Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
1855 results
CVE-2024-38819 preview

CVE-2024-38819

GitHubghosts3c/cve-2024-38819

CVE-2024-38819 nuclei template

exploitationpenetration-testingvulnerability-analysis+2
31 year ago
CVE-2021-41773 preview

CVE-2021-41773

GitHubsoliux/cve-2021-41773

On the 11/11/21 the apache 2.4.49-2.4.50 remote command execution POC has been published online and this is a loader so that you can mass exploit…

exploitationpenetration-testingremote-access-tool+2
24 years ago
strutszeiro preview

strutszeiro

GitHubbtamburi/strutszeiro

Telegram Bot to manage botnets created with struts vulnerability(CVE-2017-5638)

command-and-controlexploitationremote-access-tool+2
9 years ago
CVE-2026-3844 preview

CVE-2026-3844

GitHub0xgh057r3c0n/cve-2026-3844

WordPress - Breeze Cache <= 2.4.4 - Unauthenticated Arbitrary File Upload

exploitationpenetration-testingvulnerability-scanners+2
16 months ago
CVE-2025-31324-File-Upload preview

CVE-2025-31324-File-Upload

GitHubnullcult/cve-2025-31324-file-upload

A totally unauthenticated file-upload endpoint in Visual Composer lets anyone drop arbitrary files (e.g., a JSP web-shell) onto the server.

exploitationpenetration-testingred-teaming+2
21 year ago
CVE-2025-55182-TOOLS preview

CVE-2025-55182-TOOLS

GitHubmingyisecurity-lab/cve-2025-55182-tools

A Comprehensive CVE-2025-55182 Detection and Security Assessment Tool

exploitationpenetration-testingremote-access-tool+3
211 months ago
CVE-2024-24919-Exploit-PoC-Checkpoint-Firewall-VPN preview

CVE-2024-24919-Exploit-PoC-Checkpoint-Firewall-VPN

GitHubr4p3c4/cve-2024-24919-exploit-poc-checkpoint-firewall-vpn

Herramienta de explotación para explotar la vulnerabilidad CVE-2024-24919 en las VPN de Checkpoint Firewall

exploitationpenetration-testingred-teaming+3
22 years ago
CVE-2020-12077 preview

CVE-2020-12077

GitHubrandomrobbiebf/cve-2020-12077

MapPress Maps Pro < 2.53.9 - Remote Code Execution (RCE) due to Incorrect Access Control in AJAX Actions

code-analysisexploitationmisconfiguration+3
13 years ago
confluence-cve-2023-22515 preview

confluence-cve-2023-22515

GitHubvulnmachines/confluence-cve-2023-22515

Confluence Broken Access Control

exploitationmisconfigurationpenetration-testing+2
33 years ago
ProxySqlMap preview

ProxySqlMap

GitHubianxtianxt/proxysqlmap

From Proxy to SqlMapApi

penetration-testingvulnerability-scannersweb-application-exploitation+2
16 years ago
CVE-2026-41472-POC preview

CVE-2026-41472-POC

GitHubwhiteov3rflow/cve-2026-41472-poc

CyberPanel v2.4.3 XSS Chain to RCE CVE-2026-41472

exploitationpenetration-testingvulnerability-analysis+1
3 months ago
CVE-2026-3844 preview

CVE-2026-3844

GitHubim-hanzou/cve-2026-3844

Breeze Cache WordPress <=2.4.4 allows unauthenticated file upload via fetch_gravatar_from_remote when local gravatar hosting is enabled.

exploitationpenetration-testingred-teaming+2
6 months ago
CVE-2018-8033 preview

CVE-2018-8033

GitHubcappricio-securities/cve-2018-8033

Apache OFBiz 16.11.04 is susceptible to XML external entity injection (XXE injection)

exploitationpenetration-testingvulnerability-scanners+2
22 years ago
CVE-2026-11387 preview

CVE-2026-11387

GitHub1beelze/cve-2026-11387

Exploits unauthenticated privilege escalation in SMS Alert WooCommerce plugin (CVE-2026-11387) via OTP bypass and arbitrary password reset, with…

authenticationexploitationpassword-attacks+4
14 months ago
WP-CVE-2023-2732 preview

WP-CVE-2023-2732

GitHubjenderal92/wp-cve-2023-2732

Python 2.7

exploitationpenetration-testingvulnerability-scanners+2
5 months ago
By-Poloss..-..CVE-2026-12432-PoC preview

By-Poloss..-..CVE-2026-12432-PoC

GitHubpolosss/by-poloss..-..cve-2026-12432-poc

WP Full Stripe Free <= 8.4.3 - Missing Authorization

exploitationmisconfigurationpenetration-testing+3
14 months ago
nmap-CVE-2023-35078-Exploit preview

nmap-CVE-2023-35078-Exploit

GitHubemanueldosreis/nmap-cve-2023-35078-exploit

Nmap script to exploit CVE-2023-35078 - Mobile Iron Core

exploitationnetwork-securitypenetration-testing+3
13 years ago
CVE-2026-14483 preview

CVE-2026-14483

GitHubmadexploits/cve-2026-14483

CVE-2026-14483 POC EXPLOIT BY MADEXPLOITS

exploitationpayload-developmentpenetration-testing+3
3 months ago
Previous1…99100Next