Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
32 results
CVE-2026-103442 preview

CVE-2026-103442

GitHubbombobombone/cve-2026-103442

Local proof-of-concept and sanitized report for CVE-2026-103442, a PHP object injection in MediaWiki CentralAuth's merge-session handling that can…

exploitationvulnerability-analysisweb-application-exploitation+1
6 days ago
CVE-2026-42613 preview

CVE-2026-42613

GitHubivanesk315/cve-2026-42613

PHP proof-of-concept for CVE-2026-42613, demonstrating exploitation of the referenced vulnerability.

exploitationpenetration-testingvulnerability-analysis+2
26 days ago
CVE-2026-81780-Hash-Form preview

CVE-2026-81780-Hash-Form

GitHub0xterror/cve-2026-81780-hash-form

Exploit for CVE-2026-81780: unauthenticated file upload in WordPress Hash Form plugin leading to remote code execution via crafted PHP payloads.

exploitationpenetration-testingvulnerability-analysis+2
29 days ago
CVE-2025-6440 preview

CVE-2025-6440

GitHubsangsenimanwartefak/cve-2025-6440

Exploit for CVE-2025-6440: unauthenticated arbitrary file upload in WooCommerce Designer Pro WordPress plugin, enabling RCE via malicious PHP upload.

exploitationpenetration-testingvulnerability-analysis+2
3 months ago
CVE-2025-44136 preview

CVE-2025-44136

GitHubmheranco/cve-2025-44136

Proof-of-concept exploit for unauthenticated reflected XSS in MapTiler Tileserver-php v2.0 via the 'layer' GET parameter, enabling arbitrary HTML/JS…

exploitationpenetration-testingvulnerability-analysis+2
5 months ago
CVE-2026-6183-SQLI preview

CVE-2026-6183-SQLI

GitHubxmyronn/cve-2026-6183-sqli

Proof-of-concept exploit for SQL injection in Simple Content Management System PHP, demonstrating UNION-based data extraction via the id parameter in…

exploitationpenetration-testingvulnerability-analysis+2
6 months ago
CVE-2026-6184-stored-XSS preview

CVE-2026-6184-stored-XSS

GitHubxmyronn/cve-2026-6184-stored-xss

Proof-of-concept for a stored XSS vulnerability in Simple Content Management System PHP, demonstrating session cookie theft via unsanitized News…

exploitationpenetration-testingvulnerability-analysis+2
6 months ago
CVE-2026-7028-SQLI preview

CVE-2026-7028-SQLI

GitHubxmyronn/cve-2026-7028-sqli

Proof-of-concept exploit for SQL injection in CodeAstro Online Job Portal allowing authenticated deletion of all job records via crafted GET request.

exploitationpenetration-testingvulnerability-analysis+2
6 months ago
CVE-2026-6201-IDOR preview

CVE-2026-6201-IDOR

GitHubxmyronn/cve-2026-6201-idor

Proof-of-concept demonstrating an IDOR vulnerability in CodeAstro Online Job Portal allowing authenticated employers to delete arbitrary job postings…

exploitationpenetration-testingvulnerability-analysis+2
6 months ago
CVE-2026-7089-XSS preview

CVE-2026-7089-XSS

GitHubxmyronn/cve-2026-7089-xss

Proof-of-concept for CVE-2026-7089, a stored XSS in Home Service System PHP 1.0 allowing unauthenticated admin session hijacking via booking form.

exploitationpenetration-testingvulnerability-analysis+2
6 months ago
CVE-2025-50364_CSRF_ADD_CATEGORY-phpgurukul-CVE preview

CVE-2025-50364_CSRF_ADD_CATEGORY-phpgurukul-CVE

GitHub1h3ll/cve-2025-50364_csrf_add_category-phpgurukul-cve

Proof-of-concept CSRF exploit targeting CVE-2025-50364 in PHPGurukul Maid Hiring Management System v1.0 that adds arbitrary admin categories via a…

exploitationpenetration-testingvulnerability-analysis+2
1 year ago
CVE-2024-56278 preview

CVE-2024-56278

GitHubdottak/cve-2024-56278

Proof-of-concept exploit for CVE-2024-56278, a remote code execution vulnerability in the WP Ultimate Exporter WordPress plugin, demonstrating file…

exploitationpayload-developmentvulnerability-analysis+2
1 year ago
CVE-2024-12484 preview

CVE-2024-12484

GitHublichaser/cve-2024-12484

CVE-poc

exploitationpenetration-testingvulnerability-analysis+2
21 year ago
CVE-2024-52430 preview

CVE-2024-52430

GitHubrandomrobbiebf/cve-2024-52430

Lis Video Gallery <= 0.2.1 - Unauthenticated PHP Object Injection

exploitationpenetration-testingvulnerability-analysis+2
1 year ago
CVE-2024-52433 preview

CVE-2024-52433

GitHubrandomrobbiebf/cve-2024-52433

My Geo Posts Free <= 1.2 - Unauthenticated PHP Object Injection

exploitationpenetration-testingvulnerability-analysis+2
1 year ago
CVE-2024-35511 preview

CVE-2024-35511

GitHubefekaanakkar/cve-2024-35511

Men Salon Management System Using PHP and MySQL

penetration-testingvulnerability-analysisweb-application-exploitation+1
2 years ago
CVE-2024-4439 preview

CVE-2024-4439

GitHubd0rb/cve-2024-4439

Exploit code for CVE-2024-4439, an unauthenticated stored XSS vulnerability in WordPress Core up to 6.5.1, enabling arbitrary PHP command execution…

exploitationpenetration-testingvulnerability-analysis+2
122 years ago
CVE-2020-12640 preview

CVE-2020-12640

GitHubmbadanoiu/cve-2020-12640

CVE-2020-12640: Local PHP File Inclusion via "Plugin Value" in Roundcube Webmail

exploitationpenetration-testingvulnerability-analysis+2
2 years ago
Previous12Next