Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

834 results

CVE-2026-63030

administrator-01001/cve-2026-63030

Proof-of-concept exploit for CVE-2026-63030, a pre-authentication vulnerability in WordPress (versions 6.9.0 through 7.0.1).

exploitationpayload-developmentpenetration-testing+4

1 month ago

CVE-2024-28000

johndoeanonita/cve-2024-28000

CVE-2024-28000 Exploit for litespeed-cache =<6.3 allows Privilege Escalation with creation of administrator account

educationexploitationpenetration-testing+3

41 year ago

CVE-2026-37071

jfs-jfs/cve-2026-37071

Proof-of-concept exploit for CVE-2026-37071: arbitrary file rename in Veno File Manager 4.4.9 enabling privilege escalation to super administrator…

exploitationmisconfigurationprivilege-escalation+2

2 months ago

CVE-2026-54807

izxci/cve-2026-54807

Proof-of-concept exploit for CVE-2026-54807 demonstrating unauthenticated privilege escalation via WooCommerce registration form, enabling admin role…

exploitationpenetration-testingprivilege-escalation+2

2 months ago

CVE-2026-49083

izxci/cve-2026-49083

Python exploit for CVE-2026-49083 targeting privilege escalation in the LatePoint Calendar Booking WordPress plugin. Provides automated exploitation…

exploitationexploit-frameworkspenetration-testing+3

2 months ago

cve-2026-9558-poc

covepseng/cve-2026-9558-poc

Exploitability PoC for CVE-2026-9558 (SSTI Mautic Theme)

educationexploitationlabs-practice+5

1 month ago

CVE-2026-52199

lamaper/cve-2026-52199

Proof-of-concept exploit for CVE-2026-52199: unauthenticated remote code execution via exposed ADB daemon on UZ801 4G LTE router. Includes…

educationexploitationlabs-practice+5

1 month ago

rootpacket-cve-2026-31431

kinryulabs/rootpacket-cve-2026-31431

Live cryptojacking toolkit with CVE-2026-31431 LPE exploit, container escape, kernel rootkit, and XMRig Monero miner, captured from real attacks for…

container-escapecontainer-securitycryptography+5

22 months ago

CVE-2026-49060-Lab

rootdirective-sec/cve-2026-49060-lab

Docker-based lab for reproducing CVE-2026-49060, an unauthenticated privilege escalation in the Hippoo Mobile App for WooCommerce WordPress plugin.…

educationlabs-practicepenetration-testing+3

2 months ago

CVE-2020-9758

ari034/cve-2020-9758

Form submission for vulnerability in livezilla

exploitationinformation-gatheringpenetration-testing+3

36 years ago

CVE-2026-50656-rogueplanet-validation

g0thamrabb1t/cve-2026-50656-rogueplanet-validation

Validation report for the RoguePlanet Microsoft Defender PoC in a controlled Windows 11 lab environment, including build notes, Defender detection…

binary-exploitationeducationexploitation+5

22 months ago

cifswitch-check

liamromanis101/cifswitch-check

Detection script for CIFSwitch - CVE-2026-46243

cloud-securityconfiguration-auditingcontainer-security+6

2 months ago

CVE-2022-0185-Case-Study

dcheng69/cve-2022-0185-case-study

Educational case study and exploit development walkthrough for CVE-2022-0185, a Linux kernel heap-based buffer overflow enabling local privilege…

binary-exploitationctfeducation+4

32 years ago

CVE-2025-2304-POC

askiesec/cve-2025-2304-poc

Proof-of-concept exploit for CVE-2025-2304, a privilege escalation vulnerability in Camaleon CMS 2.9.0 via mass assignment on the password change…

exploitationpayload-generationpenetration-testing+3

2 months ago

CVE-2026-49083

87achrafg-stack/cve-2026-49083

Python exploit for CVE-2026-49083, a privilege escalation vulnerability in the LatePoint Calendar Booking WordPress plugin, enabling unauthorized…

exploitationexploit-frameworkspenetration-testing+3

2 months ago

CVE-2026-5118

1beelze/cve-2026-5118

Automated exploit and mass scanner for CVE-2026-5118, an unauthenticated privilege escalation in WordPress Divi Form Builder <=5.1.2, enabling admin…

authenticationexploitationpayload-generation+6

1 month ago

CVE-2026-44881_exploit

0xdak/cve-2026-44881_exploit

Single-script exploit for CVE-2026-44881 that chains .git credential leakage, Portainer Git-symlink injection, arbitrary host file read, and SSH…

cloud-securitycontainer-securityctf+7

2 months ago

CVE-2025-4334

0xgh057r3c0n/cve-2025-4334

Proof-of-concept exploit for CVE-2025-4334, a privilege escalation vulnerability in the Simple User Registration WordPress plugin (<= 6.3), allowing…

educationexploitationpassword-attacks+4

410 months ago

Previous 1…141516…47 Next