Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk Forensics
Embedded Systems Security
General Purpose Utilities
Indicator of Compromise (IOC) Management
OSINT (Open Source Intelligence)
Packet Sniffing & Analysis
Password Cracking
Penetration Testing Frameworks
Phishing Tools
Privilege Escalation
Reconnaissance
Static Analysis
Vulnerability Scanners
Web Vulnerability Scanners
Wi-Fi Auditing
Bluetooth Security
Container Security
Dynamic Analysis (Sandboxing)
Encryption/Decryption Tools
Exploit Frameworks
Identity Management
iOS Security
IoT Security
Memory Forensics
Network Mapping
OSINT for Social Engineering
Password Attacks
Payload Generation
Persistence Mechanisms
Port Scanning
Static Code Analysis (SAST)
Threat Feeds & Aggregators
Vulnerability Analysis
Web Proxies & Interception
Code Analysis
DNS & Subdomain Enumeration
Dynamic Code Analysis (DAST)
Exploitation
Hash Analysis
IDS/IPS Evasion
Impersonation Tools
Lateral Movement
Mobile App Pentesting
Network Forensics
Reverse Engineering
RFID/NFC Tools
SCADA/ICS Security
Scripting & Automation
Serverless Security
Shellcode
Web Application Exploitation
API Security Testing
Configuration Auditing
Data Exfiltration
Debuggers
Forensics
Information Gathering
Mobile Forensics
Network Access Control
Post-Exploitation
Security Virtualization
Phishing
WAF Bypass
Web Security
Fuzzing
Network Security
Steganography
Wireless Security
Data Recovery
Malware Analysis
Digital Forensics
Hardware Hacking
Cryptography
CTF
Penetration Testing
Cloud Security
DevSecOps
Mobile Security
Privacy
Command and Control
Social Engineering
Hardware Security
Utilities & Frameworks
Hardware & IoT Security
Secret Detection
Binary Analysis
Threat Intelligence
Identity & Access Management (IAM)
Supply Chain Security
Authentication
Machine Learning
Intrusion Detection
Papers & Research
Misconfiguration
Subdomain Enumeration
Email Harvesting
Learning & Education
AI-Assisted Reversing
DNS Fuzzing
Red Teaming
Incident Response
Crawler
Curated Resources
Remote Access Tool
Shellcode Generation
Payload Development
Remote Access Trojan
API Security
Anti-Bot
Fingerprint Spoofing
CAPTCHA Bypass
Email Security
DNS Analysis
Chaos Engineering
Learning Paths & Courses
Container Escape
AI Security
Database Security
Firmware Analysis
Anomaly Detection
Log Analysis
Adversarial Attack
Binary Exploitation
Labs & Practice
NewestRelevanceMost popularRecently updated
306 results
CVE-2023-42326 preview

CVE-2023-42326

GitHubbl4ckarch/cve-2023-42326

This is a simple POC to for show the pfsense 2.7 Command injection Vulnerability ( CVE-2023-42326)

command-and-controlexploitationpayload-generation+3
41 year ago
reactshell preview

reactshell

GitHubh4r335hr/reactshell

Interactive shell client for React Server Components RCE exploitation via __proto__ pollution (CVE-2025-55182)

exploitationpayload-generationpenetration-testing+2
7 months ago
FiberBreak preview

FiberBreak

GitHubscumfrog/fiberbreak

React2Shell Exploitation Tool (CVE-2025-55182)

cloud-securitycommand-and-controldata-exfiltration+8
9 months ago
Cerberus-React2Shell-Scanner-Exploit preview

Cerberus-React2Shell-Scanner-Exploit

GitHubcerberusmrxi/cerberus-react2shell-scanner-exploit

Elite exploitation toolkit for CVE-2025-55182 (React Server Components RCE). Async polymorphic payloads, advanced WAF/CDN bypass, proxy rotation,…

command-and-controleducationexploit-frameworks+9
21 month ago
React2Shell preview

