Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

2511 results

CVE-2022-46364-Poc

kasem545/cve-2022-46364-poc

Python exploit for CVE-2022-46364 (Apache CXF SSRF via MTOM XOP:Include). Sends crafted SOAP requests to exfiltrate internal metadata, credentials,…

exploitationinformation-gatheringpenetration-testing+3

6 months ago

cve-2021-41773

twseptian/cve-2021-41773

CVE-2021-41773: Path Traversal Zero-Day in Apache HTTP Server Exploited

exploitationinformation-gatheringpenetration-testing+3

44 years ago

CVE-2026-22679

keraattin/cve-2026-22679

Unauthenticated RCE exploit and detection scanner for Weaver E-cology, targeting the dubboApi debug endpoint. Includes PoC, Nmap NSE script, and…

exploitationpenetration-testingreconnaissance+3

55 months ago

cve-2023-27163

seanrdev/cve-2023-27163

To assist in enumerating the webserver behind the webserver SSRF CVE-2023-27163

exploitationinformation-gatheringreconnaissance+2

43 years ago

cve-2026-41940-tool

null200ok/cve-2026-41940-tool

A comprehensive Python utility to **detect**, **scan in bulk**, and **exploit** the critical authentication bypass vulnerability (CVE-2026-41940) in…

exploitationinformation-gatheringpayload-development+5

35 months ago

CVE-2020-11547--PRTG-Network-Monitor-Information-Disclosure

ch-rigu/cve-2020-11547--prtg-network-monitor-information-disclosure

Exploit for CVE-2020-11547: unauthenticated information disclosure in PRTG Network Monitor via crafted HTTP requests to /public/login.htm or…

exploitationinformation-gatheringreconnaissance+2

55 years ago

Get-log4j-Windows-local

keysau/get-log4j-windows-local

Identifying all log4j components across on local windows servers. CVE-2021-44228

exploitationinformation-gatheringport-scanning+3

54 years ago

CVE-2025-26318

frozenka/cve-2025-26318

POC CVE-2025-26318

exploitationinformation-gatheringphishing-tools+3

51 year ago

CVE-2024-28255

yongye-security/cve-2024-28255

OpenMetadata_RCE (CVE-2024-28255) Batch scan/exploit

exploitationinformation-gatheringpenetration-testing+3

52 years ago

CVE-2023-32315-POC

izzz0/cve-2023-32315-poc

CVE-2023-32315-Openfire-Bypass

exploitationpenetration-testingreconnaissance+2

53 years ago

Project-CVE-2025-54068

e4zyy/project-cve-2025-54068

Fast Python scanner detects vulnerable Laravel Livewire v3 sites (CVE-2025-54068, CVSS 9.2). Separates risky sites into vuln.txt, safe sites into…

information-gatheringreconnaissancevulnerability-analysis+2

31 month ago

CVE-2023-32315

gibran-abdillah/cve-2023-32315

Automated exploit tool for CVE-2023-32315 authentication bypass vulnerability. Scans single or bulk targets with multiprocessing and automatic login…

exploitationpenetration-testingreconnaissance+2

33 years ago

CVE-2023-35078

lager1/cve-2023-35078

Shell script to check Ivanti EPMM (MobileIron Core) instances for CVE-2023-35078 remote unauthenticated API access vulnerability, with Shodan dorks…

exploitationinformation-gatheringreconnaissance+2

53 years ago

Confluence-CVE-2022-26134

y000o/confluence-cve-2022-26134

Proof-of-concept exploit for CVE-2022-26134 in Confluence Server, using OGNL injection to execute commands via crafted HTTP requests.

command-and-controlexploitationreconnaissance+2

44 years ago

jugular

lkarlslund/jugular

Ultrafast CUPS-browsed scanner (CVE-2024-47176)

exploitationinformation-gatheringnetwork-mapping+3

72 years ago

wp2shell

johenlastgen-jlg/wp2shell

wp2shell - WordPress RCE & PoC (CVE-2026-63030 + CVE-2026-60137)

exploitationinformation-gatheringpenetration-testing+3

22 months ago

cve-2019-2725

zhusx110/cve-2019-2725

Automated scanner and exploit for CVE-2019-2725 (Oracle WebLogic RCE). Reads target IPs from ip.txt, checks for vulnerability, and saves exploitable…

exploitationpenetration-testingreconnaissance+2

77 years ago

CVE-RCE

awei507/cve-rce

CVE-2021-46422漏洞

exploitationpenetration-testingreconnaissance+2

33 years ago

Previous 1…99100Next