Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
50 results
Log4j_CVE-2021-44228 preview

Log4j_CVE-2021-44228

GitHubvorburger/log4j_cve-2021-44228

Curated resource hub for Log4j CVE-2021-44228, covering detection, mitigation, exploitation, and dependency management strategies for the critical…

curated-resourceseducationexploitation+3
3
4 years ago
Project-CVE-2026-65351 preview

Project-CVE-2026-65351

GitHube4zyy/project-cve-2026-65351

Browser resource exhaustion payload that crashes target systems via memory, GPU, audio, and rendering overload. Designed for authorized security…

exploitationred-teamingvulnerability-analysis+1
2 months ago
CVE-2026-50787 preview

CVE-2026-50787

GitHubbrynax/cve-2026-50787

Security advisory detailing CVE-2026-50787, an uncontrolled resource consumption vulnerability in e-SIC Livre CAPTCHA generation, enabling remote…

curated-resourceseducationvulnerability-analysis+1
2 months ago
CVE-2022-41404-DoS-Protection preview

CVE-2022-41404-DoS-Protection

GitHubfdjy1234/cve-2022-41404-dos-protection

Windows Apache Tomcat resource limits implementation guide for CVE-2022-41404 DoS vulnerability protection

configuration-auditingdefensive-toolseducation+2
1 month ago
CVE-2020-36287 preview

CVE-2020-36287

GitHubf4rber/cve-2020-36287

The dashboard gadgets preference resource of the Atlassian gadgets plugin used in Jira Server and Jira Data Center before version 8.13.5, and from…

exploitationinformation-gatheringmisconfiguration+3
35 years ago
CVE-2024-27316_poc preview

CVE-2024-27316_poc

GitHubaeyesec/cve-2024-27316_poc

Proof-of-concept exploit for CVE-2024-27316, an HTTP/2 CONTINUATION flood vulnerability in Apache httpd, demonstrating resource exhaustion via…

exploitationfuzzingvulnerability-analysis+1
22 years ago
CVE-2022-41401 preview

CVE-2022-41401

GitHubixsly/cve-2022-41401

Proof-of-concept exploit for CVE-2022-41401, a server-side request forgery (SSRF) vulnerability in OpenRefine <= v3.5.2, enabling unauthorized…

exploitationinformation-gatheringpenetration-testing+2
13 years ago
CVE-2026-36957 preview

CVE-2026-36957

GitHubkirubel-cve/cve-2026-36957

Proof-of-concept for CVE-2026-36957, a denial-of-service vulnerability in Dbit Router firmware via HTTP flood on the Boa web server, causing resource…

exploitationpenetration-testingvulnerability-analysis+1
6 months ago
mitigate-cve-2026-23869-react-server-component-loops preview

mitigate-cve-2026-23869-react-server-component-loops

GitHubshaheryar773/mitigate-cve-2026-23869-react-server-component-loops

Technical troubleshooting repository for fixing infinite rendering vulnerability loops and resource exhaustion threats under CVE-2026-23869 cleanly.

cloud-securityeducationmisconfiguration+2
4 months ago
wordpress_DoS preview

wordpress_DoS

GitHubg-rubert/wordpress_dos

Proof-of-concept for Denial of Service (DoS) attacks against WordPress 4.9.8 and 5.5 via unauthenticated requests to vulnerable admin pages, causing…

exploitationpenetration-testingvulnerability-analysis+1
16 years ago
vuln-chain-lab preview

vuln-chain-lab

GitHubechosecure/vuln-chain-lab

PoC Docker lab: chaining file upload bypass + stored XSS to create admin accounts. Educational resource for pen testers.

ctfeducationlabs-practice+5
17 months ago
CVE-2025-56223 preview

CVE-2025-56223

GitHubsaykino/cve-2025-56223

Documentation of CVE-2025-56223, a denial-of-service vulnerability in Ascertia SigningHub's Upload Document API, allowing unrestricted file uploads…

api-securitypenetration-testingvulnerability-analysis+1
1 year ago
undertow-io__undertow_CVE-2014-7816_1-0-16-Final preview

undertow-io__undertow_CVE-2014-7816_1-0-16-Final

GitHubshoucheng3/undertow-io__undertow_cve-2014-7816_1-0-16-final

Proof-of-concept exploit for CVE-2014-7816 targeting Undertow Java web server, demonstrating a directory traversal vulnerability in the HTTP server's…

exploitationpenetration-testingvulnerability-analysis+2
1 year ago
CVE-2024-35468 preview

CVE-2024-35468

GitHubdovankha/cve-2024-35468

Proof-of-concept exploit for SQL injection vulnerability in SourceCodester Human Resource Management System 1.0, enabling unauthenticated admin login…

database-securityexploitationpenetration-testing+3
2 years ago
CVE-2022-46104---POC preview

CVE-2022-46104---POC

GitHubnursec747/cve-2022-46104---poc

Proof-of-concept exploit for CVE-2022-46104 demonstrating a reflected XSS vulnerability in the Human Resource Management System login page.

exploitationpenetration-testingvulnerability-analysis+2
3 years ago
CVE-2024-34221 preview

CVE-2024-34221

GitHubdovankha/cve-2024-34221

Proof-of-concept for CVE-2024-34221: insecure permission vulnerability in SourceCodester Human Resource Management System 1.0 allowing unauthorized…

misconfigurationpenetration-testingvulnerability-analysis+2
2 years ago
Unveiling-Moniker-Link-CVE-2024-21413-Navigating-the-Latest-Cybersecurity-Landscape preview

Unveiling-Moniker-Link-CVE-2024-21413-Navigating-the-Latest-Cybersecurity-Landscape

GitHubredfox-security/unveiling-moniker-link-cve-2024-21413-navigating-the-latest-cybersecurity-landscape

Educational resource analyzing CVE-2024-21413 (Moniker Link) and its implications, providing insights into the vulnerability and broader…

educationexploitationpapers-research+2
2 years ago
svg-sanitizer preview

svg-sanitizer

GitHubborewit/svg-sanitizer

Java library that sanitizes SVG files by stripping JavaScript, inline event handlers, and script tags while blocking external resource loading to…

code-analysisdefensive-toolsstatic-analysis+2
28 days ago
Previous123Next