Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
113 results
Ashwesker-CVE-2025-68645 preview

Ashwesker-CVE-2025-68645

GitHubashwesker/ashwesker-cve-2025-68645

POC BLH Magelang CSIRT 2026 by babyrootkid

email-securityexploitationvulnerability-analysis+2
1 month ago
CVE-2021-43032 preview

CVE-2021-43032

GitHubsakurasamuraii/cve-2021-43032

Post authenticated stored-xss in XenForo versions ≤ 2.2.7

exploitationpenetration-testingphishing-tools+3
24 years ago
CVE-2020-3580 preview

CVE-2020-3580

GitHubcatatonicprime/cve-2020-3580

Additional exploits for XSS in Cisco ASA devices discovered by PTSwarm

exploitationpenetration-testingphishing-tools+3
24 years ago
CVE-2024-39929 preview

CVE-2024-39929

GitHubrxerium/cve-2024-39929

Detection method for Exim vulnerability CVE-2024-39929

email-securityexploitationpenetration-testing+2
311 months ago
CVE-2026-36214 preview

CVE-