Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
122 results
CVE-2026-71300 preview

CVE-2026-71300

GitHuboscerd/cve-2026-71300

Proof-of-concept reproducer for Apache Camel camel-atmosphere-websocket dispatch header injection (CVE-2026-71300), demonstrating how an injected…

educationexploitationpapers-research+2
8 days ago
CVE-2025-1913-PoC preview

CVE-2025-1913-PoC

GitHubs0haib518-ksa/cve-2025-1913-poc

A PoC demonstrating CVE-2025-1913, showing how the plugin’s unsafe unserialize handling can lead to high-impact behavior in controlled environments.…

educationexploitationlabs-practice+3
28 months ago
PHP-CGI-INTERNAL-RCE preview

PHP-CGI-INTERNAL-RCE

GitHubmananjain61/php-cgi-internal-rce

Delivering PHP RCE (CVE-2024-4577) to the Local Network Servers

dns-analysisexploitationpayload-development+3
1 year ago
WordPressMassExploiter preview

WordPressMassExploiter

GitHubparalelo14/wordpressmassexploiter

[discontinued] Mass exploiter of CVE-2015-1579 for WordPress CMS

crawlerexploitationinformation-gathering+3
308 years ago
CVE-2026-23947-PoC preview

CVE-2026-23947-PoC

GitHubboroeurnprach/cve-2026-23947-poc

Proof-of-concept demonstrating arbitrary code execution in Orval via malicious OpenAPI fields, with setup, exploit steps, and remediation guidance.

code-analysisexploitationsupply-chain-security+2
7 months ago
struts-uploader-vulnerability preview

struts-uploader-vulnerability

GitHubbaburkin/struts-uploader-vulnerability

Research of exploit options for CVE-2024-53667 and their remediation

educationexploitationlabs-practice+3
3 months ago
vuln-chain-lab preview

vuln-chain-lab

GitHubechosecure/vuln-chain-lab

PoC Docker lab: chaining file upload bypass + stored XSS to create admin accounts. Educational resource for pen testers.

ctfeducationlabs-practice+5
15 months ago
solar-exploiting-log4j preview

solar-exploiting-log4j

GitHublavanya2085/solar-exploiting-log4j

This repository provides a detailed walkthrough of the *Solar Exploiting Log4j room* on TryHackMe, focusing on exploiting the critical Log4Shell…

ctfeducationexploitation+4
5 months ago
gitlab-ssrf preview

gitlab-ssrf

GitHubcs4239-u6/gitlab-ssrf

Demonstration of CVE-2018-19571: GitLab SSRF CVE

command-and-controleducationexploitation+3
4 years ago
CVE-2022-46364-Proof-of-the-concept preview

CVE-2022-46364-Proof-of-the-concept

GitHubcybermaksx/cve-2022-46364-proof-of-the-concept

This vulnerability allows an attacker to perform SSRF (Server-Side Request Forgery) attacks on Apache CXF webservices that accept MTOM/XOP requests.…

educationexploitationinformation-gathering+3
35 months ago
CVE-2025-55182-React2Shell-RCE-POC preview

CVE-2025-55182-React2Shell-RCE-POC

GitHubrat5ak/cve-2025-55182-react2shell-rce-poc

This repository documents research into deserialization behavior within Next.js React Server Components (RSC) using the Flight protocol. It focuses…

code-analysiseducationexploitation+3
29 months ago
CVE-2023-4197 preview

CVE-2023-4197

GitHubalienkeric/cve-2023-4197

this is a simple script from CVE-2023-4197 that was little bit modified since because it didn't work at first time with broadlight machine from HTB…

educationexploitationpenetration-testing+2
2 years ago
CVE-2025-60378 preview

CVE-2025-60378

GitHubajansha/cve-2025-60378

Proof of concept for stored HTML injection in RISE CRM, demonstrating how authenticated users can inject malicious HTML into invoices and messages,…

educationexploitationphishing+3
10 months ago
CVE-2024-50848 preview

CVE-2024-50848

GitHub1mhr4b/cve-2024-50848

Proof-of-concept for an XXE vulnerability in WorldServer v11.8.2; demonstrates how a crafted .tmx file can leak system files and potentially execute…

exploitationinformation-gatheringpenetration-testing+2
1 year ago
CVE-2023-4966 preview

CVE-2023-4966

GitHubbyte4rr4y/cve-2023-4966

Programm to exploit a range of ip adresses

exploitationpenetration-testingreconnaissance+2
2 years ago
nowafpls preview

nowafpls

GitHubassetnote/nowafpls

Burp Plugin to Bypass WAFs through the insertion of Junk Data

ids-ips-evasionpenetration-testingred-teaming+3
1.5k1 year ago
CVE-2025-29927-PoC preview

CVE-2025-29927-PoC

GitHubalihussainzada/cve-2025-29927-poc

PoC for CVE-2025-29927: Next.js Middleware Bypass Vulnerability. Demonstrates how x-middleware-subrequest can bypass authentication checks. Includes…

authentication-authorizationexploitationpenetration-testing+3
51 year ago
Suricata-Rule-for-Detecting-CVE-2025-55182 preview

Suricata-Rule-for-Detecting-CVE-2025-55182

GitHubsolidevil14/suricata-rule-for-detecting-cve-2025-55182

CVE‑2025‑55182 Detection

exploitationids-ips-evasionintrusion-detection+3
8 months ago
Previous1234567Next