Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
67 results
gf preview

gf

GitHubtomnomnom/gf

A wrapper around grep, to help you grep for things

code-analysisdynamic-code-analysisgeneral-purpose-utilities+7
2.1k2 years ago
dockerCVE-2024-835 preview

dockerCVE-2024-835

GitHubmelmathari/dockercve-2024-835

Docker-based exploit for CVE-2024-835 vulnerability with automated deployment via docker-compose for penetration testing and security assessment.

container-securityexploitationpenetration-testing+2
11 months ago
CVE-2026-48206 preview

CVE-2026-48206

GitHuboscerd/cve-2026-48206

Proof-of-concept reproducing CVE-2026-48206 header injection in Apache Camel camel-jira, demonstrating authorization bypass via user-controlled…

api-security-testingeducationexploitation+3
1 month ago
CVE-2026-49042 preview

CVE-2026-49042

GitHuboscerd/cve-2026-49042

Reproducer for CVE-2026-49042: demonstrates prompt injection in Apache Camel's langchain4j-tools leading to RCE via unfiltered Exchange headers.…

ai-securitycode-analysiseducation+5
11 month ago
CVE-2026-49099 preview

CVE-2026-49099

GitHuboscerd/cve-2026-49099

Reproducer for CVE-2026-49099 demonstrating SOQL injection via HTTP header override in Apache Camel camel-salesforce, with mock Salesforce backend…

api-security-testingeducationexploitation+3
1 month ago
CVE-2026-53913 preview

CVE-2026-53913

GitHuboscerd/cve-2026-53913

PoC reproducer for CVE-2026-53913 demonstrating a fail-open authentication bypass in Apache Camel's camel-keycloak, leading to unauthenticated RCE…

authenticationcode-analysisexploitation+3
11 month ago
BurpSentinel preview

BurpSentinel

GitHubdobin/burpsentinel

GUI Burp Plugin to ease discovering of security holes in web applications

dynamic-code-analysispenetration-testingvulnerability-analysis+3
1539 years ago
exploit-CVE-2014-6271 preview

exploit-CVE-2014-6271

GitHubopsxcq/exploit-cve-2014-6271

Docker-based Shellshock (CVE-2014-6271) exploit environment with ready-to-use attack scripts for CGI, SSH, and DHCP vectors. Includes vulnerable Bash…

container-securityeducationexploitation+3
2318 years ago
x-stream__xstream_CVE-2021-21345_1-4-15 preview

x-stream__xstream_CVE-2021-21345_1-4-15

GitHubshoucheng3/x-stream__xstream_cve-2021-21345_1-4-15

Java XML serialization library with a focus on CVE-2021-21345 exploit analysis and deserialization vulnerability testing for web applications.

code-analysisdynamic-code-analysisexploitation+3
1 year ago
React2Shell preview

React2Shell

GitHubsubzer0x0/react2shell

Intentionally vulnerable Next.js lab for CVE-2025-55182 exploitation research. Docker-packaged environment for practicing web application security…

container-securityeducationlabs-practice+3
18 months ago
OwnCloud-CVE-2023-49103 preview

OwnCloud-CVE-2023-49103

GitHubmerlin-ke/owncloud-cve-2023-49103

Dockerized exploit for OwnCloud CVE-2023-49103, providing a ready-to-use container for testing and validating the vulnerability in web application…

container-securityexploitationpenetration-testing+2
12 years ago
horrors-log4shell preview

horrors-log4shell

GitHubtasooshi/horrors-log4shell

Micro lab for CVE-2021-44228 (Log4Shell) with automated multi-target exploitation, runtime payload generation, and adjustable bypasses for security…

exploitationlabs-practicepayload-generation+3
24 years ago
CVE-2026-46726 preview

CVE-2026-46726

GitHuboscerd/cve-2026-46726

Reproducer for CVE-2026-46726 demonstrating WebSocket header injection in Apache Camel camel-vertx-websocket enabling SSRF and property-placeholder…

api-securityexploitationpenetration-testing+3
1 month ago
CVE-2026-46592 preview

CVE-2026-46592

GitHuboscerd/cve-2026-46592

Reproducer for CVE-2026-46592 demonstrating SOAP operation redirection via operationName header injection in Apache Camel camel-cxf, enabling…

api-security-testingeducationexploitation+3
1 month ago
CVE-2026-46456 preview

CVE-2026-46456

GitHuboscerd/cve-2026-46456

Reproducer for CVE-2026-46456: Apache Camel camel-aws2-sqs inbound message-attribute header injection enabling downstream producer steering and RCE…

api-securitycloud-securityexploitation+3
29 days ago
CVE-2026-46455 preview

CVE-2026-46455

GitHuboscerd/cve-2026-46455

Reproducer for CVE-2026-46455 demonstrating Apache Camel camel-keycloak authentication bypass via missing TokenVerifier.IS_ACTIVE check, allowing…

authenticationcode-analysisexploitation+3
1 month ago
CVE-2025-55182 preview

CVE-2025-55182

GitHubmivmi/cve-2025-55182

Educational proof-of-concept exploit for CVE-2025-55182 targeting a React application, with Docker Compose environment for local testing and security…

container-securityeducationexploitation+3
18 months ago
CVE-2025-53770 preview

CVE-2025-53770

GitHubj4ck3lsyn-gen2/cve-2025-53770

Isolated research lab and proof-of-concept for validating a SharePoint deserialization vulnerability (CVE-2025-53770) with a Python exploit driver,…

container-securityeducationexploitation+5
15 months ago
Previous1234Next