Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
311 results
CVE-2023-08-21-exploit preview

CVE-2023-08-21-exploit

GitHubamirzargham/cve-2023-08-21-exploit

Axigen < 10.3.3.47, 10.2.3.12 - Reflected XSS

data-exfiltrationexploitationinformation-gathering+3
12 years ago
CVE-2024-4367-POC-PDFJS preview

CVE-2024-4367-POC-PDFJS

GitHubelamani-drawing/cve-2024-4367-poc-pdfjs

PoC (Proof of Concept) de la CVE-2024-4367 - Vulnérabilité RCE dans libwebp. Démonstration complète incluant : création de payloads, scénarios…

data-exfiltrationeducationexploitation+4
11 year ago
CVE-2023-40869 preview

CVE-2023-40869

GitHubminotauro2020/cve-2023-40869

Cross Site Scripting vulnerability in mooSocial mooSocial Software v.3.1.6 allows a remote attacker to execute arbitrary code via a crafted script to…

exploitationpenetration-testingphishing-tools+3
13 years ago
CVE-2023-0214 preview

CVE-2023-0214

GitHub0pts/cve-2023-0214

Secure Web Gateway 10.2.11 - Cross-Site Scripting (XSS)

exploitationpenetration-testingphishing-tools+3
7 months ago
LetterPress-1.2.1-Open-Redirection-Via-Html-Injection-Vulnerability preview

LetterPress-1.2.1-Open-Redirection-Via-Html-Injection-Vulnerability

GitHubsanupl/letterpress-1.2.1-open-redirection-via-html-injection-vulnerability

In LetterPress plugin <= 1.2.1 is vulnerable to Html Injection Vulnerability which can futher leads to Open Redirection Vulnerabilty.

penetration-testingphishing-toolsweb-application-exploitation
3 months ago
xll_windows_reverse_shell preview

xll_windows_reverse_shell

GitHubh3x0v3rl0rd/xll_windows_reverse_shell

xll windows reverse shell

command-and-controlexploitationpayload-development+4
1 year ago
Ios-Safari-Mallicous-Extension-Example preview

Ios-Safari-Mallicous-Extension-Example

GitHubspiralbl0ck/ios-safari-mallicous-extension-example

Example on how to injection(currently under work) of keylogger js through Safari Extension(that part done)

exploitationinformation-gatheringios-security+3
2 years ago
CVE-2023-43871-WBCE-Arbitrary-File-Upload--XSS---Media preview

CVE-2023-43871-WBCE-Arbitrary-File-Upload--XSS---Media

GitHubsromanhu/cve-2023-43871-wbce-arbitrary-file-upload--xss---media

WBCE 1.6.1 is affected by File Upload - XSS vulnerability that allows attackers to upload a PDF file with a hidden XSS that when executed will launch…

exploitationphishing-toolsvulnerability-analysis+2
2 years ago
CVE-2020-13965 preview

CVE-2020-13965

GitHubmbadanoiu/cve-2020-13965

CVE-2020-13965: Cross-Site Scripting via Malicious XML Attachment in Roundcube Webmail

exploitationphishing-toolsvulnerability-analysis+2
2 years ago
CVE-2023-49052 preview

CVE-2023-49052

GitHubcyber-wo0dy/cve-2023-49052

Microweber version 2.0.4 vulnerable to "Uploading Malicious Files"

exploitationmalware-analysisphishing-tools+2
2 years ago
CVE-2021-40101 preview

CVE-2021-40101

GitHubs1lkys/cve-2021-40101

Survey XSS combined with CSRF leads to Admin Account Takeover in Concrete5 8.5.4

exploitationpenetration-testingphishing-tools+3
4 years ago
CVE-2024-30956 preview

CVE-2024-30956

GitHubleocottret/cve-2024-30956

(DOM-based XSS) HTML Injection vulnerability in TOWeb v.12.05 and before allows an attacker to inject HTML/JS code via the _message.html component.

exploitationphishing-toolssocial-engineering+2
2 years ago
CVE-2023-33977 preview

CVE-2023-33977

GitHubmnqazi/cve-2023-33977

Read more at Medium

exploitationphishing-toolsvulnerability-analysis+2
2 years ago
CVE-2023-44767_RiteCMS-File-Upload--XSS---Filemanager preview

CVE-2023-44767_RiteCMS-File-Upload--XSS---Filemanager

GitHubsromanhu/cve-2023-44767_ritecms-file-upload--xss---filemanager

RiteCMS 3.0 is affected by File Upload - XSS vulnerability that allows attackers to upload a PDF file with a hidden XSS that when executed will…

exploitationpenetration-testingphishing-tools+3
2 years ago
CVE-2023-43872-CMSmadesimple-Arbitrary-File-Upload--XSS---File-Manager preview

CVE-2023-43872-CMSmadesimple-Arbitrary-File-Upload--XSS---File-Manager

GitHubsromanhu/cve-2023-43872-cmsmadesimple-arbitrary-file-upload--xss---file-manager

CMSmadesimple 2.2.18 is affected by File Upload - XSS vulnerability that allows attackers to upload a PDF file with a hidden XSS that when executed…

exploitationphishing-toolsvulnerability-analysis+2
2 years ago
CVE-2022-3992 preview

CVE-2022-3992

GitHuburban4/cve-2022-3992

Cross Site Scripting on sanitization-management-system

exploitationinformation-gatheringphishing-tools+2
3 years ago
CVE-2023-44763_ConcreteCMS-Arbitrary-file-upload-Thumbnail preview

CVE-2023-44763_ConcreteCMS-Arbitrary-file-upload-Thumbnail

GitHubsromanhu/cve-2023-44763_concretecms-arbitrary-file-upload-thumbnail

ConcreteCMS v.9.2.1 is affected by Arbitrary File Upload vulnerability that allows Cross-Site Scriting (XSS) Stored.

exploitationpayload-generationphishing-tools+3
2 years ago
JQueryingU preview

JQueryingU

GitHubsamsayen/jqueryingu

Valid JQuery that profiles the system and returns info to the server in a fake analytics GET request

information-gatheringosint-social-engineeringphishing-tools+2
7 years ago
Previous1…161718Next