Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

6080 results

Spring-Web-5xx-Mitigated-version

tina94happy/spring-web-5xx-mitigated-version

Mitigated version for CVE-2016-1000027 spring web.

code-analysisexploitationsupply-chain-security+2

2 years ago

2026-41940-poc

nickpaulsec/2026-41940-poc

CVE-2026-41940: detect and exploit cpanel vuln

authenticationexploitationpenetration-testing+2

15 months ago

CVE-2017-16567

dewankpant/cve-2017-16567

Proof-of-concept exploit for a persistent cross-site scripting (XSS) vulnerability in Logitech Media Server 7.9.0, demonstrating script injection via…

exploitationpenetration-testingvulnerability-analysis+2

28 years ago

CVE-2025-24016

rxerium/cve-2025-24016

Detection for CVE-2025-24016 - Deserialization of Untrusted Data Vulnerability in the Wazuh software

exploitationpenetration-testingvulnerability-analysis+3

20 years ago

CVE-2025-63499

poblaguev-tot/cve-2025-63499

POC for CVE-2025-63499

exploitationpenetration-testingvulnerability-analysis+2

110 months ago

CVE-2018-16987

gquere/cve-2018-16987

Technical disclosure of CVE-2018-16987: cleartext storage of external service passwords in Squash TM administration panel, with CVSS 4.1 scoring and…

configuration-auditinginformation-gatheringpassword-cracking+3

18 years ago

cve-2024-37763

atreb92/cve-2024-37763

Proof-of-concept exploit for CVE-2024-37763, an unauthenticated stored XSS in MachForm up to v19, demonstrating payload injection via vulnerable…

exploitationpenetration-testingvulnerability-analysis+2

12 years ago

CVE-2023-34845

r4vanan/cve-2023-34845

Vulnerability POC for CVE-2023-34845

exploitationpenetration-testingvulnerability-analysis+2

12 years ago

halo-2.25.4-backup-write-CVE-2026-67920

unpredictable21/halo-2.25.4-backup-write-cve-2026-67920

Proof-of-concept exploit for an arbitrary file write vulnerability in Halo CMS backup restoration, enabling RCE via plugin JAR replacement or…

code-analysisexploitationpenetration-testing+3

3 months ago

CVE-2026-36959

kirubel-cve/cve-2026-36959

Proof-of-concept exploit for CVE-2026-36959, a missing rate limiting vulnerability in U-SPEED Router firmware allowing brute-force attacks on the…

authenticationexploitationpenetration-testing+2

5 months ago

CVE-2026-5411

izxci/cve-2026-5411

Proof-of-concept exploit for CVE-2026-5411 targeting WP Captcha PRO, demonstrating a vulnerability that bypasses CAPTCHA protections in WordPress…

captcha-bypassexploitationvulnerability-analysis+2

3 months ago

CVE-2026-38812-RuoYi-SQL-Injection

jjcjgo/cve-2026-38812-ruoyi-sql-injection

Proof-of-concept exploit for CVE-2026-38812, a SQL injection vulnerability in RuoYi v4.8.2 via the /tool/gen/createTable endpoint, enabling…

database-securityexploitationpenetration-testing+3

3 months ago

CVE-2026-10110-SQLi

xmyronn/cve-2026-10110-sqli

Proof-of-concept for unauthenticated SQL injection in Student Details Management System 1.0, demonstrating UNION-based data extraction and credential…

database-securityexploitationpenetration-testing+3

5 months ago