Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
87 results
joniles__mpxj_CVE-2020-35460_8-3-4 preview

joniles__mpxj_CVE-2020-35460_8-3-4

GitHubshoucheng3/joniles__mpxj_cve-2020-35460_8-3-4

Exploit for CVE-2020-35460 targeting MPXJ project management library, enabling arbitrary code execution via crafted project files in Java, .Net, and…

code-analysisexploitationstatic-analysis+2
1 year ago
x-stream__xstream_CVE-2020-26217_1-4-14-java77 preview

x-stream__xstream_CVE-2020-26217_1-4-14-java77

GitHubshoucheng3/x-stream__xstream_cve-2020-26217_1-4-14-java77

Java library for XML serialization and deserialization, with a focus on the CVE-2020-26217 deserialization vulnerability exploit.

code-analysisdynamic-analysis-sandboxingexploitation+3
1 year ago
x-stream__xstream_CVE-2013-7285_1-4-6 preview

x-stream__xstream_CVE-2013-7285_1-4-6

GitHubshoucheng3/x-stream__xstream_cve-2013-7285_1-4-6

Java XML serialization library with a focus on the CVE-2013-7285 deserialization vulnerability, providing source code, binaries, and documentation…

code-analysisexploitationpenetration-testing+3
1 year ago
x-stream__xstream_CVE-2021-21345_1-4-15 preview

x-stream__xstream_CVE-2021-21345_1-4-15

GitHubshoucheng3/x-stream__xstream_cve-2021-21345_1-4-15

Java XML serialization library with a focus on CVE-2021-21345 exploit analysis and deserialization vulnerability testing for web applications.

code-analysisdynamic-code-analysisexploitation+3
1 year ago
ESAPI__esapi-java-legacy_CVE-2022-23457_2-2-3-1 preview

ESAPI__esapi-java-legacy_CVE-2022-23457_2-2-3-1

GitHubshoucheng3/esapi__esapi-java-legacy_cve-2022-23457_2-2-3-1

Enterprise Security API library providing security controls for Java web applications, including authentication, access control, input validation,…

api-securityauthentication-authorizationcode-analysis+6
1 year ago
ESAPI__esapi-java-legacy_CVE-2022-24891_2-2-3-1 preview

ESAPI__esapi-java-legacy_CVE-2022-24891_2-2-3-1

GitHubshoucheng3/esapi__esapi-java-legacy_cve-2022-24891_2-2-3-1

OWASP Enterprise Security API library providing security controls for Java web applications, including authentication, access control, input…

api-securityauthentication-authorizationcode-analysis+5
1 year ago
whitesource__curekit_CVE-2022-23082_1-1-3 preview

whitesource__curekit_CVE-2022-23082_1-1-3

GitHubshoucheng3/whitesource__curekit_cve-2022-23082_1-1-3

Java security library providing contextual encoders and sanitizers to automatically remediate vulnerabilities like XSS, path traversal, and command…

code-analysisdevsecopsencryption-decryption-tools+3
1 year ago
apache__sling-org-apache-sling-xss_CVE-2016-5394_1-0-8 preview

apache__sling-org-apache-sling-xss_CVE-2016-5394_1-0-8

GitHubshoucheng3/apache__sling-org-apache-sling-xss_cve-2016-5394_1-0-8

Java library providing XSS escaping and filtering services (XSSAPI, XSSFilter) to sanitize user-submitted content and prevent cross-site scripting…

api-securitycode-analysisstatic-analysis+2
1 year ago
OWASP__json-sanitizer_CVE-2020-13973_1-2-0 preview

OWASP__json-sanitizer_CVE-2020-13973_1-2-0

GitHubshoucheng3/owasp__json-sanitizer_cve-2020-13973_1-2-0

Java library that converts malformed JSON-like content into standards-compliant, safe JSON, preventing code injection and ensuring embeddability in…

code-analysisencryption-decryption-toolsgeneral-purpose-utilities+3
1 year ago
nahsra__antisamy_CVE-2017-14735_1-5-6 preview

nahsra__antisamy_CVE-2017-14735_1-5-6

GitHubshoucheng3/nahsra__antisamy_cve-2017-14735_1-5-6

Java library for fast, configurable HTML sanitization from untrusted sources. Uses policy-driven scanning to remove malicious JavaScript and CSS,…

api-securitycode-analysismisconfiguration+3
11 months ago
nahsra__antisamy_CVE-2022-29577_1-6-6-1 preview

nahsra__antisamy_CVE-2022-29577_1-6-6-1

GitHubshoucheng3/nahsra__antisamy_cve-2022-29577_1-6-6-1

Java library for fast, configurable cleansing of untrusted HTML to prevent cross-site scripting (XSS) attacks. Uses policy-driven scanning to…

code-analysisstatic-analysisvulnerability-analysis+1
11 months ago
codehaus-plexus__plexus-utils_CVE-2017-1000487_3-0-15 preview

codehaus-plexus__plexus-utils_CVE-2017-1000487_3-0-15

GitHubshoucheng3/codehaus-plexus__plexus-utils_cve-2017-1000487_3-0-15

Java utility library with a focus on a specific CVE vulnerability, providing code analysis and static analysis capabilities for security assessment.

code-analysisgeneral-purpose-utilitiesstatic-analysis+1
1 year ago
xwiki__xwiki-commons_CVE-2023-31126_14-10-3 preview

xwiki__xwiki-commons_CVE-2023-31126_14-10-3

GitHubshoucheng3/xwiki__xwiki-commons_cve-2023-31126_14-10-3

Java library providing technical commons for XWiki projects, with a focus on vulnerability analysis and static code inspection for security testing.

code-analysisgeneral-purpose-utilitiesstatic-analysis+1
1 year ago
xwiki__xwiki-commons_CVE-2023-36471_14-10-5 preview

xwiki__xwiki-commons_CVE-2023-36471_14-10-5

GitHubshoucheng3/xwiki__xwiki-commons_cve-2023-36471_14-10-5

Technical Java libraries providing common utilities and components for the XWiki platform, including security vulnerability fixes and code analysis…

code-analysisgeneral-purpose-utilitiesstatic-analysis+1
1 year ago
hapifhir__org_hl7_fhir_core_CVE-2023-28465_5-6-1055 preview

hapifhir__org_hl7_fhir_core_CVE-2023-28465_5-6-1055

GitHubshoucheng3/hapifhir__org_hl7_fhir_core_cve-2023-28465_5-6-1055

Java core library for FHIR specification with validator, version converters, and object models for R2 through R5, used in HAPI servers and HL7…

api-securitycode-analysiseducation+3
1 year ago
XStream-1 preview

XStream-1

GitHubepicosy/xstream-1

Java library for XML serialization and deserialization, with a focus on CVE-2020-26217 exploitation. Enables converting Java objects to XML and back,…

code-analysisexploitationstatic-analysis+2
2 years ago
CVE-2015-10034 preview

CVE-2015-10034

GitHubandrenasx/cve-2015-10034

Demonstrates CVE-2015-10034 in a vulnerable Java application, including SARIF analysis results from J-TAS Action for educational security testing.

code-analysiseducationstatic-analysis+2
3 years ago
fastjson-CVE-2022-25845 preview

fastjson-CVE-2022-25845

GitHubcuijiung/fastjson-cve-2022-25845

Exploit for CVE-2022-25845 targeting FastJSON deserialization vulnerability in Java applications. Enables remote code execution via crafted JSON…

code-analysisexploitationstatic-analysis+2
1 year ago
Previous12345Next