Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
83 results
mqxss preview

mqxss

GitHubgrampae/mqxss

Hooked browser communication over MQTT

command-and-controlinformation-gatheringpayload-generation+4
82 years ago
CVE-2021-26828-Ultimate preview

CVE-2021-26828-Ultimate

GitHubridpath/cve-2021-26828-ultimate

ScadaFlare Authenticated RCE Exploit Framework for ScadaBR (CVE-2021-26828) OpenPLC ScadaBR

command-and-controlexploitationinformation-gathering+6
59 months ago
CVE-2026-65883 preview

CVE-2026-65883

GitHubshinthink/cve-2026-65883

Aimy Captcha-Less Form Guard Joomla Component PHP Object Injection RCE. clfgd XOR keystream recovery + unserialize(). CVSS 10.0 | CWE-502 |…

exploitationinformation-gatheringpayload-generation+4
1 month ago
CVE-2023-27372-POC preview

CVE-2023-27372-POC

GitHubizzz0/cve-2023-27372-poc

Python proof-of-concept for detecting CVE-2023-27372 in SPIP CMS. Scans single or multiple URLs for the vulnerability and outputs results to terminal…

exploitationinformation-gatheringpayload-generation+3
23 years ago
CVE-2020-29134 preview

CVE-2020-29134

GitHubls4ss/cve-2020-29134

Exploit CVE-2020-29134 - TOTVS Fluig Platform - Path Traversal

exploitationinformation-gatheringpayload-generation+3
34 years ago
watchTowr-vs-JunosEvolved-CVE-2026-21902 preview

watchTowr-vs-JunosEvolved-CVE-2026-21902

GitHubwatchtowrlabs/watchtowr-vs-junosevolved-cve-2026-21902

Generates detection artifacts for CVE-2026-21902 on Juniper Junos Evolved, enabling verification of unauthenticated remote code execution via command…

exploitationinformation-gatheringnetwork-security+4
46 months ago
CVE-2026-4631-cockpit-RCE preview

CVE-2026-4631-cockpit-RCE

GitHubexdev994/cve-2026-4631-cockpit-rce

Unauthenticated Remote Code Execution via SSH Command-Line Argument Injection Cockpit versions 327 – 359 | CVSS 9.8 Critical | CWE-78

command-and-controlexploitationinformation-gathering+6
2 months ago
wp2shell-scanner preview

wp2shell-scanner

GitHubhidden-investigations/wp2shell-scanner

WordPress wp2shell vulnerability-chain scanner for CVE-2026-63030 and CVE-2026-60137, with active detection, optional PoC, JSON export.

exploitationinformation-gatheringpayload-generation+3
11 month ago
Noregressh preview

Noregressh

GitHubohhdamnbro/noregressh

CVE-2024-6387 and more Checker and Exploiter - Reverse/Bind-Shell Support. education only

command-and-controlexploitationinformation-gathering+6
211 months ago
CVE-2025-7401 preview

CVE-2025-7401

GitHubnxploited/cve-2025-7401

Premium Age Verification / Restriction for WordPress <= 3.0.2 - Unauthenticated Arbitrary File Read and Write

data-exfiltrationexploitationinformation-gathering+5
211 months ago
Log4j-Scanner-Exploit preview

Log4j-Scanner-Exploit

GitHubjulian911015/log4j-scanner-exploit

Script en bash que permite identificar la vulnerabilidad Log4j CVE-2021-44228 de forma remota.

exploitationinformation-gatheringpayload-generation+3
22 years ago
r2s preview

r2s

GitHubzamdevio/r2s

Advanced security testing tool for CVE-2025-55182 vulnerability assessment in Next.js applications. Features interactive shell, batch scanning, WAF…

command-and-controlexploitationinformation-gathering+5
29 months ago
CVE-2023-41425 preview

CVE-2023-41425

GitHubcharlesgargasson/cve-2023-41425

XSS-to-RCE exploit for Wonder CMS 3.2.0–3.4.2 with automated payload delivery, reverse shell, and cookie theft via malicious theme installation.

exploitationinformation-gatheringpayload-generation+3
12 years ago
CVE-2023-43208_Detection_PoC preview

CVE-2023-43208_Detection_PoC

GitHubavento/cve-2023-43208_detection_poc

Use java.net.InetAddress for detection

exploitationinformation-gatheringpayload-generation+3
21 year ago
CVE-2025-31161 preview

CVE-2025-31161

GitHubch3m1cl/cve-2025-31161

Python exploit script for CVE-2025-31161 targeting CrushFTP. Enumerates users and creates malicious accounts with elevated permissions via HTTP…

exploitationinformation-gatheringpayload-generation+3
19 months ago
CVE-2026-11344-RCE preview

CVE-2026-11344-RCE

GitHubxmyronn/cve-2026-11344-rce

Unauthenticated remote code execution exploit for Vehicle Management System in PHP via unrestricted file upload in newdriver.php and newvehicle.php,…

code-analysisexploitationinformation-gathering+5
3 months ago
PHP_8.1.x_Exploit preview

PHP_8.1.x_Exploit

GitHubgl1tch0x1/php_8.1.x_exploit

Automated detection & exploitation of critical PHP vulnerabilities (CVE-2024-4577 bypass, CVE-2025-14177, CVE-2025-14180, CVE-2025-14178)

command-and-controlcrawlerexploitation+7
14 months ago
CVE-2025-30567 preview

CVE-2025-30567

GitHuboyst3r1ng/cve-2025-30567

Unauthorized Arbitrary File Download in WordPress WP01

exploitationinformation-gatheringpayload-generation+3
11 year ago
Previous12345Next