Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
55 results
CVE-2024-55963 preview

CVE-2024-55963

GitHubsuperswan/cve-2024-55963

CVE-2024-55963, allows unauthenticated remote code execution on Appsmith Enterprise platform due to a misconfigured PostgreSQL database included by…

database-securityexploitationmisconfiguration+5
2
1 year ago
PHP-CGI-RCE-Scanner preview

PHP-CGI-RCE-Scanner

GitHubywchen-ntust/php-cgi-rce-scanner

Scanning CVE-2024-4577 vulnerability with a url list.

educationexploitationinformation-gathering+3
111 months ago
CVE-2026-6271 preview

CVE-2026-6271

GitHubxxconi/cve-2026-6271

Automated scanner for CVE-2026-6271, a critical unauthenticated arbitrary file upload leading to RCE in the WordPress Career Section plugin. Supports…

educationexploitationpayload-generation+4
3 months ago
CVE-2026-2942 preview

CVE-2026-2942

GitHubxxconi/cve-2026-2942

Automated scanner for unauthenticated arbitrary file upload and remote code execution in ProSolution WP Client (CVE-2026-2942). Supports…

educationexploitationpayload-development+3
3 months ago
CVE-2025-55182-POC preview

CVE-2025-55182-POC

GitHubhuahuai23/cve-2025-55182-poc

Minimal MVP to reproduce React2Shell (CVE-2025-55182) and Next.js RSC RCE (CVE-2025-66478) vulnerabilities. Includes exploit payload, batch scanning…

educationexploitationpenetration-testing+3
18 months ago
CVE-2025-55182 preview

CVE-2025-55182

GitHubth-secforge/cve-2025-55182

Scans for CVE-2025-55182, a critical RCE in React Server Components, with safe-check mode, WAF bypass, and multi-target scanning.

educationexploitationpenetration-testing+3
8 months ago
cve-2021-42013 preview

cve-2021-42013

GitHubranasen-rat/cve-2021-42013

Python exploit script for Apache 2.4.50 CVE-2021-42013 path traversal and remote code execution, with bulk scanning and Docker lab for hands-on…

educationexploitationlabs-practice+3
7 months ago
CVE-2025-55182-mass preview

CVE-2025-55182-mass

GitHubhunter24x24/cve-2025-55182-mass

Command-line scanner for detecting and exploiting CVE-2025-55182 (RCE) in Next.js React Server Components. Supports batch scanning from domain lists…

educationexploitationpenetration-testing+2
8 months ago
NSE_CVE-2025-55182 preview

NSE_CVE-2025-55182

GitHubjahaziellem/nse_cve-2025-55182

Nmap NSE script for scanning React2Shell (CVE-2025-55182)

educationexploitationpayload-generation+5
18 months ago
CVE-2025-55182-Simple-Scanner-main preview

CVE-2025-55182-Simple-Scanner-main

GitHubjan0x190/cve-2025-55182-simple-scanner-main

Multi-language scanner for CVE-2025-55182 RCE in Next.js React Server Components, with single/mass scanning modes and integrated bug bounty…

educationexploitationpenetration-testing+4
18 months ago
cve-2021-42013 preview

cve-2021-42013

GitHubbananoname/cve-2021-42013

Python script to detect and exploit path traversal and remote code execution in Apache 2.4.50 (CVE-2021-42013), with bulk scanning and a Docker lab…

educationexploitationlabs-practice+3
12 years ago
CVE-2025-55182-Simple-Scanner preview

CVE-2025-55182-Simple-Scanner

GitHubsatriarizka/cve-2025-55182-simple-scanner

High-fidelity RCE scanner for CVE-2025-55182 affecting Next.js RSC. Supports mass scanning, command execution, and automated recon pipelines. Built…

command-and-controleducationexploitation+5
8 months ago
CVE-2022-44877 preview

CVE-2022-44877

GitHubdkstar11q/cve-2022-44877

Bash script to detect and exploit CVE-2022-44877 command injection vulnerability in CentOS Web Panel, supporting single URL scanning, exploitation,…

command-and-controleducationexploitation+3
3 years ago
CVE-2025-4380 preview

CVE-2025-4380

GitHubr0otk3r/cve-2025-4380

Python exploit for CVE-2025-4380, a Local File Inclusion vulnerability in the Ads Pro WordPress plugin. Supports single and mass target scanning with…

educationexploitationinformation-gathering+3
1 year ago
CVE-2024-34102 preview

CVE-2024-34102

GitHubkento-sec/cve-2024-34102

Go-based exploit for CVE-2024-34102, an XXE vulnerability in Adobe Commerce leading to remote code execution. Supports single and batch URL scanning…

educationexploitationpenetration-testing+2
1 year ago
POC-CVE-2025-55182 preview

POC-CVE-2025-55182

GitHubiamblacksolo2-bugbounty/poc-cve-2025-55182

Bash-based scanner for detecting and exploiting CVE-2025-55182 (React Server Components RCE) in Next.js applications. Supports custom command…

educationexploitationpenetration-testing+3
8 months ago
CVE-2025-29927__Next.js preview

CVE-2025-29927__Next.js

GitHubhujiaozhuzhu/cve-2025-29927__next.js

Automated proof-of-concept exploit for CVE-2025-29927, a Next.js middleware authorization bypass. Includes single-target and batch scanning, detailed…

educationexploitationlabs-practice+3
5 months ago
CVE-2024-27954 preview

CVE-2024-27954

GitHubr0otk3r/cve-2024-27954

Python-based scanner for CVE-2024-27954, a Local File Inclusion vulnerability in the WordPress wp-automatic plugin. Supports multithreaded scanning,…

educationexploitationinformation-gathering+3
1 year ago
Previous1234Next