Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

486 results

cve-2024-23897-jenkins-poc

rivaedoardo62-boop/cve-2024-23897-jenkins-poc

Self-contained Docker reproduction and analysis of CVE-2024-23897, the Jenkins CLI arbitrary file read via the args4j @-syntax argument expansion.

educationexploitationpapers-research+3

2 months ago

CVE-2026-45806

0xmrma/cve-2026-45806

Penpot's remote image import let an authenticated file editor turn a normal media convenience feature into backend-origin SSRF because…

educationexploitationpapers-research+3

2 months ago

drupal-openai-provider-ssrf-cve-2026-13233

kuninogu/drupal-openai-provider-ssrf-cve-2026-13233

CVE-2026-13233 (Drupal OpenAI Provider, SA-CONTRIB-2026-053): response-URL SSRF / local file read. Untrusted upstream, not the prompt. Safe…

educationvulnerability-analysisweb-security

1 month ago

CVE-2026-14894

shinthink/cve-2026-14894

Super Forms Unauthenticated File Upload RCE | CVSS 9.8

educationexploitationinformation-gathering+6

11 month ago

CVE-2018-18778

k3ystr0k3r/cve-2018-18778

CVE-2018-18778 - ACME mini_httpd Arbitrary File Read

educationexploitationinformation-gathering+3

12 months ago

CVE-2021-29447-PoC

rdana55/cve-2021-29447-poc

Proof-of-concept exploit for CVE-2021-29447, an XXE injection vulnerability in WordPress 5.6–5.7 via malicious WAV file upload, enabling arbitrary…

educationexploitationpenetration-testing+3

3 months ago

CVE-2024-8949-POC

gh-ost00/cve-2024-8949-poc

SourceCodester Online Eyewear Shop Remote File Inclusion Vulnerability

information-gatheringpenetration-testingvulnerability-analysis+2

21 year ago

CVE-2022-41352

rxerium/cve-2022-41352

Zimbra Collaboration (ZCS) Arbitrary File Upload Vulnerability

vulnerability-scannersweb-securityweb-vulnerability-scanners

210 months ago

S3-from-csp

randomrobbiebf/s3-from-csp

Extracts all S3 Buckets from CSP report headers and then tests for file upload vulns

cloud-infrastructure-securitycloud-securityinformation-gathering+2

13 years ago

CVE-2026-1657

d3kc4rt1/cve-2026-1657

Unauthenticated Arbitrary File Upload in EventPrime Plugin

code-analysiseducationexploitation+3

4 months ago

CVE-2026-27621

lukasz-rybak/cve-2026-27621

CVE-2026-27621 - TypiCMS Core has Stored Cross-Site Scripting (XSS) via SVG File Upload

educationpapers-researchvulnerability-analysis+2

4 months ago

FuguHub-8.1-Reflected-SVG-XSS-CVE-2025-65790

hunterxxx/fuguhub-8.1-reflected-svg-xss-cve-2025-65790

Documentation of CVE-2025-65790: Reflected XSS vulnerability in FuguHub 8.1 via unsanitized SVG rendering in the file manager interface, with PoC and…

educationexploitationpenetration-testing+3

18 months ago

evilMP4

dumbbutt0/evilmp4

Explore CVE-2022-41741 with the Evil MP4 repository. It offers educational PoCs,and documentation on securing nginx against MP4 file vulnerabilities.…

educationexploitationfuzzing+3

12 years ago

CVE-2025-61183

thawphone/cve-2025-61183

Detailed disclosure of a stored XSS vulnerability in VaahCMS via unsafe SVG file upload handling, including exploitation flow, affected endpoints,…

educationexploitationpenetration-testing+3

6 months ago

CVE-2025-60787-Detection-motionEye-RCE-via-Config-Injection

garethmsheldon/cve-2025-60787-detection-motioneye-rce-via-config-injection

Detection rules and YARA/KQL signatures for CVE-2025-60787, an unauthenticated RCE in motionEye via config injection, with process execution and file…

container-securityexploitationintrusion-detection+5

6 months ago

React-Router-CVE-2025-61686-

kai-one001/react-router-cve-2025-61686-

Detailed analysis of CVE-2025-61686, a path traversal vulnerability in React Router's file session storage, including root cause, attack scenarios,…

code-analysiseducationexploitation+3

7 months ago

perwendel__spark_CVE-2018-9159_2_7_2_fixed

shoucheng3/perwendel__spark_cve-2018-9159_2_7_2_fixed

Lightweight Java 8 web framework for building REST APIs and web applications, with built-in routing, static file serving, and template engine support.

api-security-testingeducationgeneral-purpose-utilities+3

11 months ago

perwendel__spark_CVE-2018-9159_2-7-1

shoucheng3/perwendel__spark_cve-2018-9159_2-7-1

Lightweight Java 8 web framework with routing, filters, and static file serving. Includes security advisory for older versions and CRUD API examples.

api-security-testingeducationgeneral-purpose-utilities+3

1 year ago

Previous 1…242526 27 Next