Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems Security
General Purpose Utilities
Indicator of Compromise (IOC) Management
OSINT (Open Source Intelligence)
Packet Sniffing & Analysis
Password Cracking
Penetration Testing Frameworks
Phishing Tools
Privilege Escalation
Reconnaissance
Static Analysis
Vulnerability Scanners
Web Vulnerability Scanners
Wi-Fi Auditing
Bluetooth Security
Container Security
Dynamic Analysis (Sandboxing)
Encryption/Decryption Tools
Exploit Frameworks
Identity Management
iOS Security
IoT Security
Memory Forensics
Network Mapping
OSINT for Social Engineering
Password Attacks
Payload Generation
Persistence Mechanisms
Port Scanning
Static Code Analysis (SAST)
Threat Feeds & Aggregators
Vulnerability Analysis
Web Proxies & Interception
Code Analysis
DNS & Subdomain Enumeration
Dynamic Code Analysis (DAST)
Exploitation
Hash Analysis
IDS/IPS Evasion
Impersonation Tools
Lateral Movement
Mobile App Pentesting
Network Forensics
Reverse Engineering
RFID/NFC Tools
SCADA/ICS Security
Scripting & Automation
Serverless Security
Shellcode
Web Application Exploitation
API Security Testing
Configuration Auditing
Data Exfiltration
Debuggers
Forensics
Information Gathering
Mobile Forensics
Network Access Control
Post-Exploitation
Security Virtualization
Phishing
WAF Bypass
Web Security
Fuzzing
Network Security
Steganography
Wireless Security
Data Recovery
Malware Analysis
Digital Forensics
Hardware Hacking
Cryptography
CTF
Penetration Testing
Cloud Security
DevSecOps
Mobile Security
Privacy
Command and Control
Social Engineering
Hardware Security
Utilities & Frameworks
Hardware & IoT Security
Secret Detection
Binary Analysis
Threat Intelligence
Identity & Access Management (IAM)
Supply Chain Security
Authentication
Machine Learning
Intrusion Detection
Papers & Research
Misconfiguration
Subdomain Enumeration
Email Harvesting
Learning & Education
AI-Assisted Reversing
DNS Fuzzing
Red Teaming
Incident Response
Crawler
Curated Resources
Remote Access Tool
Shellcode Generation
Payload Development
Remote Access Trojan
API Security
Anti-Bot
Fingerprint Spoofing
CAPTCHA Bypass
Email Security
DNS Analysis
Chaos Engineering
Learning Paths & Courses
Container Escape
AI Security
Database Security
Firmware Analysis
Anomaly Detection
Log Analysis
Adversarial Attack
Binary Exploitation
Labs & Practice
NewestRelevanceMost popularRecently updated
73 results
CVE-2023-38545 preview

CVE-2023-38545

GitHubd0rb/cve-2023-38545

This script is designed to exploit a heap buffer overflow vulnerability in a socks5 proxy server.

exploitationpayload-developmentpenetration-testing+3
212 years ago
ClearML-CVE-2024-24590-RCE preview

ClearML-CVE-2024-24590-RCE

GitHubsviim/clearml-cve-2024-24590-rce

With this script you can exploit the CVE-2024-24590

exploitationpayload-developmentremote-access-tool+2
42 years ago
CVE-2022-31814 preview

CVE-2022-31814

GitHubarunhatter/cve-2022-31814

This script is a proof-of-concept exploit for pfBlockerNG <= 2.1.4_26 that allows for remote code execution. It takes a single target URL or a list…

exploitationpayload-developmentpenetration-testing+3
2 years ago
USP preview

USP

GitHubgrahamhelton/usp

Establishes persistence on a Linux system by creating a udev rule that triggers the execution of a specified payload (binary or script)

payload-developmentpersistence-mechanismspost-exploitation+2
1532 years ago
CVE-2025-1094-Exploit preview

