Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
341 results
CVE-2021-31856 preview

CVE-2021-31856

GitHubssst0n3/cve-2021-31856
code-analysisdatabase-securitypenetration-testing+2
5 years ago
CVE-2022-48197 preview

CVE-2022-48197

GitHubryan412/cve-2022-48197
information-gatheringpenetration-testingvulnerability-analysis+2
3 years ago
CVE-2021-44228-Demo preview

CVE-2021-44228-Demo

GitHubroticagas/cve-2021-44228-demo
educationexploitationlabs-practice+2
4 years ago
CVE-2024-50972 preview

CVE-2024-50972

GitHubakhlak2511/cve-2024-50972
database-securityexploitationinformation-gathering+3
1 year ago
CVE-2025-50365_CSRF_DELETE_CATEGORY-phpgurukul-CVE preview

CVE-2025-50365_CSRF_DELETE_CATEGORY-phpgurukul-CVE

GitHub1h3ll/cve-2025-50365_csrf_delete_category-phpgurukul-cve
ctfeducationexploitation+3
1 year ago
CVE-2025-50364_CSRF_ADD_CATEGORY-phpgurukul-CVE preview

CVE-2025-50364_CSRF_ADD_CATEGORY-phpgurukul-CVE

GitHub1h3ll/cve-2025-50364_csrf_add_category-phpgurukul-cve
exploitationpenetration-testingvulnerability-analysis+2
1 year ago
demo-cve-2022-21449 preview

demo-cve-2022-21449

GitHubvolodymyr-hladkyi-symphony/demo-cve-2022-21449
authenticationcryptographyeducation+3
1 year ago
CVE-2026-19650-CVE-2026-19478 preview

CVE-2026-19650-CVE-2026-19478

GitHubhorkimhab/cve-2026-19650-cve-2026-19478

Proof-of-concept exploit resources for CVE-2026-19650 and CVE-2026-19478 targeting a GitLab GraphQL vulnerability, intended for authorized research,…

api-securityeducationexploitation+4
3 days ago
CVE-2021-41773-Exploit-Lab preview

CVE-2021-41773-Exploit-Lab

GitHubsanr01/cve-2021-41773-exploit-lab

Reproduces CVE-2021-41773 path traversal in Apache HTTP Server 2.4.49, with PoC code, root-cause analysis, impact assessment, and mitigation guidance…

educationexploitationlabs-practice+4
6 days ago
CVE-RUBY preview

CVE-RUBY

GitHubhorkimhab/cve-ruby

Ruby 4.0 Universal RCE Deserialization Gadget Chain - Draft or TODO

educationexploitationpayload-development+3
6 days ago
cve-2025-55182-react2shell-analysis preview

cve-2025-55182-react2shell-analysis

GitHubaisha-jimoh/cve-2025-55182-react2shell-analysis

Technical analysis of CVE-2025-55182 (React2Shell), covering vulnerability mechanics, root cause, controlled PoC testing, impact, and mitigation…

educationexploitationvulnerability-analysis+2
8 days ago
DeliberatelyVulnerableWebApp preview
Archived

DeliberatelyVulnerableWebApp

GitHubtimothyjxhn/deliberatelyvulnerablewebapp

A Deliberately Vulnerable Web Application built on Struts 2 (CVE-2017-5638) and Log4J (CVE-2021-44228) for testing and demonstration of OWASP Top 10…

educationexploitationlabs-practice+3
1 year ago
cve-2025-6907 preview
Archived

cve-2025-6907

GitHubbytereaper77/cve-2025-6907

a standalone C-based SQL Injection exploit targeting the CVE‑2025‑6907 vulnerability in the CODE_PROJECT service.

exploitationinformation-gatheringpenetration-testing+3
11 year ago
SC3010-Computer-Security preview
Archived

SC3010-Computer-Security

GitHubaipeacs/sc3010-computer-security

Using Struts2 and PowerShell to recreate CVE-2017-5638 OGNL Injection vulnerability.

code-analysiseducationexploitation+6
3 months ago
0xsp-Mongoose preview
Archived

0xsp-Mongoose

GitHubzux0x3a/0xsp-mongoose

a unique framework for cybersecurity simulation and red teaming operations, windows auditing for newer vulnerabilities, misconfigurations and…

command-and-controldns-analysisexploitation+8
5344 years ago
naxsi preview
Archived

naxsi

GitHubnbs-system/naxsi

NAXSI is an open-source, high performance, low rules maintenance WAF for NGINX

api-securityids-ips-evasionvulnerability-scanners+3
4.8k2 years ago
vbscan preview
Archived

vbscan

GitHubowasp/vbscan

OWASP VBScan is a Black Box vBulletin Vulnerability Scanner

exploitationinformation-gatheringpenetration-testing+3
3267 years ago
Previous1…1819Next