Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
17 results
CVE-2026-34990-poc preview

CVE-2026-34990-poc

GitHubkhush-613/cve-2026-34990-poc

Proof-of-concept exploit for CVE-2026-34990, a CUPS 2.4.16 local privilege escalation via arbitrary file write through CUPS_CREATE_LOCAL_PRINTER and…

exploitationpayload-developmentpenetration-testing+4
2
23 days ago
spider preview

spider

GitHub173210/spider

Exploit for CVE-2013-2842, a kernel privilege escalation vulnerability, providing local privilege escalation on affected Linux systems.

exploitationpayload-developmentpenetration-testing+2
311 years ago
CVE-2025-50505 preview

CVE-2025-50505

GitHuba0yami/cve-2025-50505

Exploit for CVE-2025-50505 in Clash Verge Rev, demonstrating local privilege escalation and remote code execution via unauthenticated API, including…

command-and-controldns-analysisexploitation+8
201 year ago
CVE-2025-8110 preview

CVE-2025-8110

GitHubr3vpwnx/cve-2025-8110

Proof-of-concept exploit for CVE-2025-8110 in Gogs <=0.13.x, enabling authenticated symlink bypass to arbitrary file write as the Gogs process user,…

exploitationpenetration-testingprivilege-escalation+2
1 month ago
CVE-2017-0106 preview

CVE-2017-0106

GitHubryhanson/cve-2017-0106

Proof-of-concept exploit for CVE-2017-0106, a Win32k elevation of privilege vulnerability in Windows, enabling local privilege escalation.

binary-exploitationexploitationpenetration-testing+2
9 years ago
Enigm-Writeup preview

Enigm-Writeup

GitHubabdelhakimgafernetworksec/enigm-writeup

Comprehensive penetration testing write-up and exploit details for Hack The Box - Enigma machine, covering local enumeration, OliveTin CVE-2026-27626…

ctfeducationexploitation+7
127 days ago
CVE-2026-Termius preview

CVE-2026-Termius

GitHubnicetop1027/cve-2026-termius

Vulnerability disclosure with PoCs for three critical Termius macOS flaws: Remote Code Execution via exposed Node modules, Local Privilege Escalation…

educationexploitationmisconfiguration+4
8 months ago
adm-zip_LPE-PoC preview

adm-zip_LPE-PoC

GitHubx86byte/adm-zip_lpe-poc

CVE-2026-102282: Local Privilege Escalation via SUID/SGID preservation during archive extraction

exploitationpayload-developmentprivilege-escalation+4
1220 days ago
CVE-2026-27541-Analysis-Lab preview

CVE-2026-27541-Analysis-Lab

GitHubrootdirective-sec/cve-2026-27541-analysis-lab

Docker lab for reproducing CVE-2026-27541, an authenticated privilege escalation in WooCommerce Wholesale Prices. Compares vulnerable and patched…

educationexploitationlabs-practice+4
7 months ago
CVE-2026-34990 preview

CVE-2026-34990

GitHubgbuyssens/cve-2026-34990

Local privilege escalation against a root `cupsd`.

exploitationpayload-developmentpenetration-testing+3
23 days ago
cups-2.4.16-lpe preview

cups-2.4.16-lpe

GitHubmrdebora/cups-2.4.16-lpe

CUPS 2.4.16 Local Privilege Escalation via Local Admin Token Leak and file:// Arbitrary File Write (CVE-2026-34990)

exploitationpayload-generationpenetration-testing+4
21 days ago
Mohnad-AL-saif-CVE-2020-11107-XAMPP-Local-Privilege-Escalation preview

Mohnad-AL-saif-CVE-2020-11107-XAMPP-Local-Privilege-Escalation

GitHubmohnad-al-saif/mohnad-al-saif-cve-2020-11107-xampp-local-privilege-escalation

CVE-2020-11107-Local-Privilege-Escalation-XAMPP-7.2.29-7.3.x-7.3.16-7.4.x-7.4.4

exploitationpayload-generationpenetration-testing+3
8 months ago
CVE-2022-45771 preview

CVE-2022-45771

GitHubyuriisanin/cve-2022-45771

[PoC] Privilege escalation & code execution via LFI in PwnDoC

code-analysisexploitationpayload-development+4
63 years ago
CVE-2025-81110-PoC preview

CVE-2025-81110-PoC

GitHubbridgeralderson/cve-2025-81110-poc

Improper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code.

exploitationpayload-developmentpenetration-testing+4
46 months ago
printix-CVE-2022-29554 preview

printix-CVE-2022-29554

GitHubcomparedarray/printix-cve-2022-29554

A "Mishandling of Input to API" or "Exposed Dangerous Method or Function" vulnerability in PrintixService.exe, in Kofax Printix's "Printix Secure…

api-securityexploitationmisconfiguration+3
34 years ago
acunetix_0day preview

acunetix_0day

GitHubdzonerzy/acunetix_0day

Acunetix 0day RCE

exploitationpenetration-testingprivilege-escalation+1
19310 years ago
htb-facts preview

htb-facts

GitHubmattiapertusati/htb-facts

HackTheBox — Facts (Easy/Linux) | CVE-2025-2304 + AWS S3 + SSH Key + Facter PrivEsc

cloud-securityctfeducation+7
6 months ago