Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
22 results
CVE-2026-25938-FUXA-Unauthenticated-RCE preview

CVE-2026-25938-FUXA-Unauthenticated-RCE

GitHubjudgedbykira/cve-2026-25938-fuxa-unauthenticated-rce

An explanation and PoC to exploit CVE-2026-25938 Unauthenticated RCE Vulnerability on FUXA

exploitationiot-securitypayload-development+6
112 days ago
Pwn2Own-Auto-2024-CHARX preview

Pwn2Own-Auto-2024-CHARX

GitHubret2/pwn2own-auto-2024-charx

Working exploit for Phoenix Contact CHARX SEC-3100 using Scapy raw Ethernet packets to trigger vulnerabilities and obtain an interactive connect-back…

embedded-systems-securityexploitationiot-security+2
142 years ago
Exploits_and_Advisories preview

Exploits_and_Advisories

GitHubrdomanski/exploits_and_advisories

Repository that tracks public exploits, vulnerabilities and advisories that I [co-]discovered or [co-]authored.

curated-resourcesembedded-systems-securityexploitation+6
1153 years ago
ripple20 preview

ripple20

GitHubcorelight/ripple20

Zeek package for passive detection of Ripple20 vulnerabilities in Treck TCP/IP stack, alerting on device artifacts and exploit attempts.

anomaly-detectionintrusion-detectioniot-security+3
324 years ago
mySCADA-myPRO-7-Hardcoded-FTP-Username-and-Password preview

mySCADA-myPRO-7-Hardcoded-FTP-Username-and-Password

GitHubemreovunc/myscada-mypro-7-hardcoded-ftp-username-and-password

CVE-2018-11311 disclosure and exploit for hardcoded FTP credentials (myscada:Vikuk63) in mySCADA myPRO 7 HMI/SCADA software, enabling unauthorized…

embedded-systems-securityexploitationhardware-iot-security+4
128 years ago
CVE-2025-48466 preview

CVE-2025-48466

GitHubshipcod3/cve-2025-48466

Modbus Packet Injection on Advantech WISE 4060LAN / IoT Gateway for door control

exploitationfuzzinghardware-iot-security+5
21 year ago
CVE-2018-7854 preview

CVE-2018-7854

GitHubyanissec/cve-2018-7854

Python exploit for CVE-2018-7854 targeting Schneider Electric Modicon M580/M340 PLCs. Executes remote exploitation against industrial control systems…

embedded-systems-securityexploitationpenetration-testing+2
2 years ago
CVE-2018-7849 preview

CVE-2018-7849

GitHubyanissec/cve-2018-7849

Python exploit for CVE-2018-7849 targeting Schneider Electric Modicon PLCs (M580, M340, Premium, Quantum) for remote exploitation of industrial…

embedded-systems-securityexploitationpenetration-testing+2
12 years ago
CVE-2018-7852 preview

CVE-2018-7852

GitHubyanissec/cve-2018-7852

Python exploit for CVE-2018-7852 targeting Schneider Electric Modicon PLCs (M580, M340, Premium, Quantum) with remote code execution via crafted…

embedded-systems-securityexploitationpenetration-testing+2
2 years ago
CVE-2018-7848 preview

CVE-2018-7848

GitHubyanissec/cve-2018-7848

Python exploit for CVE-2018-7848 targeting Schneider Electric Modicon PLCs (M580, M340, Premium, Quantum) with command-line usage for remote…

embedded-systems-securityexploitationpenetration-testing+2
2 years ago
CVE-2018-7846 preview

CVE-2018-7846

GitHubyanissec/cve-2018-7846

Python exploit for CVE-2018-7846 targeting Schneider Electric Modicon PLCs (M580, M340, Premium, Quantum) for security testing of industrial control…

embedded-systems-securityexploitationpenetration-testing+2
2 years ago
CVE-2018-7845 preview

CVE-2018-7845

GitHubyanissec/cve-2018-7845

Python exploit for CVE-2018-7845 targeting Schneider Electric Modicon PLCs (M580, M340, Premium, Quantum) for security testing and vulnerability…

embedded-systems-securityexploitationpenetration-testing+2
12 years ago
CVE-2018-7844 preview

CVE-2018-7844

GitHubyanissec/cve-2018-7844

Python exploit for CVE-2018-7844 targeting Schneider Electric Modicon PLCs (M580, M340, Premium, Quantum) with remote code execution via crafted…

embedded-systems-securityexploitationpenetration-testing+2
2 years ago
CVE-2018-7842 preview

CVE-2018-7842

GitHubyanissec/cve-2018-7842

Python exploit for CVE-2018-7842 targeting Schneider Electric Modicon PLCs, enabling remote start/stop operations on industrial control systems.

embedded-systems-securityexploitationpenetration-testing+3
2 years ago
CVE-2016-3962-Exploit preview

CVE-2016-3962-Exploit

GitHubsecurifera/cve-2016-3962-exploit

Proof-of-concept exploit for CVE-2016-3962 targeting Meinberg NTP Time Server web interface, with CVE-2016-3989 privilege escalation to root.

embedded-systems-securityexploitationpenetration-testing+3
110 years ago
UltraViolet preview

UltraViolet

GitHubyakushstanislav/ultraviolet

Self-hosted network discovery and search engine with continuous port scanning, deep protocol probing across ~100 services, local CVE matching, and…

dns-analysisincident-responseiot-security+6
445 days ago
CVE-2023-31716 preview

CVE-2023-31716

GitHubmateustesser/cve-2023-31716

Proof-of-concept exploit for CVE-2023-31716, a Local File Inclusion vulnerability in FUXA SCADA/HMI software versions <= 1.1.12, enabling arbitrary…

embedded-systems-securityexploitationscada-ics-security+2
2 years ago
CVE-2015-8299 preview

CVE-2015-8299

GitHubkernoelpanic/cve-2015-8299

Proof-of-concept exploit for a remote buffer overflow vulnerability in KNX ETS4 management software, demonstrating ROP-based code execution via…

binary-exploitationembedded-systems-securityexploitation+4
10 years ago
Previous12Next