Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
4277 results
NetSpecter preview

NetSpecter

GitHubmrhackercharlie/netspecter

Real-time system monitoring tool for detecting process activity and network exposure!

anomaly-detectiondefensive-toolseducation+4
2
6 months ago
ln-upgrade-dynamics preview

ln-upgrade-dynamics

GitHubbitcoindatalabs/ln-upgrade-dynamics

Code, aggregate data and LaTeX source for 'Who Patches the Lightning Network? Release Lines from Gossip, Node Platforms and Security Advisories,…

data-exfiltrationeducationnetwork-security+4
2 days ago
actual-php2shell preview

actual-php2shell

GitHubcookiengineer/actual-php2shell

🤖 NO, There is an easy way to exploit this vulnerability! (vibecoded to prove a point)

binary-exploitationcontainer-securityexploitation+5
171 day ago
php2shell-exposurehunt preview

php2shell-exposurehunt

GitHubdeathbydata/php2shell-exposurehunt

Repository for PHP2Shell exposure hunting and related analysis

configuration-auditingdefensive-toolsincident-response+4
1 day ago
php2shell-scanner preview

php2shell-scanner

GitHubassetnote/php2shell-scanner

High fidelity scanner for php2shell (CVE-2026-109618 and CVE-2026-109619)

defensive-toolspenetration-testingreconnaissance+4
1111 day ago
php2shell-bypass-aslr-exp preview

php2shell-bypass-aslr-exp

GitHub9bie/php2shell-bypass-aslr-exp

Pure-HTTP exploit achieving RCE on PHP 8.4.26 + Apache mod_php via session upload_progress heap leak, dangling pointer reuse, and ASLR bypass to call…

binary-exploitationexploitationmemory-forensics+4
6612 days ago
php2shell-checker preview

php2shell-checker

GitHubopenai/php2shell-checker

CLI that checks a website's PHP version or a local PHP binary against embedded patch cutoffs to determine php2shell vulnerability status, with JSON…

defensive-toolsinformation-gatheringvulnerability-analysis+3
6312 days ago
CVE-2026-85315 preview

CVE-2026-85315

GitHuboscerd/cve-2026-85315

Runnable proof-of-concept reproducer for CVE-2026-85315, demonstrating camel-grpc consumer exception message disclosure (CWE-209) in Camel Spring…

defensive-toolseducationinformation-gathering+2
2 days ago
php-cve-2026-10961x-lab-poc preview

php-cve-2026-10961x-lab-poc

GitHubdinosn/php-cve-2026-10961x-lab-poc

PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full…

binary-exploitationexploitationfuzzing+7
661 day ago
php2shell-scanner preview

php2shell-scanner

GitHubjoasasantos/php2shell-scanner

Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabbing,…

information-gatheringnetwork-mappingosint+7
692 days ago
proofs preview

proofs

GitHub4rdr/proofs

Collection of CVE findings, proof-of-concept references, and vulnerability research notes, including ExploitDB entries and credited security…

curated-resourcesexploitationinformation-gathering+4
1210 months ago
php2shell-poc preview

php2shell-poc

GitHubikow/php2shell-poc

CVE-2026-109618/109619 PHP session.upload_progress Exploit Research — POC & Analysis

exploitationlabs-practicememory-forensics+5
1342 days ago
ARTEX preview

ARTEX

GitHubtrhhubsd/artex

Multi-agent LLM system for autonomous penetration testing in isolated labs: planner/worker agents share asset and exploration graphs, with MITM…

ai-securityexploitationinformation-gathering+7
1.5k4 days ago
CVE-2026-85257 preview

CVE-2026-85257

GitHuboscerd/cve-2026-85257

Runnable Spring Boot and Quarkus reproducer for CVE-2026-85257, demonstrating camel-cxf SOAP fault information disclosure and verifying the…

defensive-toolseducationinformation-gathering+2
4 days ago
CVE-2026-106173 preview

CVE-2026-106173

GitHub0xblackash/cve-2026-106173

Documents CVE-2026-106173, a path traversal (CWE-22) in Fortinet FortiSIEM, with impact analysis, detection guidance, and mitigation steps for…

defensive-toolseducationincident-response+3
3 days ago
plex2shell_pcap preview

plex2shell_pcap

GitHubboredhackerblog/plex2shell_pcap

Packet capture artifacts of plex2shell exploitation against Plex, including lab and in-the-wild traffic, for building and validating detection…

exploitationincident-responsenetwork-forensics+3
6 days ago
CVE-2026-80344 preview

CVE-2026-80344

GitHuboscerd/cve-2026-80344

Runnable proof-of-concept reproducer for CVE-2026-80344 in Apache Camel camel-as2, demonstrating asynchronous MDN SSRF and credential disclosure with…

defensive-toolseducationexploitation+2
4 days ago
CVE-2026-84180 preview

CVE-2026-84180

GitHuboscerd/cve-2026-84180

Runnable Spring Boot and Quarkus reproducers for CVE-2026-84180, demonstrating camel-knative HTTP consumer exception leakage and verifying the…

defensive-toolseducationinformation-gathering+2
4 days ago
Previous12…100Next