Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
118 results
CVE-2025-64512-exploit preview

CVE-2025-64512-exploit

GitHubmehdichyhab/cve-2025-64512-exploit

CVE-2025-64512 - pdfminer.six Remote Code Execution Exploit

code-analysiseducationexploitation+3
2 months ago
CVE-2024-3105-PoC preview

CVE-2024-3105-PoC

GitHubhunthubspace/cve-2024-3105-poc

A PoC Exploit for CVE-2024-3105 - The Woody code snippets – Insert Header Footer Code, AdSense Ads plugin for WordPress Remote Code Execution (RCE)

code-analysisexploitationpayload-generation+3
22 years ago
CVE-2022-42899 preview

CVE-2022-42899

GitHubiamsanjay/cve-2022-42899

Proof-of-concept exploit for CVE-2022-42899, demonstrating remote code execution in Apache Commons Text 1.5-1.9 via StringSubstitutor interpolation…

code-analysisexploitationpayload-generation+2
33 years ago
CVE-2020-0601 preview

CVE-2020-0601

GitHubyoanndqr/cve-2020-0601

CurveBall CVE exploitation

code-analysiscryptographyexploitation+3
26 years ago
CVE-2026-18718 preview

CVE-2026-18718

GitHubsn0x-sharma/cve-2026-18718

Found a 0-Day in Ghidra: Shared Project File Became a Code Execution Vector

code-analysisexploitationpayload-generation+2
11 month ago
CVE-2024-51793 preview

CVE-2024-51793

GitHubktn1990/cve-2024-51793

(CVE-2024-51793) Wordpress Plugin: Computer Repair Shop <= 3.8115 - Unauthenticated Arbitrary File Upload

code-analysisexploitationpayload-generation+6
19 months ago
CVE-2025-6440 preview

CVE-2025-6440

GitHubanothersec/cve-2025-6440

WooCommerce Designer Pro 1.9.26 - Arbitrary File Upload

code-analysisexploitationpayload-generation+3
110 months ago
monstra_cms-3.0.4--getshell preview

monstra_cms-3.0.4--getshell

GitHubjx0n0/monstra_cms-3.0.4--getshell

monstra_cms-3.0.4-上传getshell CVE-2018-17418

code-analysisexploitationpayload-generation+3
18 years ago
CVE-2023-46818 preview

CVE-2023-46818

GitHubzs1n/cve-2023-46818

CVE-2023-46818 | PoC | ISPConfig 3.2.11p1

code-analysisexploitationpayload-generation+3
111 months ago
CVE-2025-13374 preview

CVE-2025-13374

GitHubd0n601/cve-2025-13374

Kalrav AI Agent <= 2.3.3 - Unauthenticated Arbitrary File Upload via kalrav_upload_file AJAX Action

code-analysisexploitationpayload-generation+3
10 months ago
CVE-2025-12673 preview

CVE-2025-12673

GitHubd0n601/cve-2025-12673

Flex QR Code Generator <= 1.2.6 - Unauthenticated Arbitrary File Upload

code-analysisexploitationpayload-generation+3
11 months ago
CVE-2023-32571 preview

CVE-2023-32571

GitHubsectex/cve-2023-32571

Proof of Concept for CVE-2023-32571

code-analysiseducationexploitation+3
11 months ago
CVE-2025-12973 preview

CVE-2025-12973

GitHubd0n601/cve-2025-12973

S2B AI Assistant – ChatBot, ChatGPT, OpenAI, Content & Image Generator <= 1.7.7 - Authenticated (Editor+) Arbitrary File Upload

code-analysisexploitationpayload-generation+3
11 months ago
csv-plus_vulnerability preview

csv-plus_vulnerability

GitHubnanaao/csv-plus_vulnerability

👻 [PoC] CSV+ 0.8.0 - Arbitrary Code Execution (CVE-2022-21241)

code-analysiseducationexploitation+3
4 years ago
CVE-2025-6220 preview

CVE-2025-6220

GitHubd0n601/cve-2025-6220

Ultimate Addons for Contact Form 7 <= 3.5.12 - Authenticated (Administrator+) Arbitrary File Upload via 'save_options'

code-analysisexploitationpayload-generation+3
1 year ago
CVE-2023-50564 preview

CVE-2023-50564

GitHubglynzr/cve-2023-50564

Pluck v4.7.18 - Remote Code Execution (RCE)

code-analysisexploitationpayload-generation+3
1 year ago
CVE-2025-6586 preview

CVE-2025-6586

GitHubd0n601/cve-2025-6586

Download Plugin <= 2.2.8 - Authenticated (Administrator+) Arbitrary File Upload

code-analysisexploitationpayload-generation+3
1 year ago
CVE-2023-46818 preview

CVE-2023-46818

GitHubengranaabubakar/cve-2023-46818

Proof-of-concept exploit for authenticated PHP code injection in ISPConfig <= 3.2.11, enabling remote code execution via unsanitized language file…

code-analysisexploitationpayload-generation+4
1 year ago
Previous1234567Next