Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
45 results
CVE-2026-76569 preview

CVE-2026-76569

GitHubtoanln-cov/cve-2026-76569

Reflected XSS via search GET Parameter in Phoca Download

exploitationpenetration-testingvulnerability-analysis+2
3 days ago
cve-2026-67363-67364 preview

cve-2026-67363-67364

GitHublulztigre/cve-2026-67363-67364

PoC and detection templates for pre-auth RCE and payment tampering in Balbooa Forms (Joomla), including Python exploit and Nuclei detection template.

exploitationpayload-developmentpenetration-testing+3
4 days ago
CVE-2026-74252 preview

CVE-2026-74252

GitHubtoanln-cov/cve-2026-74252

Stored XSS in J2Commerce Guest Checkout via Cookie Filter Bypass

exploitationvulnerability-analysisweb-application-exploitation+1
12 days ago
CVE-J2store-2026 preview

CVE-J2store-2026

GitHubmurrez/cve-j2store-2026

PoC for J2Store CVE-2026-67358–67362 (J2Commerce security advisory Aug 2026)

exploitationpenetration-testingvulnerability-analysis+2
13 days ago
CVE-2026-66804-CrossDevice-Service-EoP preview

CVE-2026-66804-CrossDevice-Service-EoP

GitHubrat5ak/cve-2026-66804-crossdevice-service-eop

CVE-2026-66804 Windows Cross Device virtual camera EoP - Standard user to SYSTEM

educationexploitationpenetration-testing+3
2421 days ago
CVE-2026-49048-JoomCCK-SQLi preview

CVE-2026-49048-JoomCCK-SQLi

GitHubkara-git/cve-2026-49048-joomcck-sqli

CVE-2026-49048 — JoomCCK 6.4.0 Unauthenticated SQL Injection (CVSS 9.8)

database-securityexploitationpenetration-testing+3
11 month ago
CVE-2026-57830 preview

CVE-2026-57830

GitHubis4yev/cve-2026-57830

Unauthenticated Arbitrary File/Folder Deletion in Joomla Helix Ultimate (JoomShaper) <= 2.2.6 — CVE-2026-57830

ctfeducationexploitation+4
31 month ago
CVE-2026-48908 preview

CVE-2026-48908

GitHubjenderal92/cve-2026-48908

CVE-2026-48908 — PoC exploit for unauthenticated RCE in SP Page Builder (Joomla) via arbitrary file upload. Multi‑threaded, case‑bypass, shell…

exploitationpayload-generationpenetration-testing+4
31 month ago
CVE-2026-48909 preview

CVE-2026-48909

GitHubis4yev/cve-2026-48909

Proof-of-concept exploit for CVE-2026-48909: unauthenticated remote code execution via PHP object injection in JoomShaper SP LMS. Includes detection,…

code-analysiseducationexploitation+4
231 month ago
thm-ice-icecast-rce-privesc preview

thm-ice-icecast-rce-privesc

GitHubmonseigneurpatas/thm-ice-icecast-rce-privesc

Full compromise of TryHackMe's Ice machine — Icecast 2.0.1 RCE (CVE-2004-1561) via buffer overflow, followed by Windows privilege escalation through…

binary-exploitationctfeducation+5
2 months ago
poc-CVE-2019-9053 preview

poc-CVE-2019-9053

GitHubrideckszz/poc-cve-2019-9053

PoC didático em Python 3 para a CVE-2019-9053, uma SQL Injection time-based blind no CMS Made Simple <= 2.2.9. Esta versão foi adaptada para uso em…

ctfeducationlabs-practice+3
12 months ago
analise-vulnerabilidades-zabbix-notebooklm preview

analise-vulnerabilidades-zabbix-notebooklm

GitHubrichjj98/analise-vulnerabilidades-zabbix-notebooklm

Caderno Temático NotebookLM: análise de vulnerabilidades SQL Injection (CVE-2024-42327, CVE-2026-23921) no Zabbix, com engenharia de prompts, cadeia…

educationpenetration-testingvulnerability-analysis+1
2 months ago
Scanner_CVE_OpenSSH preview

Scanner_CVE_OpenSSH

GitHuboseasfr/scanner_cve_openssh

Scanner para identificação de servidores com softwares SSH possivelmente vulnerável às CVEs CVE-2024-6387 e CVE-2023-48795.

information-gatheringnetwork-securitypenetration-testing+3
13 months ago
safe-check-CVE-2025-23419 preview

safe-check-CVE-2025-23419

GitHubharley-ghostie/safe-check-cve-2025-23419

Script em python scanner safe-check da CVE-2025-23419

configuration-auditingnetwork-securityvulnerability-analysis+2
4 months ago
CVE-2019-9511_Priority-Churn-Data-Dribble preview

CVE-2019-9511_Priority-Churn-Data-Dribble

GitHubharley-ghostie/cve-2019-9511_priority-churn-data-dribble

Lightweight HTTP/2 probes for controlled validation of CVE-2019-9511 (Data Dribble) and CVE-2019-9513 (Priority Churn) DoS vectors in authorized…

exploitationnetwork-securitypenetration-testing+2
4 months ago
Estudo-de-Caso-CVE-2024-21413 preview

Estudo-de-Caso-CVE-2024-21413

GitHubpedro-lucas-melo/estudo-de-caso-cve-2024-21413

Um estudo de caso do CVE-2024-21413. Usado como parâmetro a sala do TryHackMe Moniker Link (CVE-2024-21413). Feito edições com claude code no exploit.

ctfeducationemail-security+6
5 months ago
joomla.3.7.0exploit preview

joomla.3.7.0exploit

GitHubztrxwzy/joomla.3.7.0exploit

Proof of Concept exploit for the Joomla 3.7.0 com_fields SQL injection vulnerability (CVE-2017-8917), demonstrating detection, enumeration, and data…

ctfexploitationpenetration-testing+2
26 months ago
cve-2021-3156-sudo-lab preview

cve-2021-3156-sudo-lab

GitHubvilmartuminskii/cve-2021-3156-sudo-lab

Projeto educacional desenvolvido em Python com foco na análise da vulnerabilidade CVE-2021-3156 (Baron Samedit), uma falha crítica no sudo que…

educationexploitationpenetration-testing+3
8 months ago
Previous123Next