Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
44 results
cve-2024-3094-detect preview

cve-2024-3094-detect

GitHubgalacticquest/cve-2024-3094-detect

Bash script to detect vulnerable XZ Utils versions (CVE-2024-3094) and downgrade to a safe release, supporting multiple Linux distributions and…

general-purpose-utilitiesmisconfigurationscripting-automation+2
12 years ago
Disable-IPv6-CVE-2024-38063-Fix preview

Disable-IPv6-CVE-2024-38063-Fix

GitHubalmogopp/disable-ipv6-cve-2024-38063-fix

A PowerShell script to temporarily mitigate the CVE-2024-38063 vulnerability by disabling IPv6 on Windows systems. This workaround modifies the…

defensive-toolsgeneral-purpose-utilitiesmisconfiguration+2
2 years ago
CVE-2024-3094-checker preview

CVE-2024-3094-checker

GitHubhazemkya/cve-2024-3094-checker

Bash script to detect and remediate CVE-2024-3094, a critical supply-chain vulnerability in the XZ Utils library, with automatic safe version…

misconfigurationscripting-automationsupply-chain-security+2
2 years ago
bash-shellshock preview
Archived

bash-shellshock

GitHubchef-boneyard/bash-shellshock

DEPRECATED: Chef cookbook to audit & remediate "Shellshock" (BASH-CVE-2014-7169)

cloud-securityconfiguration-auditingdevsecops+2
59 years ago
CVE-2022-40490 preview

CVE-2022-40490

GitHubwhitej3rry/cve-2022-40490

Tiny File Manager v2.4.7 and below are vulnerable to Cross Site Scripting

exploitationmisconfigurationvulnerability-analysis+2
14 years ago
CVE-2021-21234 preview

CVE-2021-21234

GitHubpwcno-cto/cve-2021-21234

Directory traversal vulnerability in the spring-boot-actuator-logview library

exploitationmisconfigurationvulnerability-analysis+2
15 years ago
fix_nginx_CVE-2013-4547_IB preview

fix_nginx_CVE-2013-4547_IB

GitHubrsp243/fix_nginx_cve-2013-4547_ib

Script to fix Nginx CVE-2013-4547, a URI parsing vulnerability allowing unauthorized access. Applies configuration patch to prevent directory…

exploitationmisconfigurationvulnerability-analysis+2
10 months ago
next_js_poisoning preview

next_js_poisoning

GitHubcodepontiff/next_js_poisoning

The CVE-2024-46982 is cache poisoning of next_js some site have API to load their image

exploitationmisconfigurationvulnerability-analysis+2
1 year ago
cve-2025-29927 preview

cve-2025-29927

GitHubbalajih4kr/cve-2025-29927

CVE-2025-29927 is a critical vulnerability in Next.js, a popular React-based web framework. The flaw exists in how the middleware feature handles…

exploitationmisconfigurationvulnerability-analysis+2
1 year ago
CVE-2024-7646 preview

CVE-2024-7646

GitHubr0binak/cve-2024-7646

PoC CVE-2024-7646

exploitationmisconfigurationvulnerability-analysis+2
2 years ago
CVE-2022-24449 preview

CVE-2022-24449

GitHubjet-pentest/cve-2022-24449

Solar Appscreener XXE

exploitationmisconfigurationvulnerability-analysis+1
4 years ago
CVE-2021-39409 preview

CVE-2021-39409

GitHubstefandorresteijn/cve-2021-39409

Admin account registration in Online Student Rate System

authenticationexploitationmisconfiguration+2
4 years ago
CVE-2024-25170-Mezzanine-v6.0.0 preview

CVE-2024-25170-Mezzanine-v6.0.0

GitHubshenhav12/cve-2024-25170-mezzanine-v6.0.0

Proof-of-concept exploit for CVE-2024-25170, demonstrating an access control bypass in Mezzanine CMS v6.0.0 via Host Header manipulation.

exploitationmisconfigurationvulnerability-analysis+2
2 years ago
2023-2245 preview

2023-2245

GitHubtpdlshdmlrkfmcla/2023-2245

cve-2023-2245

exploitationmisconfigurationvulnerability-analysis+2
1 year ago
CVE-2024-5737 preview

CVE-2024-5737

GitHubafine-com/cve-2024-5737

AdmirorFrames Joomla! Extension < 5.0 - HTML Injection

exploitationmisconfigurationvulnerability-analysis+2
2 years ago
CVE-2024-34221 preview

CVE-2024-34221

GitHubdovankha/cve-2024-34221

Proof-of-concept for CVE-2024-34221: insecure permission vulnerability in SourceCodester Human Resource Management System 1.0 allowing unauthorized…

misconfigurationpenetration-testingvulnerability-analysis+2
2 years ago
CVE-2011-2461_Magento_Patch preview

CVE-2011-2461_Magento_Patch

GitHubedmondscommerce/cve-2011-2461_magento_patch

Patched Adobe Flex SWF files (editor.swf, uploader.swf, uploaderSingle.swf) to fix the CVE-2011-2461 CSRF vulnerability in Magento. Replace…

exploitationmisconfigurationvulnerability-analysis+2
8 years ago
CVE-2024-50945 preview

CVE-2024-50945

GitHubabdullahalmutawa/cve-2024-50945

SimplCommerce is affected by a Broken Access Control vulnerability in the review system, allowing unauthorized users to post reviews for products…

misconfigurationpenetration-testingvulnerability-analysis+2
1 year ago
Previous123Next