Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
57 results
CVE-2023-26360-adobe-coldfusion-rce-exploit preview

CVE-2023-26360-adobe-coldfusion-rce-exploit

GitHubjakabakos/cve-2023-26360-adobe-coldfusion-rce-exploit

Python exploit script for remote file read and command execution targeting Adobe ColdFusion vulnerabilities CVE-2023-26359, CVE-2023-26360, and…

command-and-controlexploitationpenetration-testing+3
5
2 years ago
PaperCut-Authentication_Bypass_and_RCE preview

PaperCut-Authentication_Bypass_and_RCE

GitHubjoaoaugustom/papercut-authentication_bypass_and_rce

This exploit is based on CVE-2023-27350 and was built upon the original exploit by horizon3ai and the Metasploit module.

authenticationeducationexploitation+5
4 months ago
evil_minio preview

evil_minio

GitHubabelche/evil_minio

EXP for CVE-2023-28434 MinIO unauthorized to RCE

command-and-controlexploitationpayload-development+2
3183 years ago
CVE-2023-20887 preview

CVE-2023-20887

GitHubsinsinology/cve-2023-20887

VMWare vRealize Network Insight Pre-Authenticated RCE (CVE-2023-20887)

exploitationpenetration-testingremote-access-tool+2
2253 years ago
CVE-2023-27532 preview

CVE-2023-27532

GitHubsfewer-r7/cve-2023-27532

Exploit for CVE-2023-27532 against Veeam Backup & Replication

command-and-controlexploitationpenetration-testing+2
1153 years ago
CVE-2023-33246_RocketMQ_RCE_EXPLOIT preview

CVE-2023-33246_RocketMQ_RCE_EXPLOIT

GitHubmalayke/cve-2023-33246_rocketmq_rce_exploit

CVE-2023-33246 RocketMQ RCE Detect By Version and Exploit

command-and-controlexploitationinformation-gathering+6
1063 years ago
CVE-2023-33246 preview

CVE-2023-33246

GitHubsuperzero/cve-2023-33246

Apache RocketMQ 远程代码执行漏洞(CVE-2023-33246) Exploit

exploitationpenetration-testingremote-access-tool+2
1133 years ago
CVE-2023-34039 preview

CVE-2023-34039

GitHubsinsinology/cve-2023-34039

VMWare Aria Operations for Networks (vRealize Network Insight) Static SSH key RCE (CVE-2023-34039)

cloud-securityexploitationpenetration-testing+3
943 years ago
CVE-2023-36845 preview

CVE-2023-36845

GitHubkljunowsky/cve-2023-36845

Proof-of-concept exploit for CVE-2023-36845 enabling unauthenticated remote code execution on Juniper SRX firewalls and EX switches via PHP…

exploitationpenetration-testingreconnaissance+3
552 years ago
CVE-2023-28324 preview

CVE-2023-28324

GitHubhorizon3ai/cve-2023-28324

Ivanti EPM AgentPortal RCE Vulnerability

exploitationpenetration-testingred-teaming+3
202 years ago
RancidCrisco preview

RancidCrisco

GitHubfullspectrumdev/rancidcrisco

Proof-of-concept exploit for CVE-2023-20126 targeting Cisco SPA phone adapters. Uploads malicious firmware to gain a root shell on port 23000/tcp via…

embedded-systems-securityexploitationfirmware-analysis+5
243 years ago
CVE-2023-24249-Exploit preview

CVE-2023-24249-Exploit

GitHubiduzzel/cve-2023-24249-exploit

Exploit script for CVE-2023-24249 - a vulnerability allowing remote code execution via file upload and command injection.

educationexploitationpayload-generation+4
92 years ago
CVE-2023-20887 preview

CVE-2023-20887

GitHubmiko550/cve-2023-20887

VMWare vRealize Network Insight Pre-Authenticated RCE (CVE-2023-20887)

exploitationpenetration-testingremote-access-tool+2
63 years ago
cve-2023-51467 preview

cve-2023-51467

GitHubvulncheck-oss/cve-2023-51467

A go-exploit for Apache OFBiz CVE-2023-51467

command-and-controlexploitationpayload-development+5
61 year ago
CVE-2023-4220-Chamilo-LMS preview

CVE-2023-4220-Chamilo-LMS

GitHubrai2en/cve-2023-4220-chamilo-lms

This is a script written in Python that allows the exploitation of the Chamilo's LMS software security flaw described in CVE-2023-4220

exploitationpayload-generationpenetration-testing+3
58 months ago
tenda-ac8v4-rop preview

tenda-ac8v4-rop

GitHubretr0reg/tenda-ac8v4-rop

Exploits for Tenda Ac8v4 stack-based overflow to Remote-Code Execution via Mipsel Ropping (CVE-2023-33669 - CVE-2023-33675)

binary-exploitationembedded-systems-securityexploitation+5
62 years ago
Craft-CMS-Exploit preview

Craft-CMS-Exploit

GitHubdiegaccio/craft-cms-exploit

Python exploit for Craft CMS CVE-2023-41892 Remote Code Execution vulnerability, delivering a PHP reverse shell for authorized penetration testing.

exploitationpenetration-testingred-teaming+3
52 years ago
CVE-2023-38646 preview

CVE-2023-38646

GitHubnickswink/cve-2023-38646

CVE-2023-38646 Unauthenticated RCE vulnerability in Metabase

exploitationpenetration-testingremote-access-tool+2
33 years ago
Previous1234Next