Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
2541 results
cve-2023-29357-Sharepoint preview

cve-2023-29357-Sharepoint

GitHubguillaume-risch/cve-2023-29357-sharepoint

Proof-of-concept exploit for CVE-2023-29357 targeting SharePoint, with automated Vagrant lab environment for testing and education.

educationexploitationlabs-practice+3
4
2 years ago
CVE-2024-23897-Vulnerabilidad-Jenkins preview

CVE-2024-23897-Vulnerabilidad-Jenkins

GitHubd1se0/cve-2024-23897-vulnerabilidad-jenkins

Python exploit script for CVE-2024-23897 (Jenkins RCE) with an automated Docker-based vulnerable lab for controlled security testing and education.

educationexploitationlabs-practice+2
41 year ago
CVE-2022-0847 preview

CVE-2022-0847

GitHubpuckiestyle/cve-2022-0847

Proof-of-concept exploit for CVE-2022-0847 (Dirty Pipe) targeting Linux kernel versions 5.8–5.15. Provides reproduction environment setup and…

binary-exploitationeducationexploitation+3
24 years ago
EXPLOIT-CVE-2026-40901 preview

EXPLOIT-CVE-2026-40901

GitHubjoaovicdev/exploit-cve-2026-40901

Automated exploit for DataEase: 4-vulnerability chain (auth bypass, JDBC blocklist bypass, SQL injection, Java deserialization) achieving…

educationexploitationlabs-practice+4
13 months ago
CVE-2023-39362-cacti-snmp-command-injection-poc preview

CVE-2023-39362-cacti-snmp-command-injection-poc

GitHubjakabakos/cve-2023-39362-cacti-snmp-command-injection-poc

Proof-of-concept exploit for CVE-2023-39362, an authenticated command injection in Cacti's SNMP options. Includes a vulnerable Docker environment for…

command-and-controlexploitationlabs-practice+4
22 years ago
CVE-2023-27163 preview

CVE-2023-27163

GitHubdavuxvi/cve-2023-27163

Proof-of-concept exploit for CVE-2023-27163, a Server-Side Request Forgery (SSRF) vulnerability in request-baskets up to v1.2.1. Includes automated…

exploitationlabs-practicepenetration-testing+3
13 years ago
CVE-2022-26923 preview

CVE-2022-26923

GitHubnefhara/cve-2022-26923

Automated CVE-2022-26923 Exploitation (Certifried)

authenticationctfeducation+6
5 months ago
bash-apocalypse preview

bash-apocalypse

GitHubmtaha-sec/bash-apocalypse

Recreating Shellshock (CVE-2014-6271) - the bash vulnerability that endangered millions of servers. Automated exploitation toolkit + Burp Suite…

command-and-controleducationexploitation+8
3 months ago
POC_CVE-2026-42880 preview

POC_CVE-2026-42880

GitHubhaerin-l/poc_cve-2026-42880

Reproduces CVE-2026-42880, a critical ArgoCD vulnerability exposing Kubernetes Secrets via ServerSideDiff. Includes automated lab setup, trigger…

cloud-securityeducationexploitation+4
5 months ago
CVE-2025-27407 preview

CVE-2025-27407

GitHublogggg2402/cve-2025-27407

Local lab and proof-of-concept exploit for CVE-2025-27407, targeting GitLab's GraphQL introspection schema loader via the Direct Transfer HTTP path.…

educationexploitationlabs-practice+3
6 months ago
CVE-2024-47176 preview

CVE-2024-47176

GitHubdeancooreman/cve-2024-47176

Automated VirtualBox lab for exploiting CVE-2024-47176 (CUPS RCE) with a custom Python exploit, target Ubuntu VM, and Kali attacker VM for hands-on…

educationexploitationlabs-practice+2
5 months ago
CVE-2026-33017 preview

CVE-2026-33017

GitHubjorrit-vm/cve-2026-33017

Educational lab demonstrating unauthenticated RCE in Langflow via CVE-2026-33017, with automated VM setup and a PoC exploit for reverse shell.

educationexploitationlabs-practice+6
15 months ago
Jenkins-CVE-2024-23897-Lab preview

Jenkins-CVE-2024-23897-Lab

GitHubfineken/jenkins-cve-2024-23897-lab

Docker-based lab environment for practicing CVE-2024-23897 Jenkins arbitrary file read exploitation with automated and manual attack scripts.

educationexploitationlabs-practice+3
21 year ago
Info-Sys-Security-CVE-2025-55182 preview

Info-Sys-Security-CVE-2025-55182

GitHubmuharremk0/info-sys-security-cve-2025-55182

Academic lab for analyzing CVE-2025-55182 (React2Shell) with vulnerable and patched React Server Components environments, exploit shell, automated…

binary-exploitationctfeducation+5
5 months ago
ludus_crushftp_cve-2025-31161_sim preview

ludus_crushftp_cve-2025-31161_sim

GitHubrufflabs/ludus_crushftp_cve-2025-31161_sim

Ansible role that simulates a realistic CrushFTP CVE-2025-31161 exploitation scenario with rotating sensitive data files and automated defender…

ctfeducationexploitation+5
4 months ago
lab-cve-2023-4863 preview

lab-cve-2023-4863

GitHubpixelotes/lab-cve-2023-4863

Docker-based lab to reproduce CVE-2023-4863 (heap buffer overflow in libwebp) with automated crash demonstration, patched vs vulnerable comparison,…

binary-exploitationctfeducation+3
5 months ago
CVE-2025-32463-EXPLOIT preview

CVE-2025-32463-EXPLOIT

GitHubsecvulnhub/cve-2025-32463-exploit

Proof-of-concept exploit for CVE-2023-42456, demonstrating privilege escalation via sudo NSS library hijacking through chroot injection. Includes…

binary-exploitationeducationexploitation+4
16 months ago
context-segmentation preview

context-segmentation

GitHub9xeb/context-segmentation

Multi-agent automated context management for long horizon tasks in local AI Agents

ai-securityctfeducation+3
14 months ago
Previous123…100Next