Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
29 results
wp2shell preview

wp2shell

GitHubiqbalx7/wp2shell

unauthenticated RCE in WordPress core (CVE-2026-63030 + CVE-2026-60137)

api-securityexploitationpassword-cracking+4
1 month ago
wp2shell-poc-fulljs preview

wp2shell-poc-fulljs

GitHubraphy76/wp2shell-poc-fulljs

full javascript reproduction of CVE-2026-63030 (author_exclude, author__not_in and misalignment between validations and matches)

exploitationpayload-generationpenetration-testing+2
1 month ago
PAYLOAD-LISTS preview

PAYLOAD-LISTS

GitHubnu11secur1ty/payload-lists

Curated collection of injection payloads for web application security testing, covering SSTI, XXE, XSS, SSRF, SQLi, NoSQLi, LDAP, command injection,…

curated-resourceseducationpayload-generation+3
45 days ago
CVE-2025-57819-exploit preview

CVE-2025-57819-exploit

GitHubjeanback1/cve-2025-57819-exploit

FreePBX Pre-Auth SQLi to RCE (CVE-2025-57819) — All-in-One Exploit

educationexploitationpayload-generation+4
22 months ago
CVE-2026-41462 preview

CVE-2026-41462

GitHub0xblackash/cve-2026-41462

Exploit script for CVE-2026-41462, a critical unauthenticated stacked SQL injection in ProjeQtor ≤12.4.3. Creates admin accounts via crafted…

educationexploitationpayload-generation+3
3 months ago
CVE-2021-27928-POC preview

CVE-2021-27928-POC

GitHubshamo0/cve-2021-27928-poc

Proof-of-concept exploit for CVE-2021-27928, demonstrating remote code execution in MariaDB/MySQL via wsrep_provider eval injection, with msfvenom…

database-securityexploitationpayload-generation+3
14 years ago
metasploit-framework preview

metasploit-framework

GitHubrapid7/metasploit-framework

Open-source exploitation framework with modular payload, encoder, and auxiliary system for penetration testing, vulnerability validation, and…

command-and-controldatabase-securitydata-exfiltration+20
38.9k12h 18m ago
Gopherus preview

Gopherus

GitHubtarunkant/gopherus

This tool generates gopher link for exploiting SSRF and gaining RCE in various servers

database-securityexploitationpayload-generation+3
3.4k3 years ago
CVE-2019-12086 preview

CVE-2019-12086

GitHubal1ex/cve-2019-12086

Exploit for CVE-2019-12086, a Jackson deserialization vulnerability, using a rogue MySQL server to read arbitrary files from vulnerable applications.

database-securityexploitationpayload-generation+2
16 years ago
CVE-2024-55963 preview

CVE-2024-55963

GitHubsuperswan/cve-2024-55963

PoC exploit for CVE-2024-55963 targeting unauthenticated remote code execution on Appsmith Enterprise via misconfigured PostgreSQL. Supports…

database-securityexploitationmisconfiguration+5
21 year ago
CVE-2026-17566 preview

CVE-2026-17566

GitHubhackspeak/cve-2026-17566

Proof-of-concept exploit for pgAdmin 4 Import/Export RCE (CVE-2026-17566) abusing a backslash-escape mismatch to inject `\copy TO PROGRAM`, letting a…

exploitationpayload-generationpenetration-testing+3
120 days ago
Previous12Next