Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
9 results
CVE-2026-33454 preview

CVE-2026-33454

GitHuboscerd/cve-2026-33454

Reproducer for CVE-2026-33454: Apache Camel camel-mail header injection to RCE via camel-exec

code-analysisexploitationpayload-development+3
12 months ago
CVE-2026-73034-PoC preview

CVE-2026-73034-PoC

GitHubboreas37/cve-2026-73034-poc

CVE-2026-73034 — DB-GPT v0.8.1 unauth path traversal → arbitrary file write as root via user-id header. Verified + fix diff

exploitationpayload-developmentpenetration-testing+3
11 month ago
CTT-Mailpit-RCE-v1.0---Temporal-Resonance-Mail-Server-Takeover preview

CTT-Mailpit-RCE-v1.0---Temporal-Resonance-Mail-Server-Takeover

GitHubsimoesctt/ctt-mailpit-rce-v1.0---temporal-resonance-mail-server-takeover

Exploit tool that transforms SMTP header injection into remote code execution with self-propagating worm capabilities, featuring persistence…

command-and-controlexploitationmalware-analysis+5
8 months ago
apache-struts-v2-CVE-2017-5638 preview

apache-struts-v2-CVE-2017-5638

GitHubcafnet/apache-struts-v2-cve-2017-5638

Python proof-of-concept exploit for Apache Struts2 RCE vulnerability CVE-2017-5638, demonstrating remote code execution via crafted Content-Type…

exploitationpayload-developmentpenetration-testing+2
8 years ago
CVE-2017-5638 preview

CVE-2017-5638

GitHubhomjxi0e/cve-2017-5638

Exploit for Apache Struts2 remote code execution vulnerability (CVE-2017-5638) via Content-Type header manipulation.

exploitationpayload-developmentpenetration-testing+2
9 years ago
CVE-2020-0796-PoC preview

CVE-2020-0796-PoC

GitHubeerykitty/cve-2020-0796-poc

PoC for triggering buffer overflow via CVE-2020-0796

binary-exploitationexploitationpayload-development+3
3313 years ago
cve-2017-7269-tool preview

cve-2017-7269-tool

GitHubzcgonvh/cve-2017-7269-tool

CVE-2017-7269 to webshell or shellcode loader

exploitationpayload-developmentpenetration-testing+2
889 years ago
CVE-2022-26134 preview

CVE-2022-26134

GitHubalcaparra/cve-2022-26134

CVE-2022-26134 Confluence OGNL Injection POC

exploitationpayload-developmentpenetration-testing+2
44 years ago
CVE-2025-59712_CVE-2025-59713 preview

CVE-2025-59712_CVE-2025-59713

GitHubsynacktiv/cve-2025-59712_cve-2025-59713

Snipe-IT PoC exploit for CVE-2025-59712 and CVE-2025-59713

exploitationpayload-developmentpenetration-testing+3
21 year ago