Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

17 results

CVE-2026-73570

jishino567/cve-2026-73570

Python PoC for CVE-2026-73570, an SMTP command injection in Zimbra. Sends malformed RCPT TO payloads to trigger shell command execution via…

email-securityexploitationpenetration-testing+3

1 month ago

CVE-2023-27163-InternalProber

samh4cks/cve-2023-27163-internalprober

A tool to perform port scanning using vulnerable Request-Baskets

exploitationpenetration-testingport-scanning+3

53 years ago

CVE-2023-27163-exploit

jeanback1/cve-2023-27163-exploit

SSRF exploit for CVE-2023-27163 in request-baskets, enabling internal port scanning, cloud metadata probing, and service discovery via malicious…

cloud-securityexploitationport-scanning+3

4 months ago

CVE-2024-23692-RCE

wanlichangchengwanlichang/cve-2024-23692-rce

Exploit for CVE-2024-23692, a remote code execution vulnerability in Rejetto HTTP File Server (HFS) 2.3 and below. Includes mass scanning with zmap…

exploitationport-scanningreconnaissance+2

2 years ago

Moodle-CVE-2018-1042

udpsycho/moodle-cve-2018-1042

Script to exploit CVE-2018-1042 in order to do internal port scans.

exploitationpenetration-testingport-scanning+2

24 years ago

CYBERDUDEBIVASH-FortiSIEM-CVE-2025-64155-Scanner

cyberdudebivash/cyberdudebivash-fortisiem-cve-2025-64155-scanner

Authorized high-impact tool from CYBERDUDEBIVASH ECOSYSTEM to detect CVE-2025-64155 (FortiSIEM phMonitor Command Injection). Scans for open ports and…

command-and-controlexploitationpenetration-testing+3

18 months ago

Exploit_CVE-2023-27163

j0ey17/exploit_cve-2023-27163

Proof of Concept exploit for Server Side Request Forgery vulnerability in Requests Basket v1.2.1 and before.

exploitationpenetration-testingport-scanning+3

11 year ago

CVE-2023-27163-Request-Baskets-Local-Ports-Bruteforcer

theopaid/cve-2023-27163-request-baskets-local-ports-bruteforcer

PoC and internal port brute-forcer for CVE-2023-27163

exploitationport-scanningreconnaissance+2

11 year ago

CVE-2023-27163-ssrf-to-port-scanning

rishabh-kumar-cyber-sec/cve-2023-27163-ssrf-to-port-scanning

It is a simple script to automate internal port scanning dueto SSRF in requests-baskets v 1.2.1. this script can also assisst in solving 'SAU'…

ctfpenetration-testingport-scanning+2

2 years ago

sunflower_exp

baimaobg/sunflower_exp

Sunflower CVE-2022-10270 vulnerability exploitation tool

exploitationpenetration-testingport-scanning+3

43 years ago

SSRFX

nonenotnull/ssrfx

CVE-2014-4210+Redis未授权访问

exploitationpenetration-testingport-scanning+3

989 years ago

Blind-SSRF-CVE-2020-15002

skr0x1c0/blind-ssrf-cve-2020-15002

https://hackerone.com/reports/865652

exploitationport-scanningreconnaissance+2

5 years ago

POC-IngressNightmare-CVE-2025-1974

biitts/poc-ingressnightmare-cve-2025-1974

Builds a shell.so reverse shell payload for CVE-2025-1974 (IngressNightmare) using Alpine Linux in Docker, with hardcoded IP and port configuration.

container-securityexploitationpayload-development+3

1 year ago

CVE-2019-13956

rhbb/cve-2019-13956

Dockerized proof-of-concept exploit for CVE-2019-13956, targeting a web application vulnerability accessible via HTTP on port 8090.

container-securityexploitationpenetration-testing+2

6 years ago

JavaPayload

schierlm/javapayload

JavaPayload is a collection of pure Java payloads to be used for post-exploitation from pure Java exploits or from common misconfigurations (like not…

exploitationmisconfigurationpayload-development+3

1281 year ago

CVE-2020-5902

nsflabs/cve-2020-5902

Python scanner to detect CVE-2020-5902 RCE vulnerability in F5 BIG-IP TMUI. Tests unauthenticated remote systems for arbitrary command execution via…

exploitationpenetration-testingremote-access-tool+2

86 years ago

CVE-2024-23113

puckiestyle/cve-2024-23113

Detects CVE-2024-23113 format string vulnerability in FortiGate FGFM service via SSL connection on port 541, sending crafted payloads to verify RCE…

exploitationnetwork-securitypenetration-testing+2

11 year ago