Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
2544 results
CVE-2023-24278 preview

CVE-2023-24278

GitHubnecr00/cve-2023-24278

CVE-2023-24278 - Reflected XSS Vulnerabilities in Squidex

exploitationpenetration-testingvulnerability-analysis+2
7
1 year ago
CVE-2022-22965 preview

CVE-2022-22965

GitHubguayoyocyber/cve-2022-22965

Vulnerabilidad RCE en Spring Framework vía Data Binding on JDK 9+ (CVE-2022-22965 aka "Spring4Shell")

educationexploitationlabs-practice+2
64 years ago
CVE-2025-26465 preview

CVE-2025-26465

GitHubrxerium/cve-2025-26465

MitM attack allowing a malicious interloper to impersonate a legitimate server when a client attempts to connect to it

exploitationnetwork-securitypenetration-testing+3
910 months ago
cve-2024-23897-jenkins-poc preview

cve-2024-23897-jenkins-poc

GitHubrivaedoardo62-boop/cve-2024-23897-jenkins-poc

Self-contained Docker reproduction and analysis of CVE-2024-23897, the Jenkins CLI arbitrary file read via the args4j @-syntax argument expansion.

educationexploitationpapers-research+3
2 months ago
CVE-2025-31324 preview

CVE-2025-31324

GitHubrxerium/cve-2025-31324

SAP NetWeaver Visual Composer Metadata Uploader is not protected with a proper authorization, allowing unauthenticated agent to upload potentially…

exploitationinformation-gatheringpenetration-testing+3
410 months ago
git-dump preview

git-dump

GitHubjenderal92/git-dump

This script is a tool to recursively download the contents of the '.git' directory from a website. Using Python and libraries like 'requests' and…

information-gatheringmisconfigurationpenetration-testing+3
12 months ago
CVE-2025-29927-Testing preview

CVE-2025-29927-Testing

GitHubtheresafewconors/cve-2025-29927-testing

PowerShell script to test if a web app is vulnerable to CVE-2025-29927

exploitationinformation-gatheringpenetration-testing+3
21 year ago
CVE-2025-37164 preview

CVE-2025-37164

GitHubrxerium/cve-2025-37164

Detection for CVE-2025-37164

exploitationpenetration-testingvulnerability-analysis+3
38 months ago
CVE-2025-26399 preview

CVE-2025-26399

GitHubrxerium/cve-2025-26399

Detection for CVE-2025-26399

exploitationinformation-gatheringpenetration-testing+3
210 months ago
CVE-2023-6000 preview

CVE-2023-6000

GitHubrxerium/cve-2023-6000

The Popup Builder WordPress plugin before 4.2.3 does not prevent simple visitors from updating existing popups, and injecting raw JavaScript in them,…

educationpenetration-testingvulnerability-scanners+2
210 months ago
Roundcube-CVE-2024-42008-and-CVE-2024-42010-POC preview

Roundcube-CVE-2024-42008-and-CVE-2024-42010-POC

GitHubvictoni/roundcube-cve-2024-42008-and-cve-2024-42010-poc

POC for Roundcube vulnerabilities CVE-2024-42008 and CVE-2024-42010

email-securityexploitationvulnerability-analysis+2
21 year ago
CVE-2026-23552 preview

CVE-2026-23552

GitHuboscerd/cve-2026-23552

CVE-2026-23552 - Cross-Realm Token Acceptance in camel-keycloak

api-securityauthentication-authorizationeducation+3
6 months ago
CVE-2024-57378 preview

CVE-2024-57378

GitHubrxerium/cve-2024-57378

Detection for CVE-2024-57378

exploitationinformation-gatheringpenetration-testing+3
10 months ago
CVE-2025-52914 preview

CVE-2025-52914

GitHubrxerium/cve-2025-52914

Detection for CVE-2025-52914

exploitationpenetration-testingvulnerability-analysis+2
10 months ago
CVE-2025-68613_Scanner preview

CVE-2025-68613_Scanner

GitHubmanyaigdtuw/cve-2025-68613_scanner

GUI Shodan-powered scanner to identify n8n instances exposed to CVE-2025-68613 (version range 0.211.0–1.122.0)

exploitationinformation-gatheringosint+4
7 months ago
CVE-2024-8856 preview

CVE-2024-8856

GitHubjenderal92/cve-2024-8856

Scans WordPress sites for WP Time Capsule plugin CVE-2024-8856, detecting versions below 1.22.22 and logging vulnerable targets to a file.

information-gatheringreconnaissancevulnerability-analysis+2
22 months ago
CVE-2023-40000 preview

CVE-2023-40000

GitHubrxerium/cve-2023-40000

LiteSpeed Cache plugin for WordPress that could enable unauthenticated users to escalate their privileges

exploitationinformation-gatheringpenetration-testing+3
710 months ago
check-cve-2019-19781 preview
Archived

check-cve-2019-19781

GitHubcisagov/check-cve-2019-19781

Test a host for susceptibility to CVE-2019-19781

exploitationpenetration-testingvulnerability-analysis+2
1095 years ago
Previous1…345…142Next