Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

20 results

CUPS-CVE-2024-47176

rhyru9/cups-cve-2024-47176

Exploit for CVE-2024-47176 targeting CUPS printing service vulnerability. Enables remote code execution and privilege escalation on affected…

exploitationnetwork-securitypenetration-testing+3

3 months ago

CVE-2026-23524

rockmelodies/cve-2026-23524

Laravel Reverb 为 Laravel 应用提供实时 WebSocket 通信后端。在 1.6.3 及更早版本中，Reverb 将来自 Redis 通道的数据直接传递给 PHP 的 unserialize() 函数，且未对可实例化的类进行限制，导致用户面临远程代码执行风险。

code-analysisexploitationremote-access-trojan+2

5 months ago

OpenShell

iss4cf0ng/openshell

Lightweight Go-based reverse shell management server with a web GUI for interactive shell sessions, session management, and multi-tab terminal…

command-and-controlpenetration-testingred-teaming+3

256 months ago

CVE-2026-24061-GUI

lingzesec/cve-2026-24061-gui

CVE-2026-24061 GNU Inetutils telnetd 身份验证绕过漏洞检测与利用 GUI 工具

exploitationnetwork-securitypenetration-testing+3

177 months ago

CVE-2026-22812-Exp

udyz/cve-2026-22812-exp

Exploit for CVE-2026-22812, an unauthenticated remote code execution vulnerability in OpenCode, allowing attackers to execute arbitrary commands on…

exploitationpenetration-testingremote-access-tool+2

17 months ago

CVE-2025-54100

osman1337-security/cve-2025-54100

Proof-of-concept for CVE-2025-54100: XSS in PowerShell's Invoke-WebRequest via mshtml.HTMLDocumentClass, enabling remote code execution when curling…

command-and-controlexploitationremote-access-tool+2

238 months ago

CVE-2025-55752

tam-k592/cve-2025-55752

Detects and exploits Apache Tomcat CVE-2025-55752 directory traversal via Rewrite Valve, enabling PUT-based JSP upload and remote code execution.

exploitationpenetration-testingremote-access-trojan+3

1310 months ago

Blackash-CVE-2025-54574

gmh5225/blackash-cve-2025-54574

Exploit script for CVE-2025-54574, a critical heap buffer overflow in Squid proxy (≤6.3) enabling remote code execution or denial-of-service with no…

exploitationpenetration-testingremote-access-tool+2

1 year ago

CVE-2022-21907

malwareman007/cve-2022-21907

POC for CVE-2022-21907: HTTP Protocol Stack Remote Code Execution Vulnerability.

exploitationpenetration-testingremote-access-tool+2

171 year ago

Poleposph

dedsecteam-blackhat/poleposph

Tools for scan CVE-2024-25600 - WordPress Bricks Builder Remote Code Execution (RCE)

exploitationpenetration-testingremote-access-tool+3

1 year ago

CVE-2022-24706

becrevex/cve-2022-24706

Apache CouchDB 3.2.1 - Remote Code Execution (RCE) Checker

exploitationpenetration-testingremote-access-tool+2

1 year ago

WORDPRESS-CVE-2024-25600-EXPLOIT-RCE

x-projetion/wordpress-cve-2024-25600-exploit-rce

WORDPRESS-CVE-2024-25600-EXPLOIT-RCE - WordPress Bricks Builder Remote Code Execution (RCE)

exploitationpenetration-testingremote-access-tool+3

12 years ago

Broker_ApacheMQ

mudoleto/broker_apachemq

CVE-2023-46604 - ApacheMQ Version 5.15.5 Vulnerability Machine: Broker

exploitationpenetration-testingremote-access-tool+2

2 years ago

Hack-Tool

revanmalang/hack-tool

ALL IN ONE Hacking Tool For Hackers

ctfexploit-frameworksforensics+9

513 years ago

CVE-2022-20699

puckiestyle/cve-2022-20699

Proof-of-concept exploit for CVE-2022-20699, an unauthenticated remote code execution vulnerability in Cisco AnyConnect VPN with rwx stack.

exploitationpenetration-testingremote-access-tool+2

4 years ago

CVE-2022-21907-Vulnerability-PoC

michelep/cve-2022-21907-vulnerability-poc

CVE-2022-21907 Vulnerability PoC

exploitationpenetration-testingremote-access-tool+2

284 years ago

CVE-2022-21907

zz-socmap/cve-2022-21907

HTTP Protocol Stack Remote Code Execution Vulnerability CVE-2022-21907

exploitationpayload-developmentpenetration-testing+3

3604 years ago

CVE-2021-31166-exploit

iranzai/cve-2021-31166-exploit

Exploit for CVE-2021-31166 targeting HTTP Protocol Stack RCE in Windows 10 and Server versions 2004/20H2, enabling remote code execution via crafted…

exploitationpenetration-testingremote-access-tool+2

24 years ago

Previous12 Next