Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
17 results
sjet preview

sjet

GitHubsiberas/sjet

Exploit insecure JMX services with remote payload deployment, command execution, shell access, and JavaScript scripting for penetration testing of…

command-and-controlexploitationpayload-generation+1
133
5 years ago
CVE-2020-9484 preview

CVE-2020-9484

GitHubpentestical/cve-2020-9484

Bash proof-of-concept exploit for CVE-2020-9484 enabling remote code execution on Apache Tomcat via insecure deserialization in file uploads, with…

educationexploitationpayload-generation+3
354 years ago
react2shell-CVE-2025-55182-full-rce-script preview

react2shell-CVE-2025-55182-full-rce-script

GitHubpax-k/react2shell-cve-2025-55182-full-rce-script

Proof-of-concept exploit for React2Shell (CVE-2025-55182) enabling pre-authentication remote code execution on vulnerable Next.js/React Server…

educationexploitationpenetration-testing+4
68 months ago
CVE-2025-66478-POC preview

CVE-2025-66478-POC

GitHubwangxso/cve-2025-66478-poc

Proof-of-concept exploit for CVE-2025-66478, a critical RCE in Next.js via insecure deserialization in React Server Components. Includes payload…

educationexploitationlabs-practice+6
58 months ago
react2shell-CVE-2025-55182-full-rce-script preview

react2shell-CVE-2025-55182-full-rce-script

GitHubchrahman/react2shell-cve-2025-55182-full-rce-script

Proof-of-concept exploit for CVE-2025-55182 (React2Shell) enabling pre-authentication remote code execution via insecure deserialization in React's…

command-and-controleducationexploitation+5
38 months ago
CVE-2023-46604 preview

CVE-2023-46604

GitHubmrpentst/cve-2023-46604

Remote code execution exploit for Apache ActiveMQ CVE-2023-46604, leveraging insecure deserialization in OpenWire protocol to execute arbitrary shell…

command-and-controlexploitationpayload-generation+3
22 years ago
CVE-2023-47464 preview

CVE-2023-47464

GitHubhadesscs/cve-2023-47464

Python PoC exploit for CVE-2023-47464 targeting GL-AX1800 router vulnerabilities including CSRF, insecure file upload, path traversal, and RCE.…

educationexploitationpenetration-testing+3
22 years ago
CVE-2023-27842 preview

CVE-2023-27842

GitHubcowsecurity/cve-2023-27842

Authenticated remote code execution exploit for eXtplorer 2.1.15 on Joomla. Python-based tool targeting insecure permissions to gain shell access.

exploitationpenetration-testingremote-access-tool+2
23 years ago
CVE-2025-55182 preview

CVE-2025-55182

GitHubdevianntsec/cve-2025-55182

Master's thesis research on CVE-2025-55182 (React2Shell). Modular exploitation framework with 6 attack scenarios (RCE, exfiltration, defacement),…

educationexploitationexploit-frameworks+8
14 months ago
CVE-2023-46604 preview

CVE-2023-46604

GitHubpulentoski/cve-2023-46604

Python exploit for CVE-2023-46604 targeting insecure deserialization in Apache ActiveMQ OpenWire protocol to achieve remote code execution via…

command-and-controlexploitationpayload-development+3
12 years ago
CVE-2025-55182-React2Shell-CVSS-10.0- preview

CVE-2025-55182-React2Shell-CVSS-10.0-

GitHubgeorge0papasotiriou/cve-2025-55182-react2shell-cvss-10.0-

Python proof-of-concept exploit for CVE-2025-55182, a pre-authentication remote code execution vulnerability in React Server Components via insecure…

exploitationpayload-developmentpenetration-testing+3
16 months ago
CVE-2023-45185 preview

CVE-2023-45185

GitHubafine-com/cve-2023-45185

IBM i Access Client Solutions < 1.1.9.4 - Remote code execution via insecure deserialisation

exploitationpayload-generationpenetration-testing+3
2 years ago
CVE-2023-28354 preview

CVE-2023-28354

GitHubstormfleet/cve-2023-28354

Proof-of-concept exploit for CVE-2023-28354, demonstrating unauthenticated remote command execution on Opsview Windows Agent via insecure NRPE…

command-and-controlexploitationpenetration-testing+2
1 year ago
CVE-2019-12409 preview

CVE-2019-12409

GitHubmbadanoiu/cve-2019-12409

Proof-of-concept exploit for CVE-2019-12409, demonstrating unauthenticated remote code execution in Apache Solr 8.1.1/8.2.0 via insecure default JMX…

exploitationmisconfigurationpenetration-testing+3
1 year ago
MalvexC2 preview

MalvexC2

GitHuberarnitox/malvexc2

A simple C2 Framework written in modern C++

command-and-controleducationexploit-frameworks+6
321 month ago
CVE-2024-0757-Exploit preview

CVE-2024-0757-Exploit

GitHubhunthubspace/cve-2024-0757-exploit

A PoC Exploit for CVE-2024-0757 - Insert or Embed Articulate Content into WordPress Remote Code Execution (RCE)

exploitationpayload-generationpenetration-testing+3
82 years ago
CVE-2015-5377 preview

CVE-2015-5377

GitHubfi3ro/cve-2015-5377

Java deserialization exploit targeting Elasticsearch 1.5.2 transport protocol (port 9300) using Groovy MethodClosure chain for remote code execution…

exploitationpayload-developmentremote-access-tool+2
34 years ago