Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
13 results
Ashwesker-CVE-2026-21509 preview

Ashwesker-CVE-2026-21509

GitHubkimstars/ashwesker-cve-2026-21509

Proof-of-concept exploit for Microsoft Office security feature bypass (CVE-2026-21509). Generates malicious DOCX files with embedded OLE objects to…

exploitationmalware-analysispayload-generation+3
11
8 months ago
CVE-2021-27928-POC preview

CVE-2021-27928-POC

GitHubshamo0/cve-2021-27928-poc

CVE-2021-27928-POC

database-securityexploitationpayload-generation+3
14 years ago
CVE-2022-27925 preview

CVE-2022-27925

GitHubsanan2004/cve-2022-27925

PoC

exploitationpayload-generationpenetration-testing+3
2 years ago
CVE-2022-27925 preview

CVE-2022-27925

GitHubjosexv1/cve-2022-27925

Zimbra CVE-2022-27925 PoC

exploitationpayload-generationpenetration-testing+3
434 years ago
cve-2021-44228-qingteng-online-patch preview

cve-2021-44228-qingteng-online-patch

GitHubqingtengyun/cve-2021-44228-qingteng-online-patch

Hot-patch CVE-2021-44228 by exploiting the vulnerability itself.

command-and-controlexploitationincident-response+3
254 years ago
CVE-2021-40444 preview

CVE-2021-40444

GitHubmracumen/cve-2021-40444

Microsoft-Office-Word-MSHTML-Remote-Code-Execution-Exploit

binary-analysisexploitationmalware-analysis+3
24 years ago
CVE-2026-23744-PoC preview

CVE-2026-23744-PoC

GitHubboroeurnprach/cve-2026-23744-poc

CVE-2026-23744 - Versions 1.4.2 and earlier of MCPJam inspector are vulnerable to remote code execution (RCE). Because the tool listens on 0.0.0.0 by…

exploitationpayload-generationpenetration-testing+3
123 months ago
CVE-2022-22965 preview

CVE-2022-22965

GitHubitsecurityco/cve-2022-22965

Docker-based proof-of-concept for CVE-2022-22965 (Spring4Shell) remote code execution vulnerability in Spring Boot 2.6.5, with automated webshell…

exploitationpayload-generationpenetration-testing+2
164 years ago
CVE-2021-44228 preview

CVE-2021-44228

GitHubfuture-client/cve-2021-44228

Abuse Log4J CVE-2021-44228 to patch CVE-2021-44228 in vulnerable Minecraft game sessions to prevent exploitation in the session :)

exploitationpayload-generationpenetration-testing+3
664 years ago
CVE-2022-39299_PoC_Generator preview

CVE-2022-39299_PoC_Generator

GitHubdoyensec/cve-2022-39299_poc_generator

A Simple CVE-2022-39299 PoC exploit generator to bypass authentication in SAML SSO Integrations using vulnerable versions of passport-saml

authenticationexploitationpayload-generation+3
193 years ago
CVE-2018-3191 preview

CVE-2018-3191

GitHubjas502n/cve-2018-3191

Exploit for CVE-2018-3191 targeting Oracle WebLogic Server via T3 protocol, enabling unauthenticated remote code execution with JNDI payload…

command-and-controlexploitationpayload-generation+3
687 years ago
Log4J-Simulation-Tool preview

Log4J-Simulation-Tool

GitHubtheinterception/log4j-simulation-tool

Vulnerability analysis, patch management and exploitation tool forCVE-2021-44228 / CVE-2021-45046 / CVE-2021-4104

exploitationpayload-generationpenetration-testing+3
44 years ago
Drupal-cve-2019-6340 preview
Archived

Drupal-cve-2019-6340

GitHubsumitpathania03/drupal-cve-2019-6340

Python exploit for Drupal 8 core RESTful API RCE (CVE-2019-6340) that sends crafted requests to execute arbitrary commands on vulnerable sites.

exploitationpayload-generationpenetration-testing+3
3 years ago