Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
71 results
cve-2026-58138 preview

cve-2026-58138

GitHubseqra/cve-2026-58138

Reproduction kit for CVE-2026-58138, an unauthenticated RCE in Conductor. Includes OpenTaint static analysis rules, isolated tests, SARIF results,…

code-analysiseducationexploitation+5
3 months ago
CVE-2020-15227 preview

CVE-2020-15227

GitHubfilipsedivy/cve-2020-15227

Python-based checker for CVE-2020-15227 that tests Nette applications for remote code execution vulnerabilities via file_put_contents and shell_exec…

code-analysisexploitationstatic-analysis+2
15 years ago
CVE-2026-49079 preview

CVE-2026-49079

GitHubizxci/cve-2026-49079

SQL injection exploit for CVE-2026-49079 targeting JetSearch. Automates exploitation of the vulnerability to extract database contents during…

exploitationinformation-gatheringpenetration-testing+2
4 months ago
CVE-2026-0911 preview

CVE-2026-0911

GitHubmurrez/cve-2026-0911

Authenticated PoC for CVE-2026-0911: tests weak file upload and orphan file behavior in WordPress Hustle plugin's module import endpoint, with…

exploitationpayload-developmentpenetration-testing+3
16 months ago
MongoBleed-CVE-2025-14847-Fully-Automated-scanner preview

MongoBleed-CVE-2025-14847-Fully-Automated-scanner

GitHubcadgoose/mongobleed-cve-2025-14847-fully-automated-scanner

Full automation check for CVE-2025-14847 MonogBleed- Finds origin IP and tests for exploit.

exploitationinformation-gatheringreconnaissance+2
19 months ago
DAHUA_AUTH-BYPASS-CVE-2021-33044 preview

DAHUA_AUTH-BYPASS-CVE-2021-33044

GitHubeagle-nett/dahua_auth-bypass-cve-2021-33044

PoC exploit for Dahua authentication bypass (CVE-2021-33044). Scans subnets, tests multiple CVEs, and dumps device configs via crafted cookies…

authentication-authorizationeducationexploitation+4
16 months ago
CVE-2025-55182-checker preview

CVE-2025-55182-checker

GitHubharness-security-labs/cve-2025-55182-checker

Multi-technique vulnerability detector for CVE-2025-55182 in React/Next.js applications. Tests gadget chains, RCE payloads, and WAF bypass variants…

exploitationpayload-developmentpenetration-testing+3
110 months ago
CVE-2025-3248 preview

CVE-2025-3248

GitHubgraysignal/cve-2025-3248

Exploit scanner detecting unauthenticated code injection in Langflow's /api/v1/validate/code endpoint and executing arbitrary code for authorized…

exploitationpenetration-testingvulnerability-analysis+3
11 year ago
CVE-2023-36845 preview

CVE-2023-36845

GitHubsimrotion13/cve-2023-36845

Mass-check script for CVE-2023-36845 that scans IP lists and tests for remote file inclusion via PHP configuration injection.

exploitationinformation-gatheringreconnaissance+2
13 years ago
cisco-cve-2023-20198-checker preview

cisco-cve-2023-20198-checker

GitHubgustavorobertux/cisco-cve-2023-20198-checker

Go-based vulnerability scanner for detecting CVE-2023-20198 in Cisco IOS XE devices. Tests SOAP/XML interfaces (WSMA) for remote code execution with…

command-and-controlexploitationnetwork-security+3
7 months ago
mongobleedburp preview

mongobleedburp

GitHubj0lt-github/mongobleedburp

Burp Suite extension to detect CVE-2025-14847 (MongoBleed) via manual leak tests from a dedicated UI tab.

data-exfiltrationexploitationinformation-gathering+3
10 days ago
CVE-2022-22536_SAP_Request_Smuggling_Scanner preview

CVE-2022-22536_SAP_Request_Smuggling_Scanner

GitHubabrewer251/cve-2022-22536_sap_request_smuggling_scanner

Fast, socket-level scanner for detecting CVE-2022-22536 in SAP ICM or Web Dispatcher instances. Performs request smuggling tests with a crafted…

exploitationnetwork-securitypenetration-testing+3
0 years ago
CVE-2025-4606 preview

CVE-2025-4606

GitHubyetazyyy/cve-2025-4606

Python-based scanner that tests WordPress sites for CVE-2025-4606, a privilege escalation vulnerability in the Sala theme allowing unauthenticated…

educationexploitationpenetration-testing+3
7 months ago
fire-wall-server preview

fire-wall-server

GitHubnosie12/fire-wall-server

Python-based simulated firewall to detect and block Spring4Shell (CVE-2022-22965) exploit attempts. This project filters HTTP requests by identifying…

defensive-toolseducationintrusion-detection+3
1 year ago
cve-2023-1671 preview

cve-2023-1671

GitHubcsffs/cve-2023-1671

Python-based exploit for CVE-2023-1671 with test and exploitation functions. Tests vulnerability via DNS ping, then executes arbitrary commands on…

command-and-controleducationexploitation+3
3 years ago
CVE-2019-16759-bypass preview

CVE-2019-16759-bypass

GitHubpolar1s7/cve-2019-16759-bypass

Bypass exploit for CVE-2019-16759 targeting a specific web application vulnerability, enabling unauthorized access or privilege escalation during…

exploitationpenetration-testingred-teaming+2
6 years ago
CVE-2011-3368 preview

CVE-2011-3368

GitHubcolorblindpentester/cve-2011-3368

Proof-of-concept exploit scanner for CVE-2011-3368 (Apache mod_proxy reverse proxy vulnerability). Tests target systems for the flaw and provides…

exploitationpenetration-testingreconnaissance+2
7 years ago
-CVE-2024-6095 preview

-CVE-2024-6095

GitHubabdurahmon3236/-cve-2024-6095

Obfuscated CVE-2024-6095 exploit script that uses random strings, advanced payloads, custom headers, and randomized delays to evade detection during…

educationexploitationids-ips-evasion+3
2 years ago
Previous1234Next