Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
17 results
CVE-2026-42533 preview

CVE-2026-42533

GitHubimbas007/cve-2026-42533

Exploit for nginx heap buffer overflow (CVE-2026-42533) providing pre-auth RCE via two-pass capture clobbering. Includes info leak, heap spray, and…

binary-exploitationexploitationinformation-gathering+4
35
1 month ago
cve-2019-9081 preview

cve-2019-9081

GitHubscopion/cve-2019-9081

Exploit for CVE-2019-9081 with payload generation. Pass payload as parameter to trigger the vulnerability.

exploitationpayload-generationpenetration-testing+2
4 years ago
CVE-2024-21683-RCE preview

CVE-2024-21683-RCE

GitHubphucrio/cve-2024-21683-rce

Proof-of-concept exploit for CVE-2024-21683, a remote code execution vulnerability in Atlassian Confluence. Executes a JavaScript payload against…

exploitationpayload-generationpenetration-testing+2
12 years ago
CVE-2019-1698 preview

CVE-2019-1698

GitHubraytran54/cve-2019-1698

Step-by-step technical analysis of CVE-2019-1698, a WordPress plugin SQL injection vulnerability, with code diff review, vulnerable function…

code-analysiseducationpenetration-testing+2
2 years ago
AttackTomcat preview

AttackTomcat

GitHubtpt11fb/attacktomcat

Tomcat常见漏洞GUI利用工具。CVE-2017-12615 PUT文件上传漏洞、tomcat-pass-getshell 弱认证部署war包、弱口令爆破、CVE-2020-1938 Tomcat AJP文件读取/包含

exploitationinformation-gatheringpassword-attacks+3
2583 years ago
CVE-2026-35029-PoC preview

CVE-2026-35029-PoC

GitHublearner202649/cve-2026-35029-poc

The code for personally reproducing the corresponding vulnerability

data-exfiltrationeducationexploitation+4
3 months ago
CVE-2023-27372-PoC preview

CVE-2023-27372-PoC

GitHubredboltsec/cve-2023-27372-poc

This is a PoC for CVE-2023-27372 and spawns a fully interactive shell.

exploitationpayload-generationpenetration-testing+3
3 years ago
CVE-2019-19609-POC-Python preview

CVE-2019-19609-POC-Python

GitHubn000xy/cve-2019-19609-poc-python

Strapi Framework, 3.0.0-beta.17.4

exploitationpassword-attackspayload-generation+3
4 years ago
CVE-2018-6574-go-get-RCE preview

CVE-2018-6574-go-get-RCE

GitHubhasharmujahid/cve-2018-6574-go-get-rce

The issue is due to the fact that when installing a package, Golang will build native extensions. This can be used to pass additional flags to the…

educationexploitationpayload-development+2
4 years ago
CVE-2022-22978 preview

CVE-2022-22978

GitHubaeifkz/cve-2022-22978

CVE-2022-22978 POC Project

authentication-authorizationexploitationpenetration-testing+2
54 years ago
CVE-2023-24610 preview

CVE-2023-24610

GitHubabbisqq/cve-2023-24610

This is a proof of concept for CVE-2023-24610

command-and-controlexploitationpayload-generation+3
33 years ago
CVE-2025-29927 preview

CVE-2025-29927

GitHubtoddkk02/cve-2025-29927

Proof-of-concept exploit for CVE-2025-29927, demonstrating authentication bypass in Next.js middleware via the x-middleware-subrequest header, with…

authentication-authorizationctfids-ips-evasion+3
5 months ago
pocketbase-CVE-2026-44166 preview

pocketbase-CVE-2026-44166

GitHubalardiians/pocketbase-cve-2026-44166

Lab + writeup for CVE-2026-44166: PocketBase OAuth2 account pre-hijacking via unvalidated createData.email

authenticationctfeducation+5
2 months ago
PRTG-Network-Monitor-18.2.38---Authenticated-Remote-Code-Execution-CVE-2018-9276 preview

PRTG-Network-Monitor-18.2.38---Authenticated-Remote-Code-Execution-CVE-2018-9276

GitHubac8999/prtg-network-monitor-18.2.38---authenticated-remote-code-execution-cve-2018-9276

Python Exploit for CVE: 2018-9276

command-and-controlexploitationpayload-generation+3
5 months ago
CVE-2022-22947- preview

CVE-2022-22947-

GitHub0730nophone/cve-2022-22947-

Spring Cloud Gateway Actuator API SpEL表达式注入命令执行(CVE-2022-22947) 注入哥斯拉内存马

command-and-controlexploitationmemory-forensics+3
604 years ago
Some-Tools preview

Some-Tools

GitHubsom3canadian/some-tools

Some Pentest Tools. Install and keep up to date some pentesting tools. I used this to pass my OSCP exam.

educationexploitationpenetration-testing+4
655 years ago
h2csmuggler preview

h2csmuggler

GitHubbishopfox/h2csmuggler

HTTP Request Smuggling over HTTP/2 Cleartext (h2c)

ids-ips-evasionpenetration-testingvulnerability-analysis+2
8155 years ago