Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems Security
General Purpose Utilities
Indicator of Compromise (IOC) Management
OSINT (Open Source Intelligence)
Packet Sniffing & Analysis
Password Cracking
Penetration Testing Frameworks
Phishing Tools
Privilege Escalation
Reconnaissance
Static Analysis
Vulnerability Scanners
Web Vulnerability Scanners
Wi-Fi Auditing
Bluetooth Security
Container Security
Dynamic Analysis (Sandboxing)
Encryption/Decryption Tools
Exploit Frameworks
Identity Management
iOS Security
IoT Security
Memory Forensics
Network Mapping
OSINT for Social Engineering
Password Attacks
Payload Generation
Persistence Mechanisms
Port Scanning
Static Code Analysis (SAST)
Threat Feeds & Aggregators
Vulnerability Analysis
Web Proxies & Interception
Code Analysis
DNS & Subdomain Enumeration
Dynamic Code Analysis (DAST)
Exploitation
Hash Analysis
IDS/IPS Evasion
Impersonation Tools
Lateral Movement
Mobile App Pentesting
Network Forensics
Reverse Engineering
RFID/NFC Tools
SCADA/ICS Security
Scripting & Automation
Serverless Security
Shellcode
Web Application Exploitation
API Security Testing
Configuration Auditing
Data Exfiltration
Debuggers
Forensics
Information Gathering
Mobile Forensics
Network Access Control
Post-Exploitation
Security Virtualization
Phishing
WAF Bypass
Web Security
Fuzzing
Network Security
Steganography
Wireless Security
Data Recovery
Malware Analysis
Digital Forensics
Hardware Hacking
Cryptography
CTF
Penetration Testing
Cloud Security
DevSecOps
Mobile Security
Privacy
Command and Control
Social Engineering
Hardware Security
Utilities & Frameworks
Hardware & IoT Security
Secret Detection
Binary Analysis
Threat Intelligence
Identity & Access Management (IAM)
Supply Chain Security
Authentication
Machine Learning
Intrusion Detection
Papers & Research
Misconfiguration
Subdomain Enumeration
Email Harvesting
Learning & Education
AI-Assisted Reversing
DNS Fuzzing
Red Teaming
Incident Response
Crawler
Curated Resources
Remote Access Tool
Shellcode Generation
Payload Development
Remote Access Trojan
API Security
Anti-Bot
Fingerprint Spoofing
CAPTCHA Bypass
Email Security
DNS Analysis
Chaos Engineering
Learning Paths & Courses
Container Escape
AI Security
Database Security
Firmware Analysis
Anomaly Detection
Log Analysis
Adversarial Attack
Binary Exploitation
Labs & Practice
NewestRelevanceMost popularRecently updated
42 results
CVE-2023-46818 preview

CVE-2023-46818

GitHubhunntr/cve-2023-46818

An issue was discovered in ISPConfig before 3.2.11p1. PHP code injection can be achieved in the language file editor by an admin if…

code-analysisexploitationpenetration-testing+2
161 year ago
Joomla-JCK-Editor-6.4.4-SQL-Injection preview

Joomla-JCK-Editor-6.4.4-SQL-Injection

GitHubnickguitar/joomla-jck-editor-6.4.4-sql-injection

Exploit for Joomla JCK Editor 6.4.4 (CVE-2018-17254)

exploitationpayload-generationpenetration-testing+2
105 years ago
CVE-2026-65891 preview

CVE-2026-65891

GitHubmurrez/cve-2026-65891

CVE-2026-65891 PoC — Joomla Content Editor file rename vulnerability (auth required, fixed in JCE 2.20.2)

exploitationinformation-gatheringpenetration-testing+4
10 days ago
CVE-2026-48907 preview

