Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
7237 results
CVE-2022-30190 preview

CVE-2022-30190

GitHub2867a0/cve-2022-30190

Exploit artifact for CVE-2022-30190, targeting remote code execution in the Microsoft Support Diagnostic Tool (MSDT) through crafted Office documents.

command-and-controlexploitationpayload-generation+2
4 years ago
cve-2025-59532-poc preview

cve-2025-59532-poc

GitHubbaktistr/cve-2025-59532-poc

A Docker-based research environment for analyzing CVE-2025-59532, a path traversal vulnerability in OpenAI Codex CLI that allows arbitrary file write…

container-securityctfeducation+5
8 months ago
CVE-2019-15053 preview

CVE-2019-15053

GitHubl0nax/cve-2019-15053

Proof-of-concept exploit for a stored cross-site scripting (XSS) vulnerability in the HTML Include and Replace macro for Confluence Server, allowing…

exploitationpenetration-testingvulnerability-analysis+2
6 years ago
CVE-2023-31705 preview

CVE-2023-31705

GitHubd34dun1c02n/cve-2023-31705

Proof-of-concept for a reflected XSS vulnerability in Sourcecodester Task Reminder System 1.0, demonstrating authenticated remote code execution via…

exploitationpenetration-testingvulnerability-analysis+2
3 years ago
CVE-2021-2109 preview

CVE-2021-2109

GitHubdinosn/cve-2021-2109

Lightweight Python scanner for CVE-2021-2109 that checks target URLs for the specific vulnerability with minimal dependencies.

exploitationpenetration-testingreconnaissance+2
5 years ago
CVE-2024-6648 preview

CVE-2024-6648

GitHubn0d0n/cve-2024-6648

Nuclei template for CVE-2024-6648, an absolute path traversal vulnerability in the Prestashop ApPage Builder plugin. Enables automated detection and…

exploitationpenetration-testingvulnerability-scanners+2
1 year ago
CVE-2023-36158 preview

CVE-2023-36158

GitHubunknown00759/cve-2023-36158

Cross Site Scripting (XSS) vulnerability in sourcecodester Toll Tax Management System 1.0 allows remote attackers to run arbitrary code via the First…

exploitationpenetration-testingvulnerability-analysis+2
3 years ago
CVE-2025-53770 preview

CVE-2025-53770

GitHubrukshanaalikhan/cve-2025-53770

A critical zero-day vulnerability CVE‑2025‑53770 has been actively exploited in the wild against on-premises Microsoft SharePoint Server. Dubbed…

exploitationpenetration-testingred-teaming+2
1 year ago
Langflow-CVE-2025-3248-Multi-target preview

Langflow-CVE-2025-3248-Multi-target

GitHubill-deed/langflow-cve-2025-3248-multi-target

Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can…

code-analysisexploitationpenetration-testing+3
1 year ago
jetty_9.4.31_CVE-2023-26048 preview

jetty_9.4.31_CVE-2023-26048

GitHubtrinadh465/jetty_9.4.31_cve-2023-26048

Repository dedicated to the analysis and exploitation of CVE-2023-26048 in Jetty 9.4.31, providing vulnerability research and proof-of-concept code…

general-purpose-utilitiesvulnerability-analysisweb-application-exploitation+1
2 years ago
CVE-2017-5007 preview

CVE-2017-5007

GitHubang-yc/cve-2017-5007

Proof-of-concept exploit for CVE-2017-5007, demonstrating the vulnerability and its impact.

exploitationvulnerability-analysisweb-application-exploitation
7 years ago
sap_bo_launchpad-ssrf-timing_attack preview

sap_bo_launchpad-ssrf-timing_attack

GitHubmachadootto/sap_bo_launchpad-ssrf-timing_attack

This script exploits and performs an SSRF (Server-Side Request Forgery) and Timing Attack against the SAP BusinessObjects Launchpad (CVE-2020-6308).…

exploitationinformation-gatheringpenetration-testing+3
2 years ago
-create-a-vulnerable-Docker-environment-that-is-susceptible-to-CVE-2023-30212 preview

-create-a-vulnerable-Docker-environment-that-is-susceptible-to-CVE-2023-30212

GitHublibasmon/-create-a-vulnerable-docker-environment-that-is-susceptible-to-cve-2023-30212

Docker environment and exploit the CVE-2023-30212 vulnerabilityVE-2023-30212 is a security vulnerability that affects versions of OURPHP prior to or…

container-securityeducationexploitation+3
3 years ago
CVE-2023-29489 preview

CVE-2023-29489

GitHubcappricio-securities/cve-2023-29489

An issue was discovered in cPanel before 11.109.9999.116. Cross-Site Scripting can occur on the cpsrvd error page via an invalid webcall ID.

exploitationinformation-gatheringpenetration-testing+3
2 years ago
CVE-2024-1651-PoC preview

CVE-2024-1651-PoC

GitHubwhiteh4twolf/cve-2024-1651-poc

Proof-of-concept exploit for CVE-2024-1651, demonstrating insecure deserialization to achieve remote code execution. Provides a fast, easy-to-use…

exploitationpayload-developmentpenetration-testing+2
2 years ago
CVE-2020-14882 preview

CVE-2020-14882

GitHubalexfrancow/cve-2020-14882

Proof-of-concept exploit for CVE-2020-14882 in Oracle WebLogic Server, demonstrating remote code execution via crafted HTTP requests to the console…

command-and-controlexploitationpayload-generation+3
5 years ago
jetty_9.4.31_CVE-2021-34428 preview

jetty_9.4.31_CVE-2021-34428

GitHubtrinadh465/jetty_9.4.31_cve-2021-34428

Repository dedicated to CVE-2021-34428, a vulnerability in Jetty 9.4.31. Provides a patched or vulnerable version for analysis and testing of the…

general-purpose-utilitiesvulnerability-analysisweb-application-exploitation+1
2 years ago
CVE-2023-33408 preview

CVE-2023-33408

GitHubthirukrishnan/cve-2023-33408

Proof-of-concept demonstrating stored cross-site scripting (XSS) in Minical 1.0.0 via the Room Status edit note feature, with step-by-step…

exploitationpenetration-testingvulnerability-analysis+2
3 years ago
Previous1…99100Next