Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
45 results
CVE-2020-3580 preview

CVE-2020-3580

GitHubadarshvs/cve-2020-3580

Automated scanner for CVE-2020-3580, detecting XSS vulnerabilities in Cisco ASA and Firepower Threat Defense software across bulk IPs and domains.

exploitationinformation-gatheringpenetration-testing+3
19
5 years ago
CVE-2022-26134 preview

CVE-2022-26134

GitHubofflinehoster/cve-2022-26134

Exploit scripts and threat intelligence indicators for CVE-2022-26134, a critical OGNL injection vulnerability in Atlassian Confluence Server and…

exploitationinformation-gatheringthreat-intelligence+2
84 years ago
Cisco-ASA-FTD-Web-Services-Traversal preview

Cisco-ASA-FTD-Web-Services-Traversal

GitHubfuzzlove/cisco-asa-ftd-web-services-traversal

CVE-2020-3452 - Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) traversal

exploitationinformation-gatheringpenetration-testing+2
65 years ago
CVE-2020-3452 preview

CVE-2020-3452

GitHubgrim3/cve-2020-3452

Python script to exploit CVE-2020-3452 directory traversal in Cisco ASA and Firepower Threat Defense web interfaces, with automated file download and…

exploitationinformation-gatheringpenetration-testing+2
45 years ago
Reports preview

Reports

GitHubj4ck3lsyn-gen2/reports

Curated collection of cybersecurity research reports covering CVE analysis, exploit research, threat intelligence, and offensive security from…

binary-exploitationcurated-resourcesexploitation+8
21 month ago
CVE-2025-42957-SAP-S-4HANA-Under-Siege preview

CVE-2025-42957-SAP-S-4HANA-Under-Siege

GitHubmrk336/cve-2025-42957-sap-s-4hana-under-siege

Educational demonstration of CVE-2025-42957: an RFC-enabled SAP S/4HANA module vulnerability allowing low-privileged ABAP injection for admin account…

educationexploitationpenetration-testing+4
311 months ago
CVE-2026-2256-Threat-Model----ms-agent-Command-Injection preview

CVE-2026-2256-Threat-Model----ms-agent-Command-Injection

GitHubmelbratic/cve-2026-2256-threat-model----ms-agent-command-injection

Threat model and analysis for CVE-2026-2256, a command injection vulnerability in ms-agent, detailing exploitation vectors and potential impact.

command-and-controlexploitationpenetration-testing+3
2 months ago
CVE-2018-15982 preview

CVE-2018-15982

GitHubflatl1neapt/cve-2018-15982

Weaponized Flash exploit for CVE-2018-15982 with ActiveX payloads (Classes 6 and 7), used by NK threat actor for targeted attacks.

exploitationmalware-analysispayload-development+2
7 years ago
CVE-2020-3452 preview

CVE-2020-3452

GitHubparan0id34/cve-2020-3452

Proof-of-concept exploit for CVE-2020-3452 directory traversal vulnerability in Cisco ASA and Firepower Threat Defense appliances. Intended for…

educationexploitationpenetration-testing+2
15 years ago
CVE-2020-3187 preview

CVE-2020-3187

GitHubcappricio-securities/cve-2020-3187

Cisco Adaptive Security Appliance Software/Cisco Firepower Threat Defense - Directory Traversal

educationexploitationinformation-gathering+3
12 years ago
Spring4Shell preview

Spring4Shell

GitHubstrainerart/spring4shell

Threat intelligence repository detailing the Spring4Shell zero-day vulnerability (CVE-2010-1622) with exploit analysis and detection guidance for…

exploitationpenetration-testingthreat-intelligence+2
4 years ago
Arbitrary-File-Read-CVE-2024-24919 preview

Arbitrary-File-Read-CVE-2024-24919

GitHubluismateo1/arbitrary-file-read-cve-2024-24919

Walkthrough of detecting, investigating, and responding to a CVE-2024-24919 path traversal attack, including log analysis, threat intel checks, and…

educationexploitationincident-response+3
1 year ago
adversary_emulation_library preview

adversary_emulation_library

GitHubcenter-for-threat-informed-defense/adversary_emulation_library

An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.

curated-resourcesdata-exfiltrationdefensive-tools+5
2.2k1 year ago
OSWE-Labs-Poc preview

OSWE-Labs-Poc

GitHubsvdwi/oswe-labs-poc

Dockerized labs For Web Expert (OSWE) certification. Preparation for coming AWAE Training ...

ctfeducationexploitation+4
1355 years ago
CVE-2023-22515-Scan preview

CVE-2023-22515-Scan

GitHuberikwynter/cve-2023-22515-scan

Scanner for CVE-2023-22515 - Broken Access Control Vulnerability in Atlassian Confluence

exploitationinformation-gatheringpenetration-testing+3
802 years ago
cve-2023-5217-poc preview

cve-2023-5217-poc

GitHubut-security/cve-2023-5217-poc

A PoC to trigger CVE-2023-5217 from the Browser WebCodecs or MediaRecorder interface.

binary-exploitationeducationexploitation+3
162 years ago
CVE-2020-3452 preview

CVE-2020-3452

GitHubmurataydemir/cve-2020-3452

Proof-of-concept exploit for CVE-2020-3452, a directory traversal vulnerability in Cisco ASA and FTD web services, allowing unauthenticated remote…

exploitationinformation-gatheringpenetration-testing+3
75 years ago
cve-2025-55182-react2shell_reproduction preview

cve-2025-55182-react2shell_reproduction

GitHubrazureink/cve-2025-55182-react2shell_reproduction

Reproduction of CVE-2025-55182 (React2Shell): pre-auth RCE via unsafe deserialization in React Server Components Flight protocol. Includes PoC…

exploitationpayload-developmentpenetration-testing+3
1 month ago
Previous123Next