Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
1759 results
backcookie preview

backcookie

GitHubjofpin/backcookie

PHP backdoor that receives commands via HTTP cookie, providing remote shell access to compromised web servers with custom command support.

command-and-controlpayload-generationpenetration-testing+3
64
9 years ago
BurpSuite-Plugin preview

BurpSuite-Plugin

GitHubjas502n/burpsuite-plugin

JavaScript-based BurpSuite plugin for web application pentesting, providing custom scanning, exploitation, and analysis modules.

penetration-testing-frameworksvulnerability-analysisweb-application-exploitation+2
373 years ago
CVE-2023-22515_RCE preview

CVE-2023-22515_RCE

GitHubyoucannotseemeagain/cve-2023-22515_rce

Exploit for CVE-2023-22515 enabling remote code execution on Confluence servers via custom plugin upload after gaining admin access.

exploitationpayload-generationpenetration-testing+2
202 years ago
follina preview

follina

GitHubnoxtal/follina

Proof-of-concept exploit for CVE-2022-30190 (Follina) enabling remote code execution via Microsoft Support Diagnostic Tools in Office, with reverse…

command-and-controlexploitationpayload-generation+3
214 years ago
CVE-2026-41940-PoC-Exploit preview

CVE-2026-41940-PoC-Exploit

GitHubtc4dy/cve-2026-41940-poc-exploit

🚀 CVE-2026-41940 cPanel/WHM Auth Bypass Exploit - Best Flow 💥 CRLF injection leads to auth bypass, session hijacking & account leak. ✅ Proxy,…

authentication-authorizationcommand-and-controlexploitation+8
91 month ago
CVE-2015-6967 preview

CVE-2015-6967

GitHubdix0nym/cve-2015-6967

Python exploit script for CVE-2015-6967, enabling authenticated arbitrary file upload in Nibbleblog 4.0.3 with custom payload support.

exploitationpayload-generationpenetration-testing+2
155 years ago
CVE-2026-33017 preview

CVE-2026-33017

GitHubdynamo2k1/cve-2026-33017

PoC exploit for CVE-2026-33017: unauthenticated remote code execution in Langflow via malicious Python Custom Component injection, with built-in…

command-and-controlexploitationpayload-generation+4
1 month ago
CVE-2025-55182-React2Shell-RCE-Shell preview

CVE-2025-55182-React2Shell-RCE-Shell

GitHubm4xsec/cve-2025-55182-react2shell-rce-shell

Proof-of-concept RCE exploit for CVE-2025-55182 targeting Next.js apps. Features interactive shell prompt, batch scanning, custom command execution,…

exploitationpayload-generationpenetration-testing+3
88 months ago
CVE-2022-22947 preview

CVE-2022-22947

GitHubmrknow001/cve-2022-22947

Python-based exploit tool for CVE-2022-22947 (Spring Cloud Gateway SpEL injection). Supports single-target and batch scanning with custom command…

command-and-controlexploitationpayload-generation+3
74 years ago
CVE-2025-50165-x64-Exploit preview

CVE-2025-50165-x64-Exploit

GitHubencrypter15/cve-2025-50165-x64-exploit

Generates weaponized JPEG files exploiting CVE-2025-50165 (Windows Graphics RCE) with custom x64 shellcode, heap spray, ROP chain, and AV/EDR evasion…

binary-exploitationexploitationids-ips-evasion+5
78 months ago
Tomcat_PUT_GUI_EXP preview

Tomcat_PUT_GUI_EXP

GitHubxiaokp7/tomcat_put_gui_exp

Graphical exploit tool for CVE-2017-12615 (Tomcat PUT arbitrary file write) with vulnerability detection, command execution, and custom webshell…

exploitationpayload-generationpenetration-testing+3
113 years ago
Better-CVE-2022-29464 preview

Better-CVE-2022-29464

GitHubjimidk/better-cve-2022-29464

Proof-of-concept exploit for CVE-2022-29464 enabling unrestricted file upload and remote code execution on vulnerable WSO2 products, with a custom…

exploitationpayload-generationpenetration-testing+3
54 years ago
CVE-2026-29000-PoC-Exploit preview

CVE-2026-29000-PoC-Exploit

GitHubtc4dy/cve-2026-29000-poc-exploit

CVE-2026-29000 – pac4j-jwt Authentication Bypass (🔥 CVSS 10.0). One-click admin forge via public key JWE wrapping. Leaks configs, users, secrets.…

authentication-authorizationeducationexploitation+6
32 months ago
CVE-2025-55182-PoC preview

CVE-2025-55182-PoC

GitHubravindurathnayaka/cve-2025-55182-poc

React2Shell (CVE-2025-66478): A Python-based Proof of Concept for Critical Remote Code Execution (RCE) in Next.js Server Components. Features an…

educationexploitationpayload-generation+3
48 months ago
CVE-2024-24919 preview

CVE-2024-24919

GitHubgeniuszly/cve-2024-24919

Proof-of-concept exploit script for CVE-2024-24919 that scans target URLs via HTTP POST requests, analyzes responses for unauthorized access or data…

exploitationpayload-generationpenetration-testing+3
61 year ago
CVE-2026-13152 preview

CVE-2026-13152

GitHubminhhk68/cve-2026-13152

Proof-of-concept and advisory for an unauthenticated privilege escalation in a WooCommerce custom registration plugin, including root cause analysis,…

educationexploitationpenetration-testing+4
124 days ago
CVE-2025-13486-POC preview

CVE-2025-13486-POC

GitHub0xanis/cve-2025-13486-poc

PoC exploit for CVE-2025-13486, an unauthenticated RCE in the Advanced Custom Fields: Extended WordPress plugin. Verifies vulnerable targets and…

educationexploitationpayload-generation+3
58 months ago
CVE-2021-22204 preview

CVE-2021-22204

GitHubakash7350/cve-2021-22204

Generate malicious JPEG payloads exploiting ExifTool CVE-2021-22204 for arbitrary code execution, with custom commands or reverse shell support.

exploitationpayload-generationpenetration-testing+2
43 years ago
Previous123…98Next