Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

885 results

Havoc-C2-SSRF-to-RCE

sebr-dev/havoc-c2-ssrf-to-rce

This is a modified version of the CVE-2024-41570 SSRF PoC from @chebuya chained with the auth RCE exploit from @hyperreality. This exploit executes…

command-and-controlexploitationpenetration-testing+3

1 year ago

cve-2021-38314

phrantom/cve-2021-38314

Python exploit for CVE-2021-38314 targeting unauthenticated information disclosure in the Gutenberg Template Library & Redux Framework WordPress…

exploitationinformation-gatheringpenetration-testing+2

64 years ago

CVE-2019-2107

infiniteloopers/cve-2019-2107

Proof-of-concept exploit for CVE-2019-2107, demonstrating remote code execution via crafted HEVC video on Android media framework. Includes crash…

android-securitybinary-exploitationexploitation+4

47 years ago

ImageMagick-CVE-2017-15277

hexrom/imagemagick-cve-2017-15277

Proof-of-concept exploit for ImageMagick CVE-2017-15277 memory leak vulnerability, designed for use with the gifoeb fuzzing framework.

binary-analysisexploitationfuzzing+2

56 years ago

CVE-2019-16097

luckybool1020/cve-2019-16097

PoC exploit for CVE-2019-16097 targeting unauthorized admin creation in Harbor, built on the pocsuite framework for automated vulnerability…

exploitationpayload-generationpenetration-testing+2

23 years ago

CVE-2022-22965-Spring4Shell

kuri119/cve-2022-22965-spring4shell

Exploit for CVE-2022-22965 (Spring4Shell) enabling remote code execution on unpatched Spring Framework applications via crafted HTTP requests.

exploitationpayload-developmentpenetration-testing+2

2 months ago

CVE-2018-20062

yilin1203/cve-2018-20062

Exploit for CVE-2018-20062 targeting ThinkPHP 5.0.23, designed for vulnerability verification and penetration testing of web applications running the…

exploitationinformation-gatheringpenetration-testing+2

23 years ago

CVE-2019-11043

fairyming/cve-2019-11043

Proof-of-concept exploit for CVE-2019-11043, a PHP-FPM underflow vulnerability, built on the pocsuite framework for automated web application…

exploitationpayload-developmentpenetration-testing+2

16 years ago

Letta-CVE-2025-51482-RCE

kai-one001/letta-cve-2025-51482-rce

Proof-of-concept exploit for CVE-2025-51482, demonstrating remote code execution via unsafe exec() usage and sandbox bypass in the Letta AI agent…

code-analysisexploitationpenetration-testing+3

11 year ago

CVE-2018-15133-laravel-framework

flame-11/cve-2018-15133-laravel-framework

Reproducible Docker lab for CVE-2018-15133 (Laravel Framework token unserialize RCE) with a known APP_KEY and a /poc route for testing exploit…

container-securityeducationexploitation+3

8 months ago

CVE-2026-21627---Tassos-Novarain-Framework-plg_system_nrframework-Exploit---Joomla

yallasec/cve-2026-21627---tassos-novarain-framework-plg_system_nrframework-exploit---joomla

Python exploit for CVE-2026-21627, an unauthenticated arbitrary PHP file inclusion in Joomla's Novarain Framework, enabling file upload, delete, and…

exploitationpayload-developmentpenetration-testing+3

6 months ago

CVE-2024-46506

fufu-byte/cve-2024-46506

Standalone Python exploit for CVE-2024-46506, providing a lightweight, portable remote code execution module without requiring the Metasploit…

educationexploitationpenetration-testing+2

8 months ago

yamcs__yamcs_CVE-2023-45277_5-8-6

shoucheng3/yamcs__yamcs_cve-2023-45277_5-8-6

Java-based mission control framework with YAML configuration, supporting telemetry, commanding, and simulation for spacecraft operations. Includes…

configuration-auditingexploitationnetwork-security+3

1 year ago

CVE-2022-22965

c33dd/cve-2022-22965

C-based exploit for Spring4Shell (CVE-2022-22965) remote code execution vulnerability in Spring Core framework.

exploitationpayload-developmentpenetration-testing+2

3 years ago

G3_Frameworks_av_CVE-2024-0023

abrarkhan/g3_frameworks_av_cve-2024-0023

Proof-of-concept exploit for CVE-2024-0023 in Android's frameworks/av, implemented in C++ to demonstrate the media framework vulnerability.

android-securitybinary-exploitationembedded-systems-security+3

2 years ago

CVE-2017-8759_-SOAP_WSDL

homjxi0e/cve-2017-8759_-soap_wsdl

Proof-of-concept exploit for CVE-2017-8759, a remote code execution vulnerability in Microsoft .NET Framework via SOAP WSDL, with a Python-based web…

exploitationpayload-developmentpenetration-testing+2

8 years ago

frameworks_base_Aosp10_r33_CVE-2021-0315

pazhanivel07/frameworks_base_aosp10_r33_cve-2021-0315

Android framework base repository for AOSP 10 r33, containing a patch or exploit related to CVE-2021-0315.

android-securityexploitationvulnerability-analysis

4 years ago

apache__myfaces_CVE-2011-4367_2-0-11

shoucheng3/apache__myfaces_cve-2011-4367_2-0-11

Exploit for CVE-2011-4367 targeting Apache MyFaces JSF implementation, demonstrating a remote code execution vulnerability in the Jakarta Faces…

code-analysisstatic-analysisvulnerability-analysis+2

1 year ago

Previous 1…192021…50 Next