Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
77 results
CVE-2009-2265 preview

CVE-2009-2265

GitHubnika0x38/cve-2009-2265

A Rust implementation of the POC for the CVE-2009-2265 exploit, targeting Adobe ColdFusion 8.

exploitationpayload-generationpenetration-testing+3
10 months ago
Blackash-CVE-2025-24071 preview

Blackash-CVE-2025-24071

GitHubzbs54/blackash-cve-2025-24071

CVE-2025-24071

exploitationexploit-frameworksinformation-gathering+3
1 year ago
CVE-2023-45866_WIP preview

CVE-2023-45866_WIP

GitHubladyg00se/cve-2023-45866_wip
bluetooth-securityexploitationpayload-generation+3
1 year ago
CVE-2024-23741 preview

CVE-2024-23741

GitHubgiovannipajeu1/cve-2024-23741

CVE-2024-23741

exploitationpayload-generationpenetration-testing+3
2 years ago
CVE-2024-23740 preview

CVE-2024-23740

GitHubgiovannipajeu1/cve-2024-23740

CVE-2024-23739

binary-exploitationexploitationpayload-generation+3
2 years ago
go-get-RCE preview

go-get-RCE

GitHubsaptaktdk/go-get-rce

This is the exploit of CVE-2018-6574: go get RCE

exploitationpayload-generationpenetration-testing+2
1 year ago
CVE-2020-9484 preview

CVE-2020-9484

GitHubpentestical/cve-2020-9484
educationexploitationpayload-generation+3
354 years ago
CVE-2022-30190-Follina-Lab preview

CVE-2022-30190-Follina-Lab

GitHubu1tr0nex/cve-2022-30190-follina-lab

Full exploit chain lab and Suricata IDS detection for CVE-2022-30190 (Follina) - MSDT RCE

command-and-controleducationexploitation+7
3 months ago
CVE-2025-66478-Research-Proof-of-Concept preview

CVE-2025-66478-Research-Proof-of-Concept

GitHubnilfredb/cve-2025-66478-research-proof-of-concept
educationexploitationpapers-research+3
2 months ago
exploit-CVE-2015-8351 preview

exploit-CVE-2015-8351

GitHubg4sp4rcs/exploit-cve-2015-8351

WordPress Plugin Gwolle Guestbook 1.5.3 - Remote File Inclusion

educationexploitationpayload-generation+3
23 years ago
CVE-2024-34102 preview

CVE-2024-34102

GitHubnmmorette/cve-2024-34102

CVE-2024-34102 exploit for python3

educationexploitationpayload-generation+3
16 months ago
Powershell-RAT preview

Powershell-RAT

GitHubviralmaniar/powershell-rat

Python based backdoor that uses Gmail to exfiltrate data through attachment. This RAT will help during red team engagements to backdoor any Windows…

data-exfiltrationeducationpayload-generation+4
1.2k6 years ago
CVE-2026-5203 preview

CVE-2026-5203

GitHubcaginkyr/cve-2026-5203
exploitationpayload-generationpenetration-testing+2
3 months ago
Vehicle-Service-Management-System-Multiple-File-upload-Leads-to-Code-Execution preview

Vehicle-Service-Management-System-Multiple-File-upload-Leads-to-Code-Execution

GitHubsanupl/vehicle-service-management-system-multiple-file-upload-leads-to-code-execution

CVE-2021-46076 - Sourcecodester Vehicle Service Management System 1.0 is vulnerable to File upload. An attacker can upload a malicious php file in…

code-analysisexploitationpayload-generation+3
3 months ago
CVE-2020-14372 preview

CVE-2020-14372

GitHubkukrimate/cve-2020-14372

Write-up and proof of concept exploit for CVE-2020-14372

binary-exploitationeducationexploitation+3
45 years ago
Vehicle-Service-Management-System-Multiple-File-upload-Leads-to-Html-Injection preview

Vehicle-Service-Management-System-Multiple-File-upload-Leads-to-Html-Injection

GitHubsanupl/vehicle-service-management-system-multiple-file-upload-leads-to-html-injection

CVE-2021-46079 - An Unrestricted File Upload vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. A remote attacker can…

exploitationpayload-generationpenetration-testing+3
3 months ago
weblogic_wls_wsat_rce preview

weblogic_wls_wsat_rce

GitHubcjjduck/weblogic_wls_wsat_rce

forked from https://github.com/s3xy/CVE-2017-10271. Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent:…

exploitationpayload-generationpenetration-testing+2
38 years ago
CVE-2026-11834 preview

CVE-2026-11834

GitHubmattgsys/cve-2026-11834

Proof of Concept (PoC) for the TP-Link DHCP Option 66 Unauthenticated RCE (CVE-2026-11834)

command-and-controlexploitationpayload-generation+3
31 month ago
Previous12345Next