Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
27 results
MSAPer preview

MSAPer

GitHubim-hanzou/msaper

Automatic Mass Tool for check and exploiting vulnerability in CVE-2023-3076 - MStore API < 3.9.9 - Unauthenticated Privilege Escalation (Mass Add…

exploitationprivilege-escalationvulnerability-scanners+1
16
2 years ago
CVE-2026-11961 preview

CVE-2026-11961

GitHubjohenlastgen-jlg/cve-2026-11961

CVE-2026-11961 — UserRegistration: WordPress User Registration <= 5.2.2 Privilege Escalation. Misconfigured Membership Roles → Unauthenticated Admin…

exploitationinformation-gatheringmisconfiguration+5
122 days ago
CVE-2025-2304 preview

CVE-2025-2304

GitHubcsuribird/cve-2025-2304

This Python script exploits a critical mass assignment vulnerability in Camaleon CMS version 2.9.0, allowing any registered user to escalate their…

authentication-authorizationeducationexploitation+5
56 months ago
CVE-2025-2304 preview

CVE-2025-2304

GitHub0xk4rth1/cve-2025-2304

A critical mass assignment vulnerability in Camaleon CMS (< 2.9.1) allows authenticated low-privileged users to elevate their privileges to…

educationexploitationpenetration-testing+3
12 months ago
CVE-2026-8732-POC preview

CVE-2026-8732-POC

GitHubp3nt3st3r-star/cve-2026-8732-poc

Multi-threaded mass scanner for CVE-2026-8732 in WordPress WP Google Map Pro. Automates nonce extraction, token exploitation, and hidden admin…

exploitationinformation-gatheringpenetration-testing+4
82 months ago
CVE-2026-5118 preview

CVE-2026-5118

GitHubjenderal92/cve-2026-5118

CVE-2026-5118 – Python2 mass exploit for Divi WordPress plugin Unauthenticated administrator registration via admin-ajax.php. Multi‑threaded scanner…

authenticationexploitationpenetration-testing+3
3 months ago
CVE-2026-1937 preview

CVE-2026-1937

GitHubnxploited/cve-2026-1937

YayMail <= 4.3.2 - Missing Authorization to Authenticated (Shop Manager+) Arbitrary Options Update via 'yaymail_import_state' AJAX Action

authentication-authorizationexploitationpenetration-testing+4
4 months ago
Exploit-for-CVE-2025-2304 preview

Exploit-for-CVE-2025-2304

GitHubsparrowhawk1113/exploit-for-cve-2025-2304

Exploit for CVE-2025-2304

educationexploitationprivilege-escalation+2
6 months ago
CVE-2025-15602-PoC preview

CVE-2025-15602-PoC

GitHubnxvh1337/cve-2025-15602-poc

Snipe-IT < 8.3.7 Mass Assignment Vulnerability Leading to Privilege Escalation

authenticationexploitationinformation-gathering+4
4 months ago
CVE-2023-2833 preview

CVE-2023-2833

GitHubalucard0x1/cve-2023-2833

Mass Exploit Privileges Authentication (Subscriber to Administrator) - Wordpress Plugin ReviewX

educationexploitationpassword-attacks+4
13 years ago
CVE-2025-2304-PoC preview

CVE-2025-2304-PoC

GitHublil0xplorer/cve-2025-2304-poc

PoC for CVE-2025-2304 Privilege Escalation in the Camaleon CMS

educationexploitationpenetration-testing+3
6 months ago
CVE-2025-2304-POC preview

CVE-2025-2304-POC

GitHubwhiteov3rflow/cve-2025-2304-poc

Proof-of-concept exploit for CVE-2025-2304, a mass assignment vulnerability in Camaleon CMS < 2.9.1 allowing authenticated privilege escalation to…

exploitationpenetration-testingprivilege-escalation+3
116 months ago
CVE-2025-2304-CamaleonCMS-PoC preview

CVE-2025-2304-CamaleonCMS-PoC

GitHub7acini/cve-2025-2304-camaleoncms-poc

PoC that demonstrates CVE-2025-2304 mass assignment privilege escalation in Camaleon CMS by injecting a role attribute into the password parameter…

educationexploitationpenetration-testing+4
26 months ago
CVE-2025-2304 preview

CVE-2025-2304

GitHubthe8frust/cve-2025-2304

Exploit for CVE-2025-2304 | Camaleon CMS versions < 2.9.1

educationexploitationpenetration-testing+3
6 months ago
CVE-2025-2304-POC preview

CVE-2025-2304-POC

GitHubaskiesec/cve-2025-2304-poc

Proof-of-concept exploit for CVE-2025-2304, a privilege escalation vulnerability in Camaleon CMS 2.9.0 via mass assignment on the password change…

exploitationpayload-generationpenetration-testing+3
2 months ago
CVE-2025-2304-Camaleon-CMS-Mass-Assignment-Privilege-Escalation-PoC preview

CVE-2025-2304-Camaleon-CMS-Mass-Assignment-Privilege-Escalation-PoC

GitHubestebanzarate/cve-2025-2304-camaleon-cms-mass-assignment-privilege-escalation-poc

Proof-of-concept exploit for a mass assignment privilege escalation vulnerability in Camaleon CMS < 2.9.1. Authenticated low-privilege users can…

exploitationmisconfigurationpenetration-testing+4
26 months ago
HackTheBox-Facts preview

HackTheBox-Facts

GitHubsuriyaboon/hackthebox-facts

HTB Facts is a Easy Linux box featuring Camaleon CMS and MinIO. Gain admin access via open registration and a mass assignment vulnerability, then…

cloud-securityctfeducation+7
2 months ago
CVE-2025-2304-exploit preview

CVE-2025-2304-exploit

GitHubjeanback1/cve-2025-2304-exploit

Python exploit script for CVE-2025-2304, a mass assignment privilege escalation in Camaleon CMS. Automates CSRF token parsing and role parameter…

educationexploitationlabs-practice+5
4 months ago
Previous12Next