Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
157 results
Langflow-CVE-2025-3248-Multi-target preview

Langflow-CVE-2025-3248-Multi-target

GitHubill-deed/langflow-cve-2025-3248-multi-target

Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can…

code-analysisexploitationpenetration-testing+3
1 year ago
CVE-2022-34919 preview

CVE-2022-34919

GitHubahajnik/cve-2022-34919

Proof-of-concept exploit for CVE-2022-34919, demonstrating unauthenticated arbitrary file upload and RCE in Contensis CMS Classic interface via…

exploitationpayload-generationpenetration-testing+3
4 years ago
CVE-2022-46169-Cacti-v1.2.22-RCE preview

CVE-2022-46169-Cacti-v1.2.22-RCE

GitHubmind2hex/cve-2022-46169-cacti-v1.2.22-rce

Python exploit for CVE-2022-46169, a remote code execution vulnerability in Cacti v1.2.22. Enables authenticated RCE via crafted HTTP requests for…

exploitationpenetration-testingred-teaming+2
2 years ago
cve-2021-41773-v- preview

cve-2021-41773-v-

GitHubmightysai1997/cve-2021-41773-v-

Proof-of-concept exploit for Apache HTTP Server 2.4.49/2.4.50 path traversal vulnerability (CVE-2021-41773) enabling remote code execution via CGI…

educationexploitationpenetration-testing+3
3 years ago
CVE-2025-22604-Cacti-RCE preview

CVE-2025-22604-Cacti-RCE

GitHubishwardeepp/cve-2025-22604-cacti-rce

Proof-of-concept exploit for CVE-2025-22604, a remote code execution vulnerability in Cacti network monitoring software. Enables authenticated RCE…

exploitationpenetration-testingred-teaming+2
1 year ago
CVE-2011-3192 preview

CVE-2011-3192

GitHubfuturezayka/cve-2011-3192

Python exploit for CVE-2011-3192 (Apache Range Header Denial of Service). Executes multi-threaded HTTP requests to exhaust server resources. Requires…

exploitationpenetration-testingred-teaming+2
2 years ago
CVE-2021-41773 preview

CVE-2021-41773

GitHubskentagon/cve-2021-41773

Exploit scripts for Apache HTTP Server 2.4.49 directory traversal vulnerability (CVE-2021-41773), enabling path traversal and potential RCE via…

exploitationpenetration-testingred-teaming+2
1 year ago
doser.go preview

doser.go

GitHubquitten/doser.go

DoS tool for HTTP requests (inspired by hulk but has more functionalities)

network-securitypenetration-testingred-teaming+1
5382 years ago
POC-CVE-2026-0768 preview

POC-CVE-2026-0768

GitHubrmhowe425/poc-cve-2026-0768

Proof-of-concept exploit for CVE-2026-0768 in Langflow, allowing remote command execution via crafted HTTP requests.

exploitationpenetration-testingred-teaming+2
6 days ago
POC-CVE-2026-5027 preview

POC-CVE-2026-5027

GitHubrmhowe425/poc-cve-2026-5027

Proof-of-concept exploit for CVE-2026-5027 in Langflow, enabling remote command execution via crafted HTTP requests.

exploitationpenetration-testingred-teaming+2
6 days ago
Responder preview
Archived

Responder

GitHubspiderlabs/responder

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2,…

authenticationdns-analysisexploitation+8
4.9k6 years ago
CVE-2021-41773 preview
Archived

CVE-2021-41773

GitHubshiomiyan/cve-2021-41773

Proof-of-concept exploit for CVE-2021-41773, an Apache HTTP Server 2.4.49 path traversal vulnerability enabling remote file disclosure and CGI…

exploitationpenetration-testingred-teaming+2
4 years ago
HTTP-Basma preview

HTTP-Basma

GitHubnetomize/http-basma

In the realm of cybersecurity, accurately identifying and characterizing web servers is crucial for threat detection, vulnerability assessment, and…

command-and-controlinformation-gatheringmalware-analysis+6
1 month ago
reGeorg preview

reGeorg

GitHubsensepost/regeorg

The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.

penetration-testingpost-exploitationred-teaming+1
3.2k9 years ago
singularity preview

singularity

GitHubnccgroup/singularity

A DNS rebinding attack framework.

dns-analysisexploitationinformation-gathering+6
1.3k1 month ago
awesome-hacking-lists preview

awesome-hacking-lists

GitHubtaielab/awesome-hacking-lists

A curated collection of top-tier penetration testing tools and productivity utilities across multiple domains. Join us to explore, contribute, and…

curated-resourceseducationexploit-frameworks+6
1.4k9 months ago
ABPTTS preview

ABPTTS

GitHubnccgroup/abptts

TCP tunneling over HTTP/HTTPS for web application servers

ids-ips-evasionpenetration-testingred-teaming+1
74410 years ago
C2concealer preview

C2concealer

GitHubredsiege/c2concealer

Generates randomized, lint-validated C2 malleable profiles for Cobalt Strike, automating HTTP/S, DNS, SMB, and SSH beacon configuration with…

command-and-controlpayload-generationpenetration-testing-frameworks+1
1.1k4 months ago
Previous1…567…9Next