Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
403 results
CVE-2018-19131 preview

CVE-2018-19131

GitHubjonathanwilbur/cve-2018-19131

Proof-of-Concept exploit of CVE-2018-19131: Squid Proxy XSS via X.509 Certificate

exploitationvulnerability-analysisweb-application-exploitation+1
187 years ago
Pegasus-Pentest-Arsenal preview

Pegasus-Pentest-Arsenal

GitHubsobri3195/pegasus-pentest-arsenal

A comprehensive web application security testing toolkit that combines 10 powerful penetration testing features into one tool.

api-security-testingctfeducation+9
616 months ago
CVE-2015-9251 preview

CVE-2015-9251

GitHubhalkichi0308/cve-2015-9251

Proof-of-concept exploit for CVE-2015-9251, demonstrating a specific web application vulnerability with minimal code for testing and verification.

exploitationvulnerability-analysisweb-application-exploitation
98 years ago
CVE-2026-31431 preview

CVE-2026-31431

GitHubdesultory/cve-2026-31431

Demonstrates CVE-2026-31431 by poisoning the cache for a target file with attacker-controlled payload bytes, illustrating a web cache poisoning…

exploitationvulnerability-analysisweb-application-exploitation+1
76 months ago
CVE-2019-14319 preview

CVE-2019-14319

GitHubmelroyb/cve-2019-14319

Proof-of-concept exploit for CVE-2019-14319, demonstrating a specific vulnerability in a web application for security testing and verification.

exploitationvulnerability-analysisweb-application-exploitation
57 years ago
CVE-2026-11101-HTTP-Cache-Poisoning-via-Unkeyed-Query-Parameter preview

CVE-2026-11101-HTTP-Cache-Poisoning-via-Unkeyed-Query-Parameter

GitHubgeorge0papasotiriou/cve-2026-11101-http-cache-poisoning-via-unkeyed-query-parameter

Exploit web cache poisoning via unkeyed query parameters to persist malicious JavaScript responses; includes a vulnerable Flask cache server and PoC…

exploitationvulnerability-analysisweb-application-exploitation+1
2 months ago
CVE-2026-11114-Node.js-vm-Sandbox-Escape-via-Proxy preview

CVE-2026-11114-Node.js-vm-Sandbox-Escape-via-Proxy

GitHubgeorge0papasotiriou/cve-2026-11114-node.js-vm-sandbox-escape-via-proxy

PoC exploit for CVE-2026-11114 demonstrating Node.js vm sandbox escape via Proxy to achieve remote code execution against a vulnerable HTTP /eval…

exploitationvulnerability-analysisweb-application-exploitation
2 months ago
XSS2Shell-CVE-2026-64638 preview

XSS2Shell-CVE-2026-64638

GitHubzsecur1ty/xss2shell-cve-2026-64638

Exploits CVE-2026-64638 to convert cross-site scripting into shell access on vulnerable web applications, automating payload delivery and…

exploitationpenetration-testingweb-application-exploitation
12 months ago
ssrfnginx preview

ssrfnginx

GitHubknqyf263/ssrfnginx

Exploit Server-Side Request Forgery (SSRF) vulnerabilities through nginx configurations. Enables testing and exploitation of SSRF in web applications.

exploitationpenetration-testingweb-application-exploitation+1
16 years ago
CVE-2021-38819 preview

CVE-2021-38819

GitHubm4sk0ff/cve-2021-38819

Proof-of-concept exploit for CVE-2021-38819, demonstrating a specific web application vulnerability with a targeted exploitation script.

exploitationvulnerability-analysisweb-application-exploitation
23 years ago
CVE-2020-3187 preview

CVE-2020-3187

GitHubcrackercat/cve-2020-3187

Proof-of-concept exploit for CVE-2020-3187 targeting Cisco web interface vulnerabilities. Provides automated exploitation for security testing and…

exploitationvulnerability-analysisweb-application-exploitation
16 years ago
CVE-2008-7220 preview

CVE-2008-7220

GitHubfollowboy1999/cve-2008-7220

Proof-of-concept exploit for CVE-2008-7220, demonstrating a remote code execution vulnerability in a web application.

exploitationvulnerability-analysisweb-application-exploitation
110 years ago
CVE-2019-13574 preview

CVE-2019-13574

GitHubmasahiro331/cve-2019-13574

Proof-of-concept exploit for CVE-2019-13574, demonstrating a specific vulnerability in a web application for testing and verification purposes.

exploitationvulnerability-analysisweb-application-exploitation
16 years ago
CVE-2026-41242 preview

CVE-2026-41242

GitHub4chech/cve-2026-41242

Proof-of-concept exploit for CVE-2026-41242 in a Node.js web application, demonstrating the vulnerability and potential impact.

exploitationvulnerability-analysisweb-application-exploitation+1
6 months ago
poc-yaws-cgi-shell-injection preview

poc-yaws-cgi-shell-injection

GitHubvulnbe/poc-yaws-cgi-shell-injection

Yaws web server OS command injection POC

exploitationvulnerability-analysisweb-application-exploitation
16 years ago
28458 preview

28458

GitHubraka200juta/28458

Python exploit script for CVE-2020-28458, a prototype pollution vulnerability in DataTables. It sends crafted payloads to target URLs, supports proxy…

dynamic-code-analysisexploitationpenetration-testing+2
110 months ago
cve preview

cve

GitHubfollowboy1999/cve

Collection of proof-of-concept exploits for specific CVEs, demonstrating vulnerabilities in web applications and other software.

exploitationvulnerability-analysisweb-application-exploitation
16 years ago
x-stream__xstream_CVE-2021-21345_1-4-15 preview

x-stream__xstream_CVE-2021-21345_1-4-15

GitHubshoucheng3/x-stream__xstream_cve-2021-21345_1-4-15

Java XML serialization library with a focus on CVE-2021-21345 exploit analysis and deserialization vulnerability testing for web applications.

code-analysisdynamic-code-analysisexploitation+3
1 year ago
Previous12…23Next