Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
26 results
CVE-2025-34028-PoC-Commvault-RCE preview

CVE-2025-34028-PoC-Commvault-RCE

GitHubmattb709/cve-2025-34028-poc-commvault-rce

Proof-of-Concept (PoC) for CVE-2025-34028, a Remote Code Execution vulnerability in Commvault Command Center. This Python script scans single or…

exploitationpenetration-testingred-teaming+3
2
1 year ago
Py-RDP-Patcher preview

Py-RDP-Patcher

GitHubsp00kyskelet0n/py-rdp-patcher

Python script that patches the termsrv.dll file on Windows to enable multiple concurrent RDP sessions, supporting Windows 10 versions 1703 through…

lateral-movementpenetration-testingremote-access-tool
65 years ago
CVE-2021-3129-Script preview

CVE-2021-3129-Script

GitHubcuongtop4598/cve-2021-3129-script

Python exploit script for CVE-2021-3129, achieving remote code execution on Laravel debug mode with multiple RCE chains and reverse shell capability.

exploitationpenetration-testingremote-access-tool+2
74 years ago
CVE-2022-31814 preview

CVE-2022-31814

GitHubarunhatter/cve-2022-31814

This script is a proof-of-concept exploit for pfBlockerNG <= 2.1.4_26 that allows for remote code execution. It takes a single target URL or a list…

exploitationpayload-developmentpenetration-testing+3
2 years ago
CVE-2024-4358_Mass_Exploit preview

CVE-2024-4358_Mass_Exploit

GitHubsk1dr0wz/cve-2024-4358_mass_exploit

Mass exploitation tool for CVE-2024-4358, executing commands on multiple web targets concurrently with threading support.

command-and-controlexploitationpenetration-testing+3
252 years ago
RCE-CVE-2026-10520-CVE-2026-10523 preview

RCE-CVE-2026-10520-CVE-2026-10523

GitHubimbas007/rce-cve-2026-10520-cve-2026-10523

Detection artifact generator for Ivanti Sentry authentication bypass and RCE vulnerabilities (CVE-2026-10520, CVE-2026-10523). Scans single or…

exploitationpenetration-testingreconnaissance+3
20 days ago
CVE-2018-7600 preview

CVE-2018-7600

GitHub0xaj2k/cve-2018-7600

Drupal 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbitrary code because of an issue affecting…

exploitationpenetration-testingremote-access-tool+2
15 years ago
CVE-2021-21985 preview

CVE-2021-21985

GitHubbigbroke/cve-2021-21985

Multiple vulnerabilities in the vSphere Client (HTML5) were privately reported to VMware. Updates and workarounds are available to address these…

exploitationpenetration-testingremote-access-tool+2
15 years ago
CVE-2020-14882_Exploit_Gui preview

CVE-2020-14882_Exploit_Gui

GitHubqianniaoge/cve-2020-14882_exploit_gui

GUI-based exploit tool for CVE-2020-14882 targeting Oracle WebLogic servers. Supports reverse shell payload generation, proxy configuration, and…

exploitationpayload-generationpenetration-testing+3
5 years ago
cve-2022-1388-iveresk-command-shell preview

cve-2022-1388-iveresk-command-shell

GitHubiveresk/cve-2022-1388-iveresk-command-shell

Improved POC for CVE-2022-1388 that affects multiple F5 products.

command-and-controlexploitationpenetration-testing+3
14 years ago
CVE-2025-47812 preview

CVE-2025-47812

GitHub0xjuarez/cve-2025-47812

Exploit and scanner for CVE-2025-47812 targeting Wing FTP Server unauthenticated remote code execution, supporting single-target, mass scanning,…

command-and-controlexploitationpenetration-testing+3
16 months ago
CVE-2026-24061 preview

CVE-2026-24061

GitHubmonstertsl/cve-2026-24061

Python-based scanner that detects CVE-2026-24061 in GNU Inetutils telnetd, allowing batch testing of multiple targets for the authentication bypass…

authenticationexploitationpenetration-testing+2
17 months ago
PoC-RCE-CVE-2025-55182 preview

PoC-RCE-CVE-2025-55182

GitHubilixm/poc-rce-cve-2025-55182

Advanced RCE exploitation toolkit for React Server Components vulnerabilities. Features multiple pre-built payloads, Shodan integration for target…

command-and-controlexploitationinformation-gathering+7
9 months ago
CVE-2025-47812-PoC preview

CVE-2025-47812-PoC

GitHubhavbay/cve-2025-47812-poc

Unauthenticated remote code execution exploit for Wing FTP Server (CVE-2025-47812) with multiple reverse shell payloads, interactive and CLI modes,…

educationexploitationpayload-generation+5
6 months ago
Webmin-CVE-2022-0824-Enhanced-Exploit preview

Webmin-CVE-2022-0824-Enhanced-Exploit

GitHubnudttan91/webmin-cve-2022-0824-enhanced-exploit

Python exploit for Webmin CVE-2022-0824 with dual-mode support: direct command execution and reverse shell. Features multiple payload types,…

command-and-controlexploitationpayload-generation+6
1 year ago
apache__mina-sshd_CVE-2023-35887_2-9-2 preview

apache__mina-sshd_CVE-2023-35887_2-9-2

GitHubshoucheng3/apache__mina-sshd_cve-2023-35887_2-9-2

Pure Java SSH client/server library implementing SSH-2 protocol with support for multiple ciphers, key exchanges, authentication methods, SFTP, SCP,…

authenticationcryptographyencryption-decryption-tools+5
1 year ago
Radium preview
Archived

Radium

GitHubmehulj94/radium

Python logger with multiple features.

command-and-controldata-exfiltrationinformation-gathering+7
5245 years ago
DAws preview

DAws

GitHubdotcppfile/daws

Advanced Web Shell

ids-ips-evasionpayload-generationpenetration-testing+6
5809 years ago
Previous12Next