Non-destructive scanner for CVE-2026-35616, a pre-authentication API bypass in FortiClient EMS. Detects vulnerability by comparing HTTP responses…

api-security-testingauthenticationexploitation+3
25 months ago
ragflow-audit preview

ragflow-audit

GitHubqianlijaingshan/ragflow-audit

RAGFlow 三洞审计工具 (CVE-2026-28797 / CVE-2026-24770 / CVE-2025-69286)

api-security-testingexploitationpenetration-testing+4
11 month ago
CVE-2016-4014 preview

CVE-2016-4014

GitHubmurataydemir/cve-2016-4014

[CVE-2016-4014] SAP Netweaver AS JAVA UDDI Component XML External Entity (XXE)

api-security-testingexploitationpenetration-testing+3
26 years ago
CVE-2026-12400-Exploit preview

CVE-2026-12400-Exploit

GitHub0x00phantom-hat/cve-2026-12400-exploit

Authenticated WordPress IDOR exploit for CVE-2026-12400; enumerates FlowForms REST form IDs and modifies form content or hijacks email notifications.

api-security-testingeducationexploitation+3
12 months ago
reconix preview

reconix

GitHubaquibpro/reconix

Advanced recon engine that finds real secrets, validates them live, and builds exploit paths from client-side intelligence.

api-security-testingcrawlerexploitation+8
25 months ago
litellm-sqli-scanner preview

litellm-sqli-scanner

GitHubridhinva/litellm-sqli-scanner

Scanner: CVE-2026-42208 LiteLLM SQL Injection — Python scanner for BerriAI LiteLLM proxy instances

api-security-testingexploitationpenetration-testing+3
11 month ago
CVE-2022-24112-POC preview

CVE-2022-24112-POC

GitHubkavishkagihan/cve-2022-24112-poc

Apache APISIX 2.12.1 Remote Code Execution by IP restriction bypass and using default admin AIP token

api-security-testingexploitationmisconfiguration+3
24 years ago
cve-2026-19478 preview

cve-2026-19478

GitHubn0xdaemon/cve-2026-19478

Provides PoC exploits and root-cause analysis for two GitLab GraphQL `@gl_introduced` directive vulnerabilities: unauthenticated method execution and…

api-security-testingexploitationvulnerability-analysis+2
27 days ago
Previous1…456…8Next