Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

834 results

CVE-2023-32749-PoC

alaeddine03/cve-2023-32749-poc

Exploit for CVE-2023-32749 affecting Pydio Cells 4.1.2 and earlier

educationexploitationpenetration-testing+3

4 months ago

CVE-2025-30772

nxploited/cve-2025-30772

WordPress WPC Smart Upsell Funnel for WooCommerce plugin <= 3.0.4 - Arbitrary Option Update to Privilege Escalation vulnerability

educationexploitationpenetration-testing+3

11 year ago

Apache-couchdb-CVE-2017-12635

cyberharsh/apache-couchdb-cve-2017-12635

Docker-based reproduction environment for Apache CouchDB CVE-2017-12635 vertical privilege escalation via JSON parser inconsistency, enabling…

exploitationlabs-practicepenetration-testing+3

16 years ago

FUXAPWN

hann1bl3l3ct3r/fuxapwn

POC exploit for CVE-2026-25895 FUXA Unauthenticated Path Traversal -> Arbitrary File Write -> RCE

exploitationinformation-gatheringlateral-movement+8

3 months ago

CVE-2026-11551-PoC

ubaydev/cve-2026-11551-poc

Proof-of-concept exploit for CVE-2026-11551, an unauthenticated privilege escalation vulnerability in the Branda White Label plugin for WordPress,…

authenticationcode-analysisexploitation+5

2 months ago

CVE-2025-6254

xxconi/cve-2025-6254

Python exploit for CVE-2025-6254 targeting unauthenticated privilege escalation in Doctreat Core <= 1.6.8. Supports single URL and multi-target…

exploitationpenetration-testingprivilege-escalation+2

2 months ago

CVE-2017-10271

dungsocool/cve-2017-10271

Step-by-step lab guide for exploiting CVE-2017-10271 (WebLogic XMLDecoder deserialization RCE) with manual payload construction, blind RCE bypass,…

binary-exploitationdata-exfiltrationeducation+7

3 months ago

Full-Attack-Lifecycle-Simulation-on-Metasploitable

om4rsallam/full-attack-lifecycle-simulation-on-metasploitable

Full-cycle Pentest on Metasploitable (VMware/Kali). Scanned services (Apache Tomcat/8180), researched CVE-2002-0936 via Exploit-DB, and gained access…

educationexploitationlabs-practice+5

5 months ago

CVE-2023-3460

gurjotexpert/cve-2023-3460

Proof-of-concept exploit for CVE-2023-3460, a WordPress Ultimate Member privilege escalation vulnerability. Creates an admin account via crafted…

educationexploitationpenetration-testing+4

11 year ago

vaultize_CVE-2024-36079

dxrvs/vaultize_cve-2024-36079

Proof-of-concept exploit for CVE-2024-36079, demonstrating arbitrary file upload in Vaultize DRM v21.07.27 via path traversal, enabling SSH key…

exploitationpenetration-testingprivilege-escalation+3

12 years ago

Penetration-Testing-Walkthrough-Hacksudo-Thor

heventafese/penetration-testing-walkthrough-hacksudo-thor

Black-box penetration test against HackSudo Thor : CVE-2014-6271 Shellshock RCE through Apache mod_cgi, chained with sudo misconfiguration and bash…

ctfeducationexploitation+8

3 months ago

CVE-2024-32371

chucrutis/cve-2024-32371

Proof-of-concept for CVE-2024-32371: privilege escalation via type parameter manipulation in HSC Mailinspector, enabling regular users to gain…

exploitationpenetration-testingprivilege-escalation+2

12 years ago

CVE-2023-22515

iveresk/cve-2023-22515

Shell-based exploit script for CVE-2023-22515, a critical broken access control vulnerability in Atlassian Confluence Server and Data Center,…

exploitationpenetration-testingprivilege-escalation+3

12 years ago

CVE-2017-14105

theguly/cve-2017-14105

Detailed CVE-2017-14105 disclosure for Aerohive HiveManager Classic privilege escalation via malicious backup archive upload enabling JSP webshell…

code-analysisexploitationpenetration-testing+3

18 years ago

CVE-2023-6875

hatlesswizard/cve-2023-6875

CVE-2023-6875 exploit written for Xakep.Ru

exploitationpassword-attackspayload-generation+3

12 years ago

CVE-2024-45337

peace-maker/cve-2024-45337

Proof of Concept for CVE-2024-45337 against Gitea and Forgejo

authenticationexploitationpenetration-testing+3

11 year ago

CVE-2024-46507

somchandra17/cve-2024-46507

build-script for CVE-2024-46507 and CVE-2024-46508

command-and-controleducationexploitation+6

11 year ago

CVE-2024-0507_CVE-2024-0200-github

convisolabs/cve-2024-0507_cve-2024-0200-github

Exploits for GitHub Enterprise CVE-2024-0507 and CVE-2024-0200

exploitationpenetration-testingprivilege-escalation+2

11 year ago

Previous 1…171819…47 Next