Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
299 results
CVE-2026-8206 preview

CVE-2026-8206

GitHubizxci/cve-2026-8206

CVE-2026-8206 Kirki Plugin Unauthenticated Account Takeover Exploit

authentication-authorizationexploitationpenetration-testing+2
2 months ago
CVE-2026-7459 preview

CVE-2026-7459

GitHubizxci/cve-2026-7459

CVE-2026-7459 Simple History Missing Authorization Account Takeover Exploit

authentication-authorizationexploitationpenetration-testing+2
2 months ago
velociraptor_CVE-2025-6264_PoC preview

velociraptor_CVE-2025-6264_PoC

GitHubmauzy0x00/velociraptor_cve-2025-6264_poc

Proof-of-concept exploit for CVE-2025-6264 in Velociraptor, demonstrating privilege escalation via missing permission checks to redirect clients to a…

command-and-controleducationexploitation+3
3 months ago
CVE-2026-5076 preview

CVE-2026-5076

GitHubzycoder0day/cve-2026-5076

Proof-of-concept exploit for CVE-2026-5076 demonstrating unauthenticated admin account takeover in ARMember Premium via SQL injection and plaintext…

authenticationexploitationpassword-attacks+3
2 months ago
CVE-2026-5076 preview

CVE-2026-5076

GitHubshootcannon/cve-2026-5076

ARMember Premium <= 7.3.1 Full Admin Account Takeover

exploitationinformation-gatheringpassword-attacks+3
2 months ago
2026-11551 preview

2026-11551

GitHubxxconi/2026-11551

CVE-2026-11551: Branda Plugin - Unauthenticated Privilege Escalation via Account Takeover

authenticationexploitationpenetration-testing+3
2 months ago
CVE-2026-10580 preview

CVE-2026-10580

GitHub0xgh057r3c0n/cve-2026-10580

PoC exploit for CVE-2026-10580 - Authentication Bypass in Hippoo Mobile App for WooCommerce <= 1.9.4 leading to Admin Account Takeover

authentication-authorizationeducationexploitation+4
1 month ago
CVE-2026-27886-PoC-Account-Takeover preview

CVE-2026-27886-PoC-Account-Takeover

GitHubthesw0rd/cve-2026-27886-poc-account-takeover

Account takeover full PoC for CVE-2026-27886 in Strapi CMS

exploitationinformation-gatheringpassword-attacks+4
22 months ago
CVE-2026-39912 preview

CVE-2026-39912

GitHubchocapikk/cve-2026-39912

Xboard / V2Board Unauth Account Takeover - Magic Link Token Leak (CVE-2026-39912)

authenticationexploitationinformation-gathering+4
24 months ago
By-Poloss..-..CVE-2026-10580 preview

By-Poloss..-..CVE-2026-10580

GitHubpolosss/by-poloss..-..cve-2026-10580

Hippoo Mobile App for WooCommerce <= 1.9.4 - Unauthenticated Authentication Bypass to Administrator Account Takeover

authenticationexploitationinformation-gathering+3
12 months ago
CVE-2026-2991 preview

CVE-2026-2991

GitHubjoshuavanderpoll/cve-2026-2991

PoC exploit for CVE-2026-2991 — authentication bypass in KiviCare WordPress plugin (≤4.1.2) allowing unauthenticated patient account takeover and…

authentication-authorizationexploitationpenetration-testing+3
25 months ago
CVE-2025-14783-POC preview

CVE-2025-14783-POC

GitHubzeroethical/cve-2025-14783-poc

🧨 CVE-2025-14783: Easy Digital Downloads Account Takeover PoC

educationexploitationpapers-research+4
27 months ago
CVE-2022-22845-Exploit preview

CVE-2022-22845-Exploit

GitHubomribaso/cve-2022-22845-exploit

Exploit for CVE-2022-22845 - Unauthenticated Admin Takeover On QXIP SIPCAPTURE Homer-App up to 1.4.27

authenticationexploitationpenetration-testing+2
24 years ago
CVE-2020-13259 preview

CVE-2020-13259

GitHuburielyochpaz/cve-2020-13259

PoC of Full Account Takeover on RAD SecFlow-1v

exploitationpenetration-testingred-teaming+2
33 years ago
magento2-session-reaper-patch preview

magento2-session-reaper-patch

GitHubwubinworks/magento2-session-reaper-patch

Patch for CVE-2025-54236(a.k.a Session Reaper) which allows customer account takeover and RCE under certain conditions. This patch is actually a…

authenticationexploitationvulnerability-analysis+2
39 months ago
CVE-2025-57819-FreePBX-RCE2Root preview

CVE-2025-57819-FreePBX-RCE2Root

GitHubozcanpng/cve-2025-57819-freepbx-rce2root

Full-chain CVE-2025-57819 PoC for FreePBX 15, 16, and 17: unauthenticated SQLi to RCE and root takeover.

exploitationpayload-developmentpenetration-testing+4
12 months ago
By-Poloss..-..CVE-2026-11551-PoC preview

By-Poloss..-..CVE-2026-11551-PoC

GitHubpolosss/by-poloss..-..cve-2026-11551-poc

Unauthenticated Privilege Escalation via Account Takeover

exploitationpassword-attackspenetration-testing+3
12 months ago
CVE-2025-15521 preview

CVE-2025-15521

GitHubnxploited/cve-2025-15521

The Academy LMS – WordPress LMS Plugin for Complete eLearning Solution plugin for WordPress is vulnerable to privilege escalation via account…

authenticationexploitationinformation-gathering+5
14 months ago
Previous1…345…17Next