Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
226 results
nosqli-flintcms preview

nosqli-flintcms

GitHubnisaruj/nosqli-flintcms

Blind noSQL injection case study lab based on CVE-2018-3783

ctfdatabase-securityeducation+3
43 years ago
CVE-2018-7422 preview

CVE-2018-7422

GitHubndr-repo/cve-2018-7422

Exploit for CVE-2018-7422: Local File Inclusion in WordPress Plugin Site Editor 1.1.1 [T1574.008]

exploitationinformation-gatheringlabs-practice+3
11 year ago
prestashop-exploits preview

prestashop-exploits

GitHubambionics/prestashop-exploits

Collection of exploits/POC for PrestaShop cookie vulnerabilities (CVE-2018-13784)

exploitationpayload-generationpenetration-testing+2
508 years ago
ExploitVelotiSmart preview

ExploitVelotiSmart

GitHubs1kr10s/exploitvelotismart

Exploit module for VelotiSmart local file inclusion (CVE-2018-14064) that retrieves sensitive files from vulnerable web servers.

exploitationinformation-gatheringpenetration-testing+2
47 years ago
CVE-2018-11235-PoC preview

CVE-2018-11235-PoC

GitHubjongmartinez/cve-2018-11235-poc

PoC exploit for CVE-2018-11235 allowing RCE on git clone --recurse-submodules

exploitationpayload-developmentpenetration-testing+2
5 years ago
CVE-2018-5955 preview

CVE-2018-5955

GitHubmikethehash/cve-2018-5955

An exploit for CVE-2018-5955 GitStack 2.3.10 Unauthenticated RCE

educationexploitationpenetration-testing+3
101 year ago
CVE-2018-11776-Python-PoC preview

CVE-2018-11776-Python-PoC

GitHubhook-s3c/cve-2018-11776-python-poc

Working Python test and PoC for CVE-2018-11776, includes Docker lab

exploitationlabs-practicepayload-development+3
1238 years ago
CVE-2018-8174-msf preview

CVE-2018-8174-msf

GitHub0x09al/cve-2018-8174-msf

CVE-2018-8174 - VBScript memory corruption exploit.

exploitationexploit-frameworkspayload-generation+3
1678 years ago
adobe-flash-cve2018-15982 preview

adobe-flash-cve2018-15982

GitHubkphongagsorn/adobe-flash-cve2018-15982

Metasploit module and Python script to generate SWF payloads exploiting CVE-2018-15982, a use-after-free vulnerability in Adobe Flash Player enabling…

exploitationexploit-frameworkspayload-generation+2
116 years ago
ie11_vbscript_exploit preview

ie11_vbscript_exploit

GitHubruthlezs/ie11_vbscript_exploit

Exploit Generator for CVE-2018-8174 & CVE-2019-0768 (RCE via VBScript Execution in IE11)

exploitationexploit-frameworkspayload-generation+3
97 years ago
CVE-2018-9276 preview

CVE-2018-9276

GitHubalvinsmith-eroad/cve-2018-9276

CVE-2018-9276 PRTG < 18.2.39 Reverse Shell (Python3 support)

command-and-controlexploitationlateral-movement+4
5 years ago
CVE-2018-1000861 preview

CVE-2018-1000861

GitHubsmokeintheshell/cve-2018-1000861

CVE-2018-1000861 Exploit

command-and-controlexploitationpenetration-testing+3
3 years ago
Lab-for-cve-2018-15133 preview

Lab-for-cve-2018-15133

GitHubcr4zyd14m0nd137/lab-for-cve-2018-15133

Ejecución de exploit de deserialización con CVE-2017-5941

educationexploitationlabs-practice+3
3 years ago
CVE_2018_16763_Proof_of_Concept preview

CVE_2018_16763_Proof_of_Concept

GitHubsaccles/cve_2018_16763_proof_of_concept

A Proof-of-Concept (PoC) exploit for CVE-2018-16763 (Fuel CMS - Preauthenticated Remote Code Execution).

educationexploitationlabs-practice+3
1 year ago
CVE-2018-8174-msf preview

CVE-2018-8174-msf

GitHublikekabin/cve-2018-8174-msf

Metasploit module generating a malicious Word document to exploit CVE-2018-8174, a VBScript memory corruption vulnerability in Microsoft Office…

exploitationexploit-frameworkspayload-generation+3
8 years ago
CVE-2018-19131 preview

CVE-2018-19131

GitHubjonathanwilbur/cve-2018-19131

Proof-of-Concept exploit of CVE-2018-19131: Squid Proxy XSS via X.509 Certificate

exploitationvulnerability-analysisweb-application-exploitation+1
187 years ago
Drupalgeddon2 preview

Drupalgeddon2

GitHubdreadlocked/drupalgeddon2

Exploit for Drupal v7.x + v8.x (Drupalgeddon 2 / CVE-2018-7600 / SA-CORE-2018-002)

exploitationpayload-generationpenetration-testing+3
6015 years ago
CVE-2018-9276 preview

CVE-2018-9276

GitHubwildkindcc/cve-2018-9276

CVE-2018-9276 PRTG < 18.2.39 Authenticated Command Injection (Reverse Shell)

command-and-controlexploitationpayload-generation+3
365 years ago
Previous12…13Next