Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

213 results

ProFTPD_CVE-2015-3306

0xm4ud/proftpd_cve-2015-3306

Exploit for ProFTPD 1.3.5 CVE-2015-3306 that writes a PHP backdoor to the target webroot and spawns a reverse shell for remote code execution.

exploitationpayload-generationremote-access-tool+2

5 years ago

Global-Protect_VPN_Vuln

p4rc3l/global-protect_vpn_vuln

Testing a List of IP address incase they are vulnerable to CVE-2024-3400

exploitationpenetration-testingreconnaissance+2

4 months ago

CVE-2025-49132-PoC

typicalsmc/cve-2025-49132-poc

Proof-of-concept exploit for CVE-2025-49132, a path traversal vulnerability in Pterodactyl panel. Forges session cookies using exposed Redis server…

educationexploitationpenetration-testing+2

6 months ago

CVE-2024-45590-PoC

evillm/cve-2024-45590-poc

Proof-of-concept exploit for CVE-2024-45590, demonstrating unauthenticated remote code execution in a WordPress plugin via arbitrary file upload.…

educationexploitationpayload-development+3

8 months ago

CVE-2020-23593

huzaifahussain98/cve-2020-23593

INFORMATION DISCLOSURE :CSRF to enable syslog mode and send to remote syslog server IP and Port.

exploitationinformation-gatheringnetwork-security+2

3 years ago

CVE-2022-42889

s3l33/cve-2022-42889

python script for CVE-2022-42889

exploitationpayload-generationpenetration-testing+2

33 years ago

CVE-2022-46169

0xn7y/cve-2022-46169

Exploit for CVE-2022-46169

authentication-authorizationcommand-and-controlexploitation+3

12 years ago

CVE-2025-12585

d0n601/cve-2025-12585

MxChat – AI Chatbot for WordPress <= 2.5.1 - Unauthenticated Information Exposure

data-exfiltrationinformation-gatheringvulnerability-analysis+1

11 months ago

CVE-2017-12149

1337g/cve-2017-12149

Python exploit for CVE-2017-12149 JBoss deserialization RCE that sends a crafted request to a target IP and port to achieve remote code execution.

exploitationpenetration-testingremote-access-tool+2

158 years ago

CVE-2021-44521

woodenklaas/cve-2021-44521

Automated proof-of-concept exploit for CVE-2021-44521, enabling remote code execution on Apache Cassandra via user-defined functions. Executes…

exploitationpenetration-testingremote-access-trojan+2

104 years ago

F5-Big-IP-CVE-2022-1388

vulnmachines/f5-big-ip-cve-2022-1388

CVE-2022-1388 F5 Big IP unauth remote code execution

exploitationpenetration-testingremote-access-tool+2

74 years ago

CVE-2023-48022

0x656565/cve-2023-48022

Exploit for CVE-2023-48022, adapted from Bishop Fox research. Configure IP, port, and payload to execute against vulnerable Ray instances.

exploitationpayload-developmentpenetration-testing+2

22 years ago

CVE-2023-46747

revoltsecurities/cve-2023-46747

An Exploitation script developed to exploit the CVE-2023-46747 which Pre Auth Remote Code Execution of f5-BIG Ip producs

exploitationpenetration-testingremote-access-tool+2

32 years ago

CVE-2021-22911

overgrowncarrot1/cve-2021-22911

Python exploit script for CVE-2021-22911 targeting Rocket.Chat admin password reset via unauthenticated user registration. Automates exploitation…

exploitationpenetration-testingred-teaming+2

3 years ago

BIG-IP-F5-TMUI-RCE-Vulnerability

ludy-dev/big-ip-f5-tmui-rce-vulnerability

(CVE-2020-5902) BIG IP F5 TMUI RCE Vulnerability RCE PoC/ Test Script

exploitationpenetration-testingred-teaming+2

5 years ago

CVE-2018-7600

anldori/cve-2018-7600

Python exploit for Drupal CVE-2018-7600 (Drupalgeddon2) remote code execution. Executes against a target IP to demonstrate the vulnerability.

exploitationpenetration-testingvulnerability-analysis+2

4 years ago

CVE-2023-33246

superzero/cve-2023-33246

Apache RocketMQ 远程代码执行漏洞(CVE-2023-33246) Exploit

exploitationpenetration-testingremote-access-tool+2

1133 years ago

CVE-2020-5902

dunderhay/cve-2020-5902

Python exploit script for CVE-2020-5902 (F5 BIG-IP) supporting local file read and remote code execution via crafted HTTP requests.

exploitationpenetration-testingred-teaming+2

362 years ago

Previous 1…345…12 Next