Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

550 results

burp-alfresco-referer-proxy-cve-2014-9301

ottimo/burp-alfresco-referer-proxy-cve-2014-9301

Burp Suite extension exploiting CVE-2014-9301 in Alfresco Referer Proxy for targeted web application penetration testing.

exploitationpenetration-testingvulnerability-analysis+2

9 years ago

CVE-2024-2054

madan301/cve-2024-2054

Proof-of-concept exploit for CVE-2024-2054, demonstrating insecure deserialization RCE in Artica-Proxy administrative web application. Includes…

educationexploitationpayload-development+3

2 years ago

CVE-2025-55182-GodzillaMemoryShell

beichendream/cve-2025-55182-godzillamemoryshell

Exploit script for CVE-2025-55182 that deploys a Godzilla memory shell on vulnerable web servers, with support for proxy and encoding options.

command-and-controlexploitationpayload-generation+3

1089 months ago

CVE-2022-45059-demo

martinvks/cve-2022-45059-demo

Interactive demo of CVE-2022-45059 Varnish Cache request smuggling vulnerability. Includes Spring Boot web app, vulnerable proxy, automated victim…

educationexploitationlabs-practice+3

2 years ago

CVE-2021-3019-Lanproxy

qiezi-maozi/cve-2021-3019-lanproxy

Python-based proof-of-concept exploit for CVE-2021-3019 targeting Lanproxy, enabling remote code execution via directory traversal in the web proxy…

exploitationpenetration-testingremote-access-tool+2

5 years ago

CVE-2018-11759

immunit/cve-2018-11759

Proof-of-concept exploit for CVE-2018-11759 demonstrating Apache mod_jk access bypass via specially crafted requests to bypass reverse proxy…

exploitationmisconfigurationpenetration-testing+3

397 years ago

shannon

keygraphhq/shannon

Shannon is an autonomous, white-box AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes…

ai-securityapi-security-testingcode-analysis+5

48.0k5 days ago

x-stream__xstream_CVE-2021-21345_1-4-15

shoucheng3/x-stream__xstream_cve-2021-21345_1-4-15

Java XML serialization library with a focus on CVE-2021-21345 exploit analysis and deserialization vulnerability testing for web applications.

code-analysisdynamic-code-analysisexploitation+3

1 year ago

cve-2026-49352-poc

covepseng/cve-2026-49352-poc

Exploitability PoC for CVE-2026-49352 (9router Hardcoded JWT Secret Authentication Bypass)

authentication-authorizationeducationexploitation+4

12 months ago

CVE-2015-3224-

n000xy/cve-2015-3224-

CVE-2015-3224

exploitationvulnerability-analysisweb-application-exploitation

5 years ago

CVE-2025-55182

emredavut/cve-2025-55182

Chrome extension and Shodan scanner for detecting and demonstrating RCE vulnerabilities in React Server Components (RSC) and Next.js applications,…

educationexploitationpenetration-testing+3

3149 months ago

CVE-2014-0224

secretnonempty/cve-2014-0224

Go-based MITM exploit demo for OpenSSL CVE-2014-0224 (CCS Injection) targeting RC4-SHA cipher, with server/client proxy setup for testing TLS…

cryptographyexploitationnetwork-security+3

912 years ago

JCEzploit-CVE-2026-48907

cerberusmrxi/jcezploit-cve-2026-48907

Automated RCE exploit for Joomla JCE (CVE-2026-48907) with interactive shell, batch command execution, file download, and proxy support for…

exploitationpenetration-testingred-teaming+3

23 days ago

CVE-2025-55182-golang-PoC

keklick1337/cve-2025-55182-golang-poc

Go-based proof-of-concept for CVE-2025-55182, a critical RCE in React Server Components. Features vulnerability checking, command execution, memory…

command-and-controlexploitationpayload-development+6

69 months ago

CVE-2019-14319

melroyb/cve-2019-14319

Proof-of-concept exploit for CVE-2019-14319, demonstrating a specific vulnerability in a web application for security testing and verification.

exploitationvulnerability-analysisweb-application-exploitation

57 years ago

CVE-2026-44680-MikroORM-SQL-Injection-Exploit-Framework

cerberusmrxi/cve-2026-44680-mikroorm-sql-injection-exploit-framework

PoC tool for CVE-2026-44680 affecting MikroORM ≤7.0.13. Exploits JSON path injection to extract database contents via UNION-based attacks. Features…

code-analysisdatabase-securityexploitation+3

11 month ago

CVE-2025-69985

kaleth4/cve-2025-69985

PoC exploit for CVE-2025-69985: authentication bypass leading to RCE in FUXA SCADA ≤1.2.8. Includes a modular Python exploit with interactive shell,…

authentication-authorizationexploitationpayload-development+5

4 months ago

CVE-2026-2942

xxconi/cve-2026-2942

Automated scanner for unauthenticated arbitrary file upload and remote code execution in ProSolution WP Client (CVE-2026-2942). Supports…

educationexploitationpayload-development+3

3 months ago

Previous12…31 Next