Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
1576 results
CVE-2022-22965 preview

CVE-2022-22965

GitHubalt3kx/cve-2022-22965

Spring Framework RCE (CVE-2022-22965) Nmap (NSE) Checker (Non-Intrusive)

exploitationinformation-gatheringpenetration-testing+3
100
4 years ago
CVE-2024-40725-CVE-2024-40898 preview

CVE-2024-40725-CVE-2024-40898

GitHubtam-k592/cve-2024-40725-cve-2024-40898

CVE-2024-40725 and CVE-2024-40898, affecting Apache HTTP Server versions 2.4.0 through 2.4.61. These flaws pose significant risks to web servers…

exploitationinformation-gatheringpenetration-testing+3
872 years ago
exploit-CVE-2023-23752 preview

exploit-CVE-2023-23752

GitHubacceis/exploit-cve-2023-23752

Joomla! < 4.2.8 - Unauthenticated information disclosure

exploitationinformation-gatheringpenetration-testing+3
942 years ago
NextSploit preview

NextSploit

GitHubanonkryptiquz/nextsploit

NextSploit is a command-line tool designed to detect and exploit CVE-2025-29927, a security flaw in Next.js

authenticationexploitationinformation-gathering+3
921 year ago
CVE-2018-0296 preview

CVE-2018-0296

GitHubmilo2012/cve-2018-0296

Test CVE-2018-0296 and extract usernames

exploitationinformation-gatheringpenetration-testing+3
1077 years ago
jira-mobile-ssrf-exploit preview

jira-mobile-ssrf-exploit

GitHubassetnote/jira-mobile-ssrf-exploit

Exploit code for Jira Mobile Rest Plugin SSRF (CVE-2022-26135)

exploitationinformation-gatheringpenetration-testing+3
854 years ago
CVE-2023-2982 preview

CVE-2023-2982

GitHubrandomrobbiebf/cve-2023-2982

WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.6.4 - Authentication Bypass

authenticationexploitationinformation-gathering+3
813 years ago
Zin preview

Zin

GitHubethicalhackingplayground/zin

A Payload Injector for bugbounties written in go

information-gatheringpenetration-testingweb-application-exploitation
706 years ago
CVE-2026-34908-check preview

CVE-2026-34908-check

GitHubbishopfox/cve-2026-34908-check

Safely detect whether a UniFi OS Server is vulnerable to CVE-2026-34908

exploitationinformation-gatheringpenetration-testing+3
662 months ago
cve-2020-10977 preview

cve-2020-10977

GitHubthewhiteh4t/cve-2020-10977

GitLab 12.9.0 Arbitrary File Read

exploitationinformation-gatheringpenetration-testing+3
705 years ago
CVE-2026-42533 preview

CVE-2026-42533

GitHubimbas007/cve-2026-42533

Exploit for nginx heap buffer overflow (CVE-2026-42533) providing pre-auth RCE via two-pass capture clobbering. Includes info leak, heap spray, and…

binary-exploitationexploitationinformation-gathering+4
3425 days ago
dns-rebinding-tool preview

dns-rebinding-tool

GitHubh43z/dns-rebinding-tool

dns rebind tool with custom scripts

dns-analysisinformation-gatheringpenetration-testing+1
853 years ago
CVE-2024-23897 preview

CVE-2024-23897

GitHubbinganao/cve-2024-23897
exploitationinformation-gatheringpenetration-testing+2
992 years ago
CVE-2024-3400-RCE-Scan preview

CVE-2024-3400-RCE-Scan

GitHubw01fh4cker/cve-2024-3400-rce-scan

CVE-2024-3400-RCE

exploitationinformation-gatheringpenetration-testing+3
902 years ago
CVE-2024-7928 preview

CVE-2024-7928

GitHubbigb0x/cve-2024-7928

Will attempt to retrieve DB details for FastAdmin instances

exploitationinformation-gatheringpenetration-testing+3
672 years ago
CVE-2021-26855_PoC preview

CVE-2021-26855_PoC

GitHubalt3kx/cve-2021-26855_poc
exploitationinformation-gatheringpenetration-testing+3
535 years ago
PoC-CVE-2021-41773 preview

PoC-CVE-2021-41773

GitHubiilegacyyii/poc-cve-2021-41773
exploitationinformation-gatheringpenetration-testing+3
524 years ago
CVE-2020-1938-Tomact-file_include-file_read preview

CVE-2020-1938-Tomact-file_include-file_read

GitHubsv3nbeast/cve-2020-1938-tomact-file_include-file_read

Tomcat的文件包含及文件读取漏洞利用POC

exploitationinformation-gatheringpenetration-testing+2
556 years ago
Previous1…678…88Next