React2Shell

GitHub4nuxd/react2shell

R2S is a comprehensive exploitation and post-exploitation framework targeting the Next.js React Server Components vulnerability (CVE-2025-55182). It…

command-and-controlcontainer-escapedata-exfiltration+7
9 months ago
msmap preview

msmap

GitHubhosch3n/msmap

Modular memory webshell generator supporting Java containers (Tomcat, Spring, WebLogic) with multiple shell types, encoders, and automatic…

exploit-frameworkspayload-generationpenetration-testing+1
5833 years ago
CVE-2020-8958 preview
Archived

CVE-2020-8958

GitHubqurbat/cve-2020-8958

Proof of concept for arbitrary OS command execution on Guangzhou/V-SOL 1GE ONU devices (CVE-2020-8958)

embedded-systems-securityexploitationhardware-iot-security+3
75 years ago
CVE-2025-55183_POC preview

CVE-2025-55183_POC

GitHubx-cotang/cve-2025-55183_poc

CVE-2025-55183 POC

educationexploitationlabs-practice+2
49 months ago
Mini_httpd-CVE-2018-18778 preview

Mini_httpd-CVE-2018-18778

GitHubcyberharsh/mini_httpd-cve-2018-18778

PoC exploit for CVE-2018-18778: arbitrary file read in mini_httpd 1.29 via empty Host header, affecting IoT devices from Huawei, Zyxel, and others.

embedded-systems-securityexploitationfuzzing+3
6 years ago
CVE-2026-0257 preview

CVE-2026-0257

GitHub0xblackash/cve-2026-0257

CVE-2026-0257

authenticationexploitationpenetration-testing+3
33 months ago
MassExploit-CVE-2025-55182 preview

MassExploit-CVE-2025-55182

GitHubcirqueiradev/massexploit-cve-2025-55182

CVE-2025-55182 RCE - Massive Scanner POC

educationexploitationpenetration-testing+3
59 months ago
CVE-2025-55182 preview

CVE-2025-55182

GitHublucaspdiniz/cve-2025-55182

React2Shell Vulnerability

educationexploitationpayload-development+3
29 months ago
React2Shell-CVE-2025-55182 preview

React2Shell-CVE-2025-55182

GitHubchitoz1300/react2shell-cve-2025-55182

* React2Shell-CVE-2025-55182

container-escapeeducationexploitation+4
9 months ago
CVE-2017-8046 preview

CVE-2017-8046

GitHubbkhablenko/cve-2017-8046

Demonstrates exploitation of CVE-2017-8046 in a Spring Boot application, including a SpEL injection payload and dependency-check verification for…

code-analysiseducationpenetration-testing+3
8 years ago
CVE-2025-55182-React2Shell preview

CVE-2025-55182-React2Shell

GitHubrsch-io/cve-2025-55182-react2shell

React2Shell (CVE-2025-55182) proof-of-concept (PoC) exploit demonstrating a CRITICAL remote code execution (RCE) vulnerability in modern web…

educationexploitationpayload-generation+4
19 months ago
misfortune-cookie preview

misfortune-cookie

GitHubluel-4013/misfortune-cookie

Interactive PoC suite for CVE-2014-9222 (Misfortune Cookie) and related router exploits, featuring detection, auth bypass, DoS, and RCE modules with…

binary-exploitationembedded-systems-securityexploitation+6
21 days ago
PoC preview

PoC

GitHubmcw0/poc

Issues has been disabled for these PoC's, as they are simply PoC, Public Domain and unsupported.

binary-exploitationembedded-systems-securityexploitation+5
7823 years ago
React2Shell-CVE-2025-55182 preview

React2Shell-CVE-2025-55182

GitHubadityabhatt3010/react2shell-cve-2025-55182

React2Shell CVE-2025-55182: unauthenticated unsafe deserialization in React Server Components leading to reliable remote code execution via the…

code-analysisctfeducation+6
72 months ago
Previous12…17Next