CVE-2026-48907

GitHubgrayxploit/cve-2026-48907

CVE-2026-48907 is a CVSS 10.0 pre-auth RCE in Joomla Content Editor affecting all versions ≤ 2.9.99.4. The Grayxploit team breaks down the 3-weakness…

educationexploitationpapers-research+4
1 month ago
CVE-2026-48907 preview

CVE-2026-48907

GitHubwearehackers160/cve-2026-48907

CVE-2026-48907 is a critical improper access control vulnerability in the JCE editor extension for Joomla. It allows unauthenticated attackers to…

exploitationpayload-generationpenetration-testing+3
2 months ago
CVE-2026-48907_PoC preview

CVE-2026-48907_PoC

GitHubchiefyoru/cve-2026-48907_poc

Unauthenticated Remote Code Execution (RCE) vulnerability in the JCE (Joomla Content Editor) extension for Joomla

exploitationpenetration-testingred-teaming+2
11 month ago
CVE-2024-9932 preview

CVE-2024-9932

GitHubrandomrobbiebf/cve-2024-9932

Wux Blog Editor <= 3.0.0 - Unauthenticated Arbitrary File Upload

code-analysisexploitationpayload-generation+3
31 year ago
0-click-RCE-Exploit-for-CVE-2024-9932 preview

0-click-RCE-Exploit-for-CVE-2024-9932

GitHubjoshuaprovoste/0-click-rce-exploit-for-cve-2024-9932

Unauthenticated 0-click RCE exploit for CVE-2024-9932. Exploits an arbitrary file upload vulnerability in the Wux Blog Editor WordPress plugin to…

code-analysisexploitationpayload-development+5
27 months ago
CVE-2025-67435 preview

CVE-2025-67435

GitHubrajchowdhury240/cve-2025-67435

A critical Remote Code Execution (RCE) vulnerability has been identified in PluXML CMS version 5.8.22. This vulnerability allows authenticated…

code-analysisexploitationpayload-development+3
17 months ago
CVE-2025-12973 preview

CVE-2025-12973

GitHubd0n601/cve-2025-12973

S2B AI Assistant – ChatBot, ChatGPT, OpenAI, Content & Image Generator <= 1.7.7 - Authenticated (Editor+) Arbitrary File Upload

code-analysisexploitationpayload-generation+3
9 months ago
CVE-2018-7422 preview

CVE-2018-7422

GitHubndr-repo/cve-2018-7422

Exploit for CVE-2018-7422: Local File Inclusion in WordPress Plugin Site Editor 1.1.1 [T1574.008]

exploitationinformation-gatheringlabs-practice+3
11 year ago
CVE-2018-17254 preview

CVE-2018-17254

GitHubmatakucing-ofc/cve-2018-17254

Joomla JCK Editor 6.4.4 - 'parent' SQL Injection

exploitationinformation-gatheringpenetration-testing+2
3 years ago
CVE-2026-72585-PoC preview

CVE-2026-72585-PoC

GitHubnel-droid/cve-2026-72585-poc

PoC: Grafana Editor role deletes protected contact points (CVE-2026-72585, Medium 6.5)

api-securityauthentication-authorizationexploitation+2
4 days ago
masta-cve-2026-48907 preview

masta-cve-2026-48907

GitHubgh1mau/masta-cve-2026-48907

cve-2026-48907 scanner

exploitationpayload-generationpenetration-testing+4
571 month ago
CVE-2021-40444 preview

CVE-2021-40444

GitHubozergoker/cve-2021-40444

Microsoft MSHTML Remote Code Execution Vulnerability CVE-2021-40444

configuration-auditingeducationexploitation+2
194 years ago
CVE-2017-9096-iText-XXE preview

CVE-2017-9096-iText-XXE

GitHubjakabakos/cve-2017-9096-itext-xxe
exploitationfuzzingpenetration-testing+2
134 years ago
CVE-2026-48907 preview

CVE-2026-48907

GitHub0xblackash/cve-2026-48907

CVE-2026-48907

exploitationincident-responsepenetration-testing+3
32 months ago
Cgi-Exploit-Jp-Shell-Upload preview

Cgi-Exploit-Jp-Shell-Upload

GitHubjenderal92/cgi-exploit-jp-shell-upload

Python 2.7

exploitationpenetration-testingremote-access-tool+1
32 months ago
Previous123Next