Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
1759 results
Elementor-Pro-Unauthenticated-Arbitrary-File-Upload-to-RCE preview

Elementor-Pro-Unauthenticated-Arbitrary-File-Upload-to-RCE

GitHubabsholi7ly/elementor-pro-unauthenticated-arbitrary-file-upload-to-rce

CVE-2026-32475 The Elementor Pro Forms File Upload field handles validation and file processing in two separate loops with different handling of…

exploitationpayload-generationvulnerability-analysis+2
5
3 days ago
CVE-2025-55182-shellinteractive preview

CVE-2025-55182-shellinteractive

GitHubalyaapm/cve-2025-55182-shellinteractive

Interactive shell for exploiting CVE-2025-55182 in React Server Components, enabling remote command execution, file transfer, and vulnerability…

command-and-controlexploitationpayload-generation+4
6 days ago
CVE-2026-19501-poc preview

CVE-2026-19501-poc

GitHubtypedefabcd1234ntd/cve-2026-19501-poc

Proof-of-concept for unauthenticated CSV formula injection in SureForms, showing crafted form submissions trigger spreadsheet formulas when exported…

exploitationpayload-generationpenetration-testing+3
6 days ago
CVE-2025-69212-for-myself preview

CVE-2025-69212-for-myself

GitHubliaomilk/cve-2025-69212-for-myself

Proof-of-concept exploit for CVE-2025-69212 that authenticates to a URL with admin credentials and triggers a reverse shell to the specified attacker…

exploitationpayload-generationpenetration-testing+2
7 days ago
CVE-2026-13714 preview

CVE-2026-13714

GitHubkatransefa/cve-2026-13714

Unauthenticated RCE exploit for Realtyna WPL < 5.3.0 that uploads a PHP webshell via hardcoded API key and executes arbitrary system commands.

exploitationpayload-developmentpenetration-testing+2
7 days ago
CVE-2026-16723 preview

CVE-2026-16723

GitHubnowafen/cve-2026-16723

Exploit for Fastjson RCE (CVE-2026-16723) targeting versions 1.2.68 to 1.2.83. Generates JAR and JSON payloads, hosts HTTP server, and establishes…

exploitationpayload-generationpenetration-testing+2
28 days ago
mcpExec preview

mcpExec

GitHubdaemoncibsec/mcpexec

POC for CVE-2026-23744 for a python revshell

command-and-controlexploitationpayload-generation+3
9 days ago
CVE-2026-17544 preview

CVE-2026-17544

GitHubr2qa/cve-2026-17544

Exploit for CVE-2026-17544: PHP bcmath OOB write converted into memory-only RCE, bypassing disable_functions and open_basedir with a runtime…

binary-exploitationexploitationpayload-development+4
9 days ago
CVE-2026-9090-poc preview

CVE-2026-9090-poc

GitHubkimdir01/cve-2026-9090-poc

PoC for CVE-2026-9090 — Casdoor SAML signature bypass (CWE-347). Reproduction-only; coordinated via CERT/CC VU#780781.

authenticationexploitationpayload-generation+4
9 days ago
CVE-2026-50522 preview

CVE-2026-50522

GitHub4minx/cve-2026-50522

Python exploit for unauthenticated remote code execution in SharePoint Server via BinaryFormatter deserialization of SecurityContextToken cookies.

exploitationpayload-generationpenetration-testing+4
409 days ago
OpenSTA-Exploit preview

OpenSTA-Exploit

GitHublolw0/opensta-exploit

Proof of Concept (PoC) of CVE-2025-69212 related with P7M File Processing

exploitationpayload-generationpenetration-testing+2
10 days ago
the-sanitizer-is-the-weapon-cve-2026-68749-cve-2026-68750-quadratic-dos-in-elixir-html-sanitize-ex preview

the-sanitizer-is-the-weapon-cve-2026-68749-cve-2026-68750-quadratic-dos-in-elixir-html-sanitize-ex

GitHubhunt-benito/the-sanitizer-is-the-weapon-cve-2026-68749-cve-2026-68750-quadratic-dos-in-elixir-html-sanitize-ex

PoC demonstrating quadratic DoS in Elixir html_sanitize_ex via crafted HTML; includes timing benchmarks, remote exploitation curl, and verification…

adversarial-attackexploitationpayload-generation+3
11 days ago
CVE-2026-59827 preview

CVE-2026-59827

GitHubgutierre0x80/cve-2026-59827

Automated proof-of-concept exploit for the Metabase H2 unsafe deserialization vulnerability, executing arbitrary commands on target servers with…

exploitationpayload-developmentpayload-generation+3
112 days ago
POC preview

POC

GitHubgentleman567/poc

Repository of proof-of-concept exploit files for CVE-2026-42588, a Spring RCE vulnerability, including XML payloads for exploitation testing.

exploitationpayload-generationpenetration-testing+2
12 days ago
CVE-2025-5781 preview

CVE-2025-5781

GitHubjasonbernier/cve-2025-5781

Proof-of-concept exploit for CVE-2025-57819 in FreePBX: SQL injection in the AJAX API to execute arbitrary PHP, create a persistent webshell, and…

command-and-controlexploitationpayload-development+3
13 days ago
langflow-exploit preview

langflow-exploit

GitHubpreemware/langflow-exploit

PoC for CVE-2025-3248: unauthenticated RCE in Langflow < 1.3.0 via /api/v1/validate/code.

exploitationpayload-generationpenetration-testing+1
115 days ago
xss2shell preview

xss2shell

GitHub0xlipon/xss2shell

Behavior-first WordPress CVE-2026-64638 scanner using benign login probes; classifies sanitizer behavior and generates alert-only PoCs for authorized…

defensive-toolspayload-generationpenetration-testing+6
315 days ago
log4j-shell-poc preview

log4j-shell-poc

GitHubjiahong-guan/log4j-shell-poc

A Proof-Of-Concept for the CVE-2021-44228 vulnerability.

exploitationpayload-developmentpayload-generation+3
115 days ago
Previous12…98Next