Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

7836 results

CVE-2026-80344

oscerd/cve-2026-80344

Runnable proof-of-concept reproducer for CVE-2026-80344 in Apache Camel camel-as2, demonstrating asynchronous MDN SSRF and credential disclosure with…

defensive-toolseducationexploitation+2

1 day ago

CVE-2026-85243

oscerd/cve-2026-85243

Runnable Spring Boot and Quarkus proof-of-concept for CVE-2026-85243, demonstrating the Apache Camel camel-crypto-pgp integrity-verification…

cryptographydefensive-toolseducation+4

0 days ago

openmeetings-backup-config-path

abraxas/openmeetings-backup-config-path

Apache OpenMeetings 9.1.0 - High - Remote - File write leftover - ADMIN_BACKUP import skips Path.of on Type.PATH

misconfigurationpapers-researchpenetration-testing+2

3 days ago

Flowise-RCE

k4m1diamond/flowise-rce

Proof-of-concept exploit code for CVE-2025-58434 and CVE-2025-59528, demonstrating remote code execution in Flowise.

exploitationpenetration-testingremote-access-trojan+2

6 months ago

openmeetings-cluster-openjpa

abraxas/openmeetings-cluster-openjpa

Apache OpenMeetings 9.1.0 - High - Remote - CWE-502 - clustering OpenJPA RemoteCommitProvider TCP 5636

exploitationlabs-practicevulnerability-analysis+1

3 days ago

openmeetings-nettest-ping-dos

abraxas/openmeetings-nettest-ping-dos

Apache OpenMeetings 9.1.0 - High - Remote - DoS leftover - unauth NetTest ping POST reads body to EOF

exploitationlabs-practicevulnerability-analysis+2

3 days ago

CVE-2026-79985

oscerd/cve-2026-79985

Reproducer and analysis for CVE-2026-79985, a path traversal in Apache Camel camel-smb where share-listing names bypass directory containment, with…

defensive-toolseducationexploitation+3

3 days ago

CVE-2026-79986

oscerd/cve-2026-79986

Reproducer and analysis for CVE-2026-79986, a path traversal in Apache Camel camel-azure-files where share listing names escape the polled directory.

cloud-securityeducationexploitation+3

3 days ago

pfsense-cp-filename-xss

abraxas/pfsense-cp-filename-xss

pfSense CE 2.9.0-DEVELOPMENT - Medium - Remote - XSS - CP filename stored XSS

exploitationpenetration-testingvulnerability-analysis+2

4 days ago

Analysis-And-POC-N8N-CVE-2025-68613

rianjuniorsf/analysis-and-poc-n8n-cve-2025-68613

Technical study of the CVE-2025-68613 vulnerability in n8n, covering affected versions, laboratory exploration scenario, offensive and defensive…

defensive-toolseducationexploitation+5

19 months ago

cakephp-collate-sqli

abraxas/cakephp-collate-sqli

CakePHP 5.4.2 - High - Remote - SQLi - COLLATE collation is a raw SQL fragment

database-securityexploitationpenetration-testing+4

8 days ago

cakephp-window-sqli

abraxas/cakephp-window-sqli

CakePHP 5.4.2 - High - Remote - SQLi - WindowExpression range/frame offsets spliced into SQL

code-analysisdatabase-securityexploitation+4

8 days ago

element-ics-javascript

abraxas/element-ics-javascript

Element Web v1.12.29 - High - Remote - XSS - Univention ICS navigation.json link becomes a javascript: menu href

exploitationpenetration-testingvulnerability-analysis+2

8 days ago

phpmyadmin-auth-plugin-unquoted

abraxas/phpmyadmin-auth-plugin-unquoted

phpMyAdmin 5.2.3 - High - Remote - SQLi - auth plugin identifier unquoted

database-securityexploitationpenetration-testing+4

8 days ago

exploit-js2py

rianjuniorsf/exploit-js2py

The CVE-2024-28397 vulnerability affects versions of js2py up to v0.74, a Python library that allows JavaScript code to be executed within the Python…

exploitationpayload-developmentpenetration-testing+3

110 months ago

Vulns

strik3r0x1/vulns

Collection of public proof-of-concept exploits for multiple CVEs, providing vulnerability demonstration code and references for security research and…

curated-resourcesexploitationpapers-research+2

511 months ago

CVE-2026-21589

0xblackash/cve-2026-21589

Technical analysis and detection guidance for CVE-2026-21589, a pre-auth path traversal arbitrary file access flaw in Atlassian Data Center products.

educationexploitationincident-response+7

12 days ago

CVE-2026-102489

horizon3ai/cve-2026-102489

Proof-of-concept exploit for CVE-2026-102489 in Zammad: chains a WebSocket session leak into authenticated session hijacking and unauthenticated…

exploitationpayload-developmentpost-exploitation+4

612 days ago

Previous12…100 Next