Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
213 results
log4j-shell-poc preview

log4j-shell-poc

GitHubjiahong-guan/log4j-shell-poc

A Proof-Of-Concept for the CVE-2021-44228 vulnerability.

exploitationpayload-developmentpayload-generation+3
1
2 months ago
ActiveMQ_CVE-2015-5254 preview

ActiveMQ_CVE-2015-5254

GitHubma1dong/activemq_cve-2015-5254

ActiveMQ_CVE-2015-5254

exploitationpayload-generationremote-access-tool+2
26 years ago
cve-2020-5902 preview

cve-2020-5902

GitHubr0ttenbeef/cve-2020-5902

cve-2020-5902 POC exploit

exploitationinformation-gatheringpenetration-testing+2
26 years ago
CVE-2022-1388-Exploit preview

CVE-2022-1388-Exploit

GitHubthatonesecguy/cve-2022-1388-exploit

Test and Exploit Scripts for CVE 2022-1388 (F5 Big-IP)

exploitationinformation-gatheringpenetration-testing+3
14 years ago
CVE-2022-1388 preview

CVE-2022-1388

GitHubsavior-only/cve-2022-1388

CVE-2022-1388 F5 BIG-IP iControl REST身份验证绕过漏洞

authentication-authorizationexploitationpenetration-testing+2
24 years ago
cve-2023-46747 preview

cve-2023-46747

GitHubvidura2/cve-2023-46747

Exploit script for CVE-2023-46747 (F5 BIG-IP TMUI RCE) enabling unauthenticated user creation, token retrieval, and remote command execution on…

exploitationpenetration-testingred-teaming+3
21 year ago
CVE-2024-0012-poc preview

CVE-2024-0012-poc

GitHubisee857/cve-2024-0012-poc

CVE-2024-0012批量检测脚本

exploitationpenetration-testingreconnaissance+2
21 year ago
CVE-2022-31793 preview

CVE-2022-31793

GitHubxpgdgit/cve-2022-31793

Proof-of-concept exploit for CVE-2022-31793 with IP/file-based target scanning, validation mode, and arbitrary file read via HTTP requests.

exploitationpenetration-testingreconnaissance+2
14 years ago
f5scan preview

f5scan

GitHubhalencarjunior/f5scan

CVE-2020-5902 scanner for F5 BIG-IP with Shodan host discovery, LFI file reading, and remote command execution capabilities.

exploitationinformation-gatheringreconnaissance+2
16 years ago
CVE-2024-25897 preview

CVE-2024-25897

GitHubi-100-user/cve-2024-25897

exploit que vulnera Jenkins hecho en Python

exploitationinformation-gatheringpenetration-testing+2
22 years ago
CVE-2022-1388 preview

CVE-2022-1388

GitHubevillizard666/cve-2022-1388

CVE-2022-1388 Scanner

exploitationinformation-gatheringreconnaissance+2
23 years ago
CVE-2020-5902 preview

CVE-2020-5902

GitHubhaisenberg/cve-2020-5902

Auto exploit RCE CVE-2020-5902

exploitationpenetration-testingreconnaissance+2
15 years ago
CVE-2022-1388 preview

CVE-2022-1388

GitHubnico989/cve-2022-1388

PoC for CVE-2022-1388 affecting F5 BIG-IP.

exploitationpenetration-testingreconnaissance+2
12 years ago
Camera-Dahua-Research-l-h-ng-CVE-2021-33044 preview

Camera-Dahua-Research-l-h-ng-CVE-2021-33044

GitHublitndat/camera-dahua-research-l-h-ng-cve-2021-33044

DAHUA_AUTH-BYPASS-CVE-2021-33044

authentication-authorizationeducationexploitation+5
3 months ago
DAHUA_AUTH-BYPASS-CVE-2021-33044 preview

DAHUA_AUTH-BYPASS-CVE-2021-33044

GitHubeagle-nett/dahua_auth-bypass-cve-2021-33044

PoC exploit for Dahua authentication bypass (CVE-2021-33044). Scans subnets, tests multiple CVEs, and dumps device configs via crafted cookies…

authentication-authorizationeducationexploitation+4
16 months ago
HTB-TwoMillion-Writeup preview

HTB-TwoMillion-Writeup

GitHubkarimelsheikh1/htb-twomillion-writeup

HackTheBox TwoMillion machine writeup — API abuse, command injection & CVE-2023-0386

command-and-controlctfeducation+8
5 months ago
Shocker-TJNULL-OSCP- preview

Shocker-TJNULL-OSCP-

GitHubr3fr4kt/shocker-tjnull-oscp-

Structured HTB walkthrough demonstrating Shellshock (CVE-2014-6271) exploitation via CGI directory fuzzing and privilege escalation through…

educationexploitationlabs-practice+6
4 months ago
CVE-2024-22120-RCE-with-gopher preview

CVE-2024-22120-RCE-with-gopher

GitHubdarkbytehunter/cve-2024-22120-rce-with-gopher

Proof-of-concept exploit for CVE-2024-22120 that leverages time-based SQL injection and gopher-based SSRF to achieve remote code execution on…

educationexploitationpenetration-testing+2
15 months ago
Previous1…9101112Next