Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
63 results
CVE-2026-77647 preview

CVE-2026-77647

GitHubnxploited/cve-2026-77647

SPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code

exploitationpayload-generationpenetration-testing+5
2 days ago
CVE-2026-15989 preview

CVE-2026-15989

GitHubfl0ydsec/cve-2026-15989

Mass scanner and exploit for CVE-2026-15989, the unauthenticated privilege escalation in Super Forms <= 6.3.316 that creates administrator accounts…

exploitationpayload-generationpenetration-testing+6
26 days ago
watchTowr-vs-Citrix-Netscaler-CVE-2026-88772 preview

watchTowr-vs-Citrix-Netscaler-CVE-2026-88772

GitHubwatchtowrlabs/watchtowr-vs-citrix-netscaler-cve-2026-88772

Detection artifact generator for Citrix NetScaler CVE-2026-88772 that builds a DTLS pre-auth buffer overflow payload to verify remote code execution.

exploitationnetwork-securitypenetration-testing+3
111 month ago
CVE-2026-87930 preview

CVE-2026-87930

GitHubwinrarzipsexploit/cve-2026-87930

Joomla multi-CVE RCE suite with seven exploit modules for Balbooa Forms, Page Builder CK, SP Page Builder, JCE, iCagenda, Helix3, and SP LMS, plus…

exploitationpayload-generationpenetration-testing+7
11 month ago
CVE-2026-27540 preview

CVE-2026-27540

GitHubwinrarzipsexploit/cve-2026-27540

Python exploit suite for CVE-2026-27540, an unauthenticated file upload RCE in the WooCommerce Wholesale Lead Capture plugin, with fingerprinting,…

exploitationpayload-generationpenetration-testing+5
1 month ago
CVE-2026-12793 preview

CVE-2026-12793

GitHubrootxn/cve-2026-12793

Python PoC for CVE-2026-12793 in JetFormBuilder <= 3.6.2: unauthenticated privilege escalation leading to plugin upload and remote code execution,…

exploitationpayload-generationpenetration-testing+5
1 month ago
Exploit-CVE-2026-56705 preview

Exploit-CVE-2026-56705

GitHubchiefyoru/exploit-cve-2026-56705

CVE-2026-56705 — Adminer < 5.4.3 Unauthenticated RCE via MSSQL PDO DSN Injection

exploitationpayload-generationpenetration-testing+3
2 months ago
xss2shell preview

xss2shell

GitHub0xlipon/xss2shell

🔥 XSS2Shell — CVE-2026-64638 Scanner & PoC Toolkit

defensive-toolspayload-generationpenetration-testing+6
32 months ago
CVE-2026-49049 preview

CVE-2026-49049

GitHubjenderal92/cve-2026-49049

Mass vulnerability scanner for CVE-2026-49049 – Unauthenticated Remote Code Execution in Joomla Helix3 plugin. Multi‑threaded, detects both executed…

exploitationpayload-generationpenetration-testing+4
2 months ago
PageBuilderCK-CVE-2026-56290-Exploit preview

PageBuilderCK-CVE-2026-56290-Exploit

GitHubsagsooz/pagebuilderck-cve-2026-56290-exploit

Page Builder CK for Joomla - Unauthenticated SSRF / Remote File Write leading to PHP execution Exploiter

exploitationpayload-generationpenetration-testing+3
23 months ago
Joomla_CVE_2026_48907 preview

Joomla_CVE_2026_48907

GitHubalmavj/joomla_cve_2026_48907

cve-2026-48907 scanner

exploitationpayload-generationpenetration-testing+3
4 months ago
masta-cve-2026-48907 preview

masta-cve-2026-48907

GitHubgh1mau/masta-cve-2026-48907

Single-file Python scanner for CVE-2026-48907 (Joomla JCE Editor RCE). Detects Joomla/JCE, performs intrusive math-verified payload test, supports…

exploitationpayload-generationpenetration-testing+4
634 months ago
CVE-2025-55182-React2shell preview

CVE-2025-55182-React2shell

GitHubjenderal92/cve-2025-55182-react2shell

CVE-2025-55182 Exploit Tool – Python 2.7 exploit for Next.js prototype pollution leading to RCE

exploitationpayload-generationpenetration-testing+3
65 months ago
CVE-2026-44262 preview

CVE-2026-44262

GitHubjoshuavanderpoll/cve-2026-44262

Unauthenticated RCE in dedoc/scramble — PoC, Nmap NSE & Nuclei template.

command-and-controlexploitationpayload-development+5
35 months ago
CVE-2026-1306 preview

CVE-2026-1306

GitHubmurrez/cve-2026-1306

Multi-target PoC runner for CVE-2026-1306 in WordPress midi-Synth plugin: fetches nonce, sends export AJAX request to upload files, and verifies…

exploitationpayload-generationpenetration-testing+3
6 months ago
CVE-2025-55182-Auto-Scanner preview

CVE-2025-55182-Auto-Scanner

GitHubkaxm23/cve-2025-55182-auto-scanner

CVE-2025-55182 Auto Scanner - Improved Version For authorized CTF/testing purposes only

exploitationpayload-generationpenetration-testing+3
6 months ago
CVE-2026-0740 preview

CVE-2026-0740

GitHubxshadow-here/cve-2026-0740

Automated mass exploiter for CVE-2026-0740, an unauthenticated arbitrary file upload in Ninja Forms File Uploads plugin, enabling remote code…

exploitationpayload-generationpenetration-testing+3
36 months ago
CVE-2025-55182_RCE_Exploit preview

CVE-2025-55182_RCE_Exploit

GitHubnexxp90/cve-2025-55182_rce_exploit

REC Exploit is a Python-based security testing tool that automates detection of potential RCE conditions in web applications under authorized…

exploitationpayload-generationpenetration-testing+2
7 months ago
Previous1234Next