Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
51 results
spring-core-rce preview

spring-core-rce

GitHubliangyueliangyue/spring-core-rce

Python-based exploit for CVE-2022-22965 (Spring4Shell) with vulnerability detection and webshell injection (Behinder/Godzilla) into Spring web…

exploitationpayload-generationpenetration-testing+3
26
4 years ago
CVE-2025-3243 preview

CVE-2025-3243

GitHubtenebrae93/cve-2025-3243

A proof-of-concept exploit for CVE-2025-32433, a critical vulnerability in Erlang's SSH library that allows pre-authenticated code execution via…

exploitationpayload-generationpenetration-testing+3
71 year ago
CVE-2023-42819 preview

CVE-2023-42819

GitHubc1ph3rx13/cve-2023-42819

CVE-2023-42819

exploitationpayload-generationpenetration-testing+3
62 years ago
CVE-2025-32206 preview

CVE-2025-32206

GitHubnxploited/cve-2025-32206

WordPress Processing Projects Plugin <= 1.0.2 is vulnerable to Arbitrary File Upload

exploitationpayload-generationpenetration-testing+3
21 year ago
CVE-2022-3552 preview

CVE-2022-3552

GitHubbakalmode/cve-2022-3552

CVE-2022-3552 RCE with detailed exploitation steps

exploitationpayload-generationpenetration-testing+3
21 year ago
CVE-2026-48907 preview

CVE-2026-48907

GitHubwearehackers160/cve-2026-48907

CVE-2026-48907 is a critical improper access control vulnerability in the JCE editor extension for Joomla. It allows unauthenticated attackers to…

exploitationpayload-generationpenetration-testing+3
3 months ago
Prestashop-CVE-2024-34716 preview

Prestashop-CVE-2024-34716

GitHub0xdtc/prestashop-cve-2024-34716

Automates a CSRF attack against CVE-2024-34716 to deploy a PHP reverse shell on PrestaShop, with automated payload packaging and Netcat listener…

exploitationpayload-generationpenetration-testing+3
11 year ago
CVE-2018-2628 preview

CVE-2018-2628

GitHubherantong/cve-2018-2628

Python-based exploit for CVE-2018-2628 targeting Oracle WebLogic Server, providing vulnerability detection and remote shell access via JSP payload…

exploitationpayload-generationpenetration-testing+3
18 months ago
CVE-2020-24186 preview

CVE-2020-24186

GitHubgazettel/cve-2020-24186

Exploit script for CVE-2020-24186 in WordPress that uploads a camouflaged PHP webshell and provides interactive or reverse shell access with optional…

exploitationpayload-generationpenetration-testing+4
1 year ago
Tomcat-CVE-2025-24813 preview

Tomcat-CVE-2025-24813

GitHubb1gn0se/tomcat-cve-2025-24813

Proof-of-concept exploit for Apache Tomcat CVE-2025-24813, demonstrating remote code execution via partial PUT and deserialization. Includes Docker…

exploitationpayload-generationpenetration-testing+4
1 year ago
WonderCMS-4.3.2-XSS-to-RCE-Exploits-CVE-2023-41425 preview

WonderCMS-4.3.2-XSS-to-RCE-Exploits-CVE-2023-41425

GitHub0xdtc/wondercms-4.3.2-xss-to-rce-exploits-cve-2023-41425

CVE-2023-41425 Refurbish

exploitationpayload-generationpenetration-testing+3
1 year ago
ZSC preview

ZSC

GitHubowasp/zsc

OWASP ZSC - Shellcode/Obfuscate Code Generator https://www.secologist.com/

encryption-decryption-toolsexploit-frameworkspayload-generation+5
6532 years ago
hershell preview

hershell

GitHublesnuages/hershell

Multiplatform reverse shell generator

command-and-controlencryption-decryption-toolsexploitation+6
5926 years ago
mcreator preview

mcreator

GitHubblacknbunny/mcreator

Encoded Reverse Shell Generator With Techniques To Bypass AV's

command-and-controlexploitationpayload-development+6
1446 years ago
cve-2023-42115 preview

cve-2023-42115

GitHubkirinse/cve-2023-42115

Python-based exploit and reverse shell payload generator for CVE-2023-42115, featuring scan and exploit modes with cross-platform payload creation.

exploitationpayload-developmentpayload-generation+3
92 years ago
Previous123Next