Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
2427 results
Assignement_3-CVE-2017-7269 preview

Assignement_3-CVE-2017-7269

GitHubkillian0713/assignement_3-cve-2017-7269

Educational exploit reproduction of CVE-2017-7269, a buffer overflow in IIS 6.0 WebDAV, with setup guide, vulnerability analysis, and Metasploit…

educationexploitationexploit-frameworks+4
9 months ago
CVE-2017-7269 preview

CVE-2017-7269

GitHubnika0x38/cve-2017-7269

A Rust implementation of the POC for CVE-2017-7269, targeting the WebDAV service in Microsoft Internet Information Services (IIS) 6.0.

educationexploitationpayload-development+3
11 year ago
CVE-2026-102425 preview

CVE-2026-102425

GitHubtonydelouvre/cve-2026-102425

GUI scanner and exploit for CVE-2026-102425, an unauthenticated RCE in Balbooa Forms (com_baforms) via PHP shortcode injection, with mass scanning…

exploitationpayload-developmentpenetration-testing+7
29 days ago
CVE-2017-7269 preview

CVE-2017-7269

GitHubal1ex/cve-2017-7269

Exploit for CVE-2017-7269, a buffer overflow in IIS 6.0 WebDAV, enabling remote code execution. Designed for use with Metasploit in penetration…

exploit-frameworkspenetration-testingremote-access-tool+2
118 years ago
CVE-2025-63419 preview

CVE-2025-63419

GitHubmmakingdom/cve-2025-63419

CrushFTP before 11.3.7_60 is vulnerable to HTML Injection. The Web-Based Server has a feature where users can share files, the feature reflects the…

educationpapers-researchvulnerability-analysis+2
214 days ago
Penetration-Testing-Assessment-23-04-2026 preview

Penetration-Testing-Assessment-23-04-2026

GitHubadmin2099/penetration-testing-assessment-23-04-2026

Penetration testing assessment of a vulnerable IIS 6.0 WebDAV server, demonstrating reconnaissance, enumeration, exploitation (CVE-2017-7269), and…

educationexploitationexploit-frameworks+9
4 months ago
CVE-2017-1000486 preview

CVE-2017-1000486

GitHubpimps/cve-2017-1000486

Primefaces <= 5.2.21, 5.3.8 or 6.0 - Remote Code Execution Exploit

exploitationpayload-generationpenetration-testing+3
953 years ago
goWAPT preview

goWAPT

GitHubdzonerzy/gowapt

Go Web Application Penetration Test

fuzzingpenetration-testingscripting-automation+4
3432 years ago
Claude-Red preview

Claude-Red

GitHubsnailsploit/claude-red

Curated library of 78 offensive security SKILL.md modules that prime Claude with expert red team methodology across web, AD, wireless, cloud, and…

ai-securitycurated-resourceseducation+8
9.9k18 days ago
xss-cheatsheet-data preview

xss-cheatsheet-data

GitHubportswigger/xss-cheatsheet-data

Community-contributed JSON dataset of XSS payload vectors powering the PortSwigger XSS cheat sheet, with browser support and interaction metadata.

curated-resourceseducationpayload-generation+4
4761 day ago
Shockwave-OSS preview

Shockwave-OSS

GitHubgal-nagli/shockwave-oss

Curated collection of bug bounty tips, one-liners, and automation workflows for recon, fuzzing, and web exploitation, with private nuclei templates…

curated-resourceseducationfuzzing+9
7492 years ago
One-Liner-Collections preview

One-Liner-Collections

GitHubcybertix-pvt-ltd/one-liner-collections

This Repositories contains list of One Liners with Descriptions and Installation requirements

curated-resourcesinformation-gatheringpenetration-testing+5
5091 year ago
img-payloads preview

img-payloads

GitHubcoffinxp/img-payloads

Curated collection of image-based payloads for authorized red-team testing and security education, with HTML examples for generating or embedding web…

curated-resourceseducationexploitation+3
1901 year ago
CVE preview

CVE

GitHubtomerpeled92/cve

Curated repository of CVEs with PoCs, articles, and detailed descriptions for vulnerability research and exploitation.

curated-resourcesexploitationlateral-movement+3
111 month ago
CVEs preview

CVEs

GitHubburaksevben/cves

Curated collection of proof-of-concept exploits for web vulnerabilities including cross-site scripting and SQL injection, with detailed technical…

curated-resourcesexploitationpapers-research+2
102 years ago
CVE-2026-Wordpress preview

CVE-2026-Wordpress

GitHubhorkimhab/cve-2026-wordpress

Educational CVE proof-of-concept collection targeting WordPress vulnerabilities, with setup scripts and lab guidance for authorized security research…

curated-resourceseducationexploitation+5
223 days ago
advisory preview

advisory

GitHubcarlosalbertotuma/advisory

Public security advisories and PoCs for vulnerabilities discovered in open-source web software, with root-cause analysis, CVE references,…

code-analysiscurated-resourceseducation+7
21 month ago
CVE-List preview

CVE-List

GitHubcylock11/cve-list

A collection of CVE exploits, including Python PoCs and README files with instructions for reproducing and exploiting each vulnerability.

curated-resourceseducationexploitation+4
1 month ago
Previous12…100Next