Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
129 results
Spring4Shell-POC preview

Spring4Shell-POC

GitHubbobtheshoplifter/spring4shell-poc

Spring4Shell Proof Of Concept/And vulnerable application CVE-2022-22965

exploitationpayload-generationvulnerability-analysis+1
379
3 years ago
CVE-2022-34718-PoC preview

CVE-2022-34718-PoC

GitHubseclabresearchbv/cve-2022-34718-poc

Python-based proof-of-concept exploit for CVE-2022-34718, a remote code execution vulnerability in IPv6 on Windows, using Scapy to craft and send…

exploitationnetwork-securitypayload-generation+3
494 years ago
CVE-2022-42899 preview

CVE-2022-42899

GitHubiamsanjay/cve-2022-42899

Proof-of-concept exploit for CVE-2022-42899, demonstrating remote code execution in Apache Commons Text 1.5-1.9 via StringSubstitutor interpolation…

code-analysisexploitationpayload-generation+2
34 years ago
ICT287-CVE-2022-42889 preview

ICT287-CVE-2022-42889

GitHubkosmicowl045/ict287-cve-2022-42889

Setup and exploit recreation for CVE-2022-42889 Text4Shell.

educationexploitationlabs-practice+3
7 months ago
csv-plus_vulnerability preview

csv-plus_vulnerability

GitHubnanaao/csv-plus_vulnerability

👻 [PoC] CSV+ 0.8.0 - Arbitrary Code Execution (CVE-2022-21241)

code-analysiseducationexploitation+3
4 years ago
Webmin-CVE-2022-0824-revshell preview

Webmin-CVE-2022-0824-revshell

GitHubfaisalfs10x/webmin-cve-2022-0824-revshell

Post-authentication reverse shell exploit for Webmin <=1.984 leveraging CVE-2022-0824 File Manager privilege escalation. Downloads and executes a CGI…

exploitationpayload-generationpenetration-testing+3
1124 years ago
cve_2022_0847_shellcode preview

cve_2022_0847_shellcode

GitHubshotokhan/cve_2022_0847_shellcode

Implementation of CVE-2022-0847 as a shellcode

binary-exploitationexploitationpayload-generation+3
34 years ago
vRealizeLogInsightRCE preview

vRealizeLogInsightRCE

GitHubhorizon3ai/vrealizeloginsightrce

POC for RCE using vulnerabilities described in VMSA-2023-0001

exploitationpayload-generationpenetration-testing+2
1463 years ago
CVE-2022-42889-text4shell preview

CVE-2022-42889-text4shell

GitHubkljunowsky/cve-2022-42889-text4shell

Proof-of-concept exploit for CVE-2022-42889 (Text4Shell) in Apache Commons Text, with manual and mass exploitation scripts using script, URL, and DNS…

exploitationinformation-gatheringpayload-generation+3
582 years ago
CVE-2022-22947_EXP preview

CVE-2022-22947_EXP

GitHubanansec/cve-2022-22947_exp

一个可单独、批量验证的脚本,也可以反弹shell

command-and-controlexploitationpayload-generation+3
74 years ago
CVE-2022-22965 preview

CVE-2022-22965

GitHubitsecurityco/cve-2022-22965

Docker-based proof-of-concept for CVE-2022-22965 (Spring4Shell) remote code execution vulnerability in Spring Boot 2.6.5, with automated webshell…

exploitationpayload-generationpenetration-testing+2
164 years ago
Follina-attack-CVE-2022-30190- preview

Follina-attack-CVE-2022-30190-

GitHubimeneallouche/follina-attack-cve-2022-30190-

this is a demo attack of FOLLINA exploit , a vulnerability that has been discovered in May 2022 and stood unpatched until June 2022

exploitationpayload-generationpenetration-testing+2
4 years ago
CVE-2022-22963 preview

CVE-2022-22963

GitHubxmqaq/cve-2022-22963

CVE-2022-22963-poc

exploitationpayload-generationpenetration-testing+3
14 months ago
MS-MSDT-Office-RCE-Follina preview

MS-MSDT-Office-RCE-Follina

GitHub0xflagplz/ms-msdt-office-rce-follina

CVE-2022-30190 | MS-MSDT Follina One Click

command-and-controlexploitationlateral-movement+3
204 years ago
PDFkit-CMD-Injection preview

PDFkit-CMD-Injection

GitHubshamo0/pdfkit-cmd-injection

CVE-2022-25765 pdfkit <0.8.6 command injection.

command-and-controlexploitationpayload-generation+2
163 years ago
AmzWord preview

AmzWord

GitHubjump-wang-111/amzword

An automated attack chain based on CVE-2022-30190, 163 email backdoor, and image steganography.

command-and-controleducationemail-security+6
12 years ago
CVE-2022-39227 preview

CVE-2022-39227

GitHubuser0x1337/cve-2022-39227

CVE-2022-39227 : Proof of Concept

authenticationctfexploitation+3
222 years ago
CVE-2022-22963 preview

CVE-2022-22963

GitHubpuckiestyle/cve-2022-22963

Proof-of-concept exploit for CVE-2022-22963 (Spring Cloud Function SpEL injection) with detection script and curl-based RCE payload generation.

command-and-controlexploitationpayload-generation+2
14 years ago
Previous12…8Next