Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
61 results
CVE-2024-22526 preview

CVE-2024-22526

GitHub200101whoami/cve-2024-22526

bandi view

binary-analysiseducationexploitation+2
2 years ago
Moniker-Link-CVE-2024-21413 preview

Moniker-Link-CVE-2024-21413

GitHubmqkgithub/moniker-link-cve-2024-21413

Step-by-step walkthrough of exploiting CVE-2024-21413 in Microsoft Outlook to bypass Protected View and leak NTLM credentials via Moniker Links,…

ctfeducationemail-security+5
1 year ago
CVE-2024-22889-Plone-v6.0.9 preview

CVE-2024-22889-Plone-v6.0.9

GitHubshenhav12/cve-2024-22889-plone-v6.0.9

Proof-of-concept exploit for CVE-2024-22889, an incorrect access control vulnerability in Plone CMS v6.0.9 allowing remote attackers to view and list…

exploitationmisconfigurationpenetration-testing+2
2 years ago
CVE-2015-7214 preview

CVE-2015-7214

GitHubllamakko/cve-2015-7214

Proof-of-concept exploit for CVE-2015-7214 demonstrating Same-Origin Policy bypass in Firefox 42.0 via data and view-source URIs, with local and…

exploitationpenetration-testingvulnerability-analysis+2
1310 years ago
CVE-2024-51030 preview

CVE-2024-51030

GitHubvighneshnair7/cve-2024-51030

Proof-of-concept exploit for SQL injection in Sourcecodester Cab Management System 1.0, demonstrating arbitrary SQL execution via the id parameter in…

database-securityexploitationinformation-gathering+3
1 year ago
CVE-2025-5095-POC preview

CVE-2025-5095-POC

GitHubteteuxd2/cve-2025-5095-poc

Python POC for CVE-2025-5095

exploitationpassword-attackspenetration-testing+2
1 year ago
CVE-2024-21413-Moniker-Link-Writeup preview

CVE-2024-21413-Moniker-Link-Writeup

GitHubsecurenetexpert/cve-2024-21413-moniker-link-writeup

Technical write-up on CVE-2024-21413 (Moniker Link vulnerability)

educationexploitationlabs-practice+3
7 months ago
CVE-2026-21514_CVE-2026-21510 preview

CVE-2026-21514_CVE-2026-21510

GitHubchaitanyaharitash/cve-2026-21514_cve-2026-21510

Builders and research notes for exploiting CVE-2026-21514 (Protected View bypass) and CVE-2026-21510 (RCE) in MS Office, including obfuscation and…

educationexploitationpayload-development+2
54 months ago
Toolshell_CVE-2025-53770 preview

Toolshell_CVE-2025-53770

GitHubgreenforcenetworks/toolshell_cve-2025-53770

Exploit PoC for CVE-2025-53770 enabling webshell upload to SharePoint, ValidationKey extraction, signed ViewState generation, and remote code…

command-and-controlexploitationpayload-generation+4
1 year ago
CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability preview

CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability

GitHubmdusmandasthaheer/cve-2024-21413-microsoft-outlook-remote-code-execution-vulnerability

Proof-of-concept exploit for CVE-2024-21413, a critical Microsoft Outlook remote code execution vulnerability (MonikerLink) with CVSS 9.8, enabling…

exploitationpayload-developmentpenetration-testing+3
52 years ago
Confluence-CVE-2022-26134 preview

Confluence-CVE-2022-26134

GitHubarchanchoudhury/confluence-cve-2022-26134

This repository talks about Zero-Day Exploitation of Atlassian Confluence, it's defense and analysis point of view from a SecOps or Blue Team…

educationexploitationforensics+6
44 years ago
CVE-2022-46484 preview

CVE-2022-46484

GitHubnevasec/cve-2022-46484

Information disclosure in password protected surveys in Data Illusion Survey Software Solutions NGSurvey v2.4.28 and below allows attackers to view…

exploitationinformation-gatheringpenetration-testing+2
23 years ago
Dockerized-CVE-2019-14287 preview

Dockerized-CVE-2019-14287

GitHubcmnatic/dockerized-cve-2019-14287

Containerized and deployable use of the CVE-2019-14287 vuln. View README.md for more.

container-securityctfeducation+3
76 years ago
dnsFookup preview

dnsFookup

GitHubmakuga01/dnsfookup

DNS rebinding toolkit

dns-analysisexploitationpenetration-testing+1
2563 years ago
xpl-ModernWMS-CVE-2024-57698 preview

xpl-ModernWMS-CVE-2024-57698

GitHubrodolfomarianocy/xpl-modernwms-cve-2024-57698

It is possible to view the MD5 hash of the admin password and other attributes without authentication, even after initial setup and password change.…

exploitationinformation-gatheringmisconfiguration+3
1 year ago
https-github.com-xaitax-CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability preview

https-github.com-xaitax-CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability

GitHubfathanahhidayati/https-github.com-xaitax-cve-2024-21413-microsoft-outlook-remote-code-execution-vulnerability

Proof-of-concept exploit for CVE-2024-21413, a Microsoft Outlook remote code execution vulnerability. Demonstrates NTLM credential leakage and RCE…

email-securityexploitationpassword-cracking+4
4 months ago
tryhackme-monikerlink-writeup preview

tryhackme-monikerlink-writeup

GitHubomarmahmoud1024/tryhackme-monikerlink-writeup

TryHackMe Moniker Link (CVE-2024-21413) walkthrough: Outlook Protected View bypass leading to NTLMv2 hash capture via a crafted moniker link.

ctfeducationexploitation+4
1 month ago
PPLFaultDumpBOF preview

PPLFaultDumpBOF

GitHubtrustedsec/pplfaultdumpbof

Cobalt Strike BOF that exploits a Windows Protected Process Light bypass to dump protected processes, enabling credential access from LSASS.

exploitationpost-exploitationprivilege-escalation+1
1463 years ago
Previous1234Next