Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

897 results

CVE-2018-11788

brianwrf/cve-2018-11788

Apache Karaf XXE Vulnerability (CVE-2018-11788)

code-analysiseducationexploitation+3

377 years ago

cve-2022-42889

clickcyber/cve-2022-42889

cve-2022-42889 Text4Shell CVE-2022-42889 affects Apache Commons Text versions 1.5 through 1.9. It has been patched as of Commons Text version 1.10.

educationexploitationpapers-research+2

403 years ago

CVE-2018-16119

hdbreaker/cve-2018-16119

TP-Link TL-WR1043ND - Authenticated Remote Code Execution

educationembedded-systems-securityexploitation+6

161 year ago

R2C-CVE-2025-55182-66478

cybertechajju/r2c-cve-2025-55182-66478

🔥 React2Shell Toolkit - CVE-2025-55182 & CVE-2025-66478

command-and-controleducationexploitation+8

249 months ago

CVE-2022-22965_Spring_Core_RCE

wjl110/cve-2022-22965_spring_core_rce

CVE-2022-22965\Spring-Core-RCE堪比关于 Apache Log4j2核弹级别漏洞exp的rce一键利用

educationexploitationpayload-generation+3

174 years ago

CVE-2026-42779

dinosn/cve-2026-42779

Proof-of-concept demonstrating a deserialization filter bypass in Apache MINA leading to remote code execution, with detailed root cause analysis,…

educationexploitationpapers-research+2

115 months ago

Zimbra

jam620/zimbra

CVE-2022-27925

ctfeducationexploitation+3

84 years ago

CVE-2019-5475

exp-docs/cve-2019-5475

CVE-2019-5475 靶场： RCE 命令注入漏洞

educationexploitationlabs-practice+3

53 years ago

CVE-2023-25157

ivanesk315/cve-2023-25157

Local GeoServer/PostGIS lab reproducing OGC Filter SQL injection (CVE-2023-25157/25158) with vulnerable, patched, and mitigated A/B test modes.

database-securityeducationexploitation+6

19 days ago

CVE-2021-24145

dnr6419/cve-2021-24145

WordPress File Upload Vulnerability, Modern Events Calendar Lite WordPress plugin before 5.16.5

educationexploitationpayload-generation+3

34 years ago

CVE-2025-57833

sw0rd1ight/cve-2025-57833

Analysis and reproduction of CVE-2025-57833

database-securityeducationexploitation+3

610 months ago

CVE-2021-41773_CVE-2021-42013_Exploits

ofriouzan/cve-2021-41773_cve-2021-42013_exploits

Exploit CVE-2021-41773 and CVE-2021-42013

educationexploitationlabs-practice+3

43 years ago

Golang-CVE-2021-22205-POC

pizza-power/golang-cve-2021-22205-poc

A CVE-2021-22205 Gitlab RCE POC written in Golang

educationexploitationpayload-generation+3

34 years ago

CVE-2026-1207

sw0rd1ight/cve-2026-1207

Django 框架在使用 PostGIS 查询地理栅格（raster）数据时，若将未经验证的用户输入直接作为 band index（波段索引）参数，会引发 SQL 注入

educationexploitationpapers-research+2

35 months ago

CVE-2026-22738

rockmelodies/cve-2026-22738

SpEL Injection via Unescaped Filter Key in SimpleVectorStore Leads to Remote Code Execution

educationexploitationpayload-development+3

25 months ago

CVE-2026-59734-POC

cybertechajju/cve-2026-59734-poc

OS Command Injection in Health Check → Remote Code Execution

command-and-controleducationexploitation+4

2 months ago

CVE-2026-33937

eqstlab/cve-2026-33937

Handlebars.js AST Injection Remote Code Execution Vulnerability

educationexploitationlabs-practice+5

25 months ago

Apache-CVE-2021-41773

lheeeesoo/apache-cve-2021-41773

WHS 4기 이희수. kr-vulhub 과제 제출물

educationexploitationlabs-practice+3

2 months ago

Previous 1…464748…50 Next