Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
147 results
CVE-2025-59287 preview

CVE-2025-59287

GitHubgarvitv14/cve-2025-59287

Automated exploit for CVE-2025-59287, an unauthenticated RCE in WSUS, featuring payload generation, reverse shell listener, and AES encryption with…

command-and-controlexploitationpayload-generation+4
161 year ago
CVE-2025-24813 preview

CVE-2025-24813

GitHubfatkz/cve-2025-24813

Proof-of-concept exploit for CVE-2025-24813, achieving remote code execution on Apache Tomcat via session deserialization and partial PUT requests.

code-analysisexploitationpayload-generation+5
11 year ago
CVE-2025-49132-Mods preview

CVE-2025-49132-Mods

GitHubmalw0re/cve-2025-49132-mods

Automated exploit for CVE-2025-49132, a critical unauthenticated RCE in Pterodactyl Panel. Leverages LFI via locale endpoint to deploy persistent web…

exploitationpayload-generationpenetration-testing+3
128 months ago
CVE-2025-3248 preview

CVE-2025-3248

GitHubvip3rli0n/cve-2025-3248

Perform Remote Code Execution using vulnerable API endpoint.

educationexploitationpayload-generation+3
11 year ago
AirBorne-PoC preview

AirBorne-PoC

GitHubekomssavior/airborne-poc

poc for CVE-2025-24252 & CVE-2025-24132

binary-exploitationcommand-and-controlexploitation+6
1649 months ago
CVE-2025-69985 preview

CVE-2025-69985

GitHubjoshuavanderpoll/cve-2025-69985

Python exploit for CVE-2025-69985 targeting FUXA SCADA software. Sends crafted JSON payload to /api/runscript endpoint to bypass authentication and…

authenticationexploitationremote-access-tool+3
38 months ago
CVE-2025-32432-exploit-by-P34NUT preview

CVE-2025-32432-exploit-by-P34NUT

GitHubp34nut2/cve-2025-32432-exploit-by-p34nut

Reliable CVE-2025-32432 pre-auth RCE exploit for Craft CMS 3.x/4.x/5.x, works where other public PoCs fail

exploitationpayload-developmentpenetration-testing+6
81 month ago
CVE-2025-55182-POC-NEXTJS preview

CVE-2025-55182-POC-NEXTJS

GitHubaliclub0x00/cve-2025-55182-poc-nextjs

Working proof of concept for NextJS RCE to establish a reverse shell. [React2Shell]

code-analysisdynamic-analysis-sandboxingexploitation+5
2610 months ago
CVE-2025-27636-RCE-in-Apache-Camel preview

CVE-2025-27636-RCE-in-Apache-Camel

GitHubac8999/cve-2025-27636-rce-in-apache-camel

Python PoC exploiting CVE-2025-27636, an Apache Camel header injection RCE, supporting command execution, file reads, and reverse shell payloads.

exploitationpayload-generationpenetration-testing+3
1 month ago
CVE-2025-55182-Waf preview

CVE-2025-55182-Waf

GitHubl0n3m4n/cve-2025-55182-waf

CVE-2025-55182 RCE vulnerability in Next.js/React RSC servers (exploit and scanner)

command-and-controlexploitationpayload-generation+5
210 months ago
CVE-2025-32433 preview

CVE-2025-32433

GitHubvigilante-1337/cve-2025-32433

A critical flaw has been discovered in Erlang/OTP's SSH server allows unauthenticated attackers to gain remote code execution. One malformed SSH…

exploitationnetwork-securitypenetration-testing+3
1 year ago
CVE-2025-8110 preview

CVE-2025-8110

GitHubjoaquinrrr/cve-2025-8110

PoC exploit for CVE-2025-8110

educationexploitationpenetration-testing+3
54 months ago
CVE-2025-60787 preview

CVE-2025-60787

GitHubgunzf0x/cve-2025-60787

Automated PoC for CVE-2025-60787 providing authenticated remote code execution against motionEye servers up to 0.43.1b4, with reverse shell and…

exploitationpenetration-testingred-teaming+3
107 months ago
cve-2025-66398 preview

cve-2025-66398

GitHubjoshuavanderpoll/cve-2025-66398

CVE-2025-66398 — Signal K Server ≤ 2.18.0 RCE PoC

command-and-controleducationexploitation+7
37 months ago
CVE-2025-24813 preview

CVE-2025-24813

GitHubyuzuki-ayanami/cve-2025-24813

CVE-2025-24813 - Apache Tomcat RCE via Session Deserialization - PoC Exploit

exploitationpayload-developmentpenetration-testing+3
23 months ago
CVE-2025-55182_liyon preview

CVE-2025-55182_liyon

GitHubhujiaozhuzhu/cve-2025-55182_liyon

Python-based exploit for CVE-2025-55182 (React Server Components RCE) with interactive shell, reverse shell, batch scanning, and Docker-based…

command-and-controleducationexploitation+7
7 months ago
CVE-2025-32433 preview

CVE-2025-32433

GitHubiteride/cve-2025-32433

test

command-and-controlctfeducation+6
11 year ago
CVE-2025-55319-PoC preview

CVE-2025-55319-PoC

GitHubnephila016/cve-2025-55319-poc

PoC for CVE-2025-55319

command-and-controlctfexploitation+5
3 months ago
Previous12…9Next