CVE-2025-1094-Exploit

GitHubsoltanali0/cve-2025-1094-exploit

WebSocket and SQL Injection Exploit Script

educationexploitationpayload-development+3
411 year ago
CVE-2024-30270-PoC preview

CVE-2024-30270-PoC

GitHubalchemist3dot14/cve-2024-30270-poc

The script exploits Mailcow vulnerabilities via XSS and RCE, emphasizing the need for robust security measures and responsible usage to enhance web…

exploitationpayload-developmentpenetration-testing+3
42 years ago
xzutils_backdoor_obfuscation preview

xzutils_backdoor_obfuscation

GitHubthomrgn/xzutils_backdoor_obfuscation

Script to obfuscate a payload the same way as it was done by the XZ utils attack (CVE-2024-3094)

binary-exploitationeducationexploitation+4
10 months ago
Elastix-2.2.0-CVE-2012-4869 preview

Elastix-2.2.0-CVE-2012-4869

GitHubcyberdesu/elastix-2.2.0-cve-2012-4869

Python exploit script for Elastix 2.2.0 LFI vulnerability (CVE-2012-4869) enabling remote code execution via Perl reverse shell payload injection.

educationexploitationpayload-development+3
1 year ago
CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability preview

CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability

GitHubxaitax/cve-2024-21413-microsoft-outlook-remote-code-execution-vulnerability

Microsoft-Outlook-Remote-Code-Execution-Vulnerability

email-securityexploitationinformation-gathering+5
7692 years ago
CVE-2020-0796-PoC preview

CVE-2020-0796-PoC

GitHubeerykitty/cve-2020-0796-poc

PoC for triggering buffer overflow via CVE-2020-0796

binary-exploitationexploitationpayload-development+3
3323 years ago
Ducky-Exploit preview

Ducky-Exploit

GitHubitsmehacker/ducky-exploit

Arduino Rubber Ducky Framework

exploitationhardware-hackingpayload-development+2
1087 years ago
CVE-2024-6387 preview

CVE-2024-6387

GitHubl0n3m4n/cve-2024-6387

PoC - Remote Unauthenticated Code Execution Vulnerability in OpenSSH server (Scanner and Exploit)

exploitationnetwork-securitypayload-development+6
1112 years ago
CVE-2025-24076 preview

CVE-2025-24076

GitHubmbanyamer/cve-2025-24076

Python exploit for CVE-2025-24076, a Windows Cross Device Service privilege escalation vulnerability. Replaces a DLL to achieve SYSTEM privileges via…

binary-exploitationeducationexploitation+3
181 year ago
shellcode-x64 preview

shellcode-x64

GitHubhvictor/shellcode-x64

Shellcodes for Windows >= 11 x64

exploitationpayload-developmentpayload-generation+4
76 months ago
CVE-2025-5781 preview

CVE-2025-5781

GitHubjasonbernier/cve-2025-5781

Proof-of-concept exploit for CVE-2025-57819 in FreePBX: SQL injection in the AJAX API to execute arbitrary PHP, create a persistent webshell, and…

command-and-controlexploitationpayload-development+3
16 days ago
CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability preview

CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability

GitHubmdusmandasthaheer/cve-2024-21413-microsoft-outlook-remote-code-execution-vulnerability

Proof-of-concept exploit for CVE-2024-21413, a critical Microsoft Outlook remote code execution vulnerability (MonikerLink) with CVSS 9.8, enabling…

exploitationpayload-developmentpenetration-testing+3
52 years ago
CVE-2024-21413 preview

CVE-2024-21413

GitHubdshabani96/cve-2024-21413

Proof-of-concept exploit for Microsoft Outlook RCE (CVE-2024-21413) with SMTP email delivery, malicious RTF attachment generation, and optional…

email-securityexploitationpayload-development+3
22 years ago
gitlab-cve-2020-10977 preview

gitlab-cve-2020-10977

GitHubvandycknick/gitlab-cve-2020-10977

GitLab Arbitrary File Read Exploit

exploitationpayload-developmentpenetration-testing+3
25 years ago
Previous12345Next