Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
1263 results
Prestashop-CVE-2024-34716 preview

Prestashop-CVE-2024-34716

GitHub0xdtc/prestashop-cve-2024-34716

Automates a CSRF attack against CVE-2024-34716 to deploy a PHP reverse shell on PrestaShop, with automated payload packaging and Netcat listener…

exploitationpayload-generationpenetration-testing+3
1
1 year ago
CVE-2020-14882_Exploit_Gui preview

CVE-2020-14882_Exploit_Gui

GitHubqianniaoge/cve-2020-14882_exploit_gui

GUI-based exploit tool for CVE-2020-14882 targeting Oracle WebLogic servers. Supports reverse shell payload generation, proxy configuration, and…

exploitationpayload-generationpenetration-testing+3
5 years ago
CVE-2017-11882 preview

CVE-2017-11882

GitHubtzwlhack/cve-2017-11882

Python-based exploit generator for CVE-2017-11882 (Microsoft Office Equation Editor vulnerability) with support for custom shellcode, mshta payloads,…

exploitationpayload-generationpenetration-testing+2
14 years ago
CVE-2022-22947 preview

CVE-2022-22947

GitHubkmahyyg/cve-2022-22947

Exploit for CVE-2022-22947 in Spring Cloud Gateway, enabling remote code execution via maliciously crafted requests with integrated Godzilla memshell…

exploitationpayload-generationshellcode+2
14 years ago
Cve-2022-30190 preview

Cve-2022-30190

GitHubmichealadams30/cve-2022-30190

Exploit implementation for CVE-2022-30190 (Microsoft Support Diagnostic Tool remote code execution vulnerability). Provides payload generation and…

exploitationpayload-generationpenetration-testing+2
13 years ago
CVE-2024-40457-PoC preview

CVE-2024-40457-PoC

GitHubjeppojeps/cve-2024-40457-poc

Proof-of-concept exploit for CVE-2024-40457 with payload generation support via command-line flags. Intended for security testing and vulnerability…

exploitationpayload-generationpenetration-testing+2
11 year ago
CVE-2009-2265 preview

CVE-2009-2265

GitHubh3x0v3rl0rd/cve-2009-2265

Exploit for CVE-2009-2265 targeting ColdFusion 8.0.1 with JSP reverse shell payload generation and automated upload.

exploitationpayload-generationpenetration-testing+2
11 year ago
CVE-2018-2628 preview

CVE-2018-2628

GitHubherantong/cve-2018-2628

Python-based exploit for CVE-2018-2628 targeting Oracle WebLogic Server, providing vulnerability detection and remote shell access via JSP payload…

exploitationpayload-generationpenetration-testing+3
19 months ago
CVE-2022-26134web preview

CVE-2022-26134web

GitHub1337in/cve-2022-26134web

CVE-2022-26134 web payload

exploitationpayload-generationpenetration-testing+2
14 years ago
CVE-2021-41773 preview

CVE-2021-41773

GitHubadrianmafandy/cve-2021-41773

Proof-of-concept exploit for CVE-2021-41773, a path traversal and remote code execution vulnerability in Apache HTTP Server 2.4.49. Automates…

exploitationpayload-generationpenetration-testing+3
111 months ago
CSRF-exploit-generator preview

CSRF-exploit-generator

GitHubjenderal92/csrf-exploit-generator

The CSRF Exploit Generator allows users to generate a CSRF exploit form with configurable parameters.

payload-generationpenetration-testingweb-application-exploitation+1
4 months ago
ghostcat preview

ghostcat

GitHubjptr218/ghostcat

Exploit tool for Apache Tomcat CVE-2020-1938 LFI vulnerability, enabling sensitive file reading and remote JSP payload execution via AJP connector.

exploitationpayload-generationvulnerability-analysis+2
15 years ago
CVE-2018-11770 preview

CVE-2018-11770

GitHubivanitlearning/cve-2018-11770

Python RCE exploit for Apache Spark rewritten from Metasploit module

exploitationpayload-generationpenetration-testing+3
16 years ago
CVE-2022-30190 preview

CVE-2022-30190

GitHubitmarcin2211/cve-2022-30190

Proof-of-concept exploit for CVE-2022-30190 (Follina) hosted on localhost, delivering a payload via a crafted Office document to demonstrate remote…

exploitationpayload-generationpenetration-testing+2
14 years ago
CVE-2025-23968 preview

CVE-2025-23968

GitHubd0n601/cve-2025-23968

Arbitrary File Upload in AI Bud – AI Content Generator, AI Chatbot, ChatGPT, Gemini, GPT-4o <= 1.8.4

exploitationpayload-generationpenetration-testing+2
111 months ago
CVE-2024-21683-RCE preview

CVE-2024-21683-RCE

GitHubphucrio/cve-2024-21683-rce

Proof-of-concept exploit for CVE-2024-21683, a remote code execution vulnerability in Atlassian Confluence. Executes a JavaScript payload against…

exploitationpayload-generationpenetration-testing+2
12 years ago
exploit-CVE-2020-24815 preview

exploit-CVE-2020-24815

GitHubdarkvirus-7x/exploit-cve-2020-24815

Proof-of-concept Python exploit for CVE-2020-24815 targeting a web application POST endpoint with cookie-based session handling and automated payload…

exploitationpayload-generationpenetration-testing+2
13 years ago
CVE-2022-30190 preview

CVE-2022-30190

GitHubalienkeric/cve-2022-30190

The script is from https://github.com/JohnHammond/msdt-follina, just make it simple for me to use it and this script aim at generating the payload…

exploitationpayload-generationpenetration-testing+2
12 years ago
Previous1…345…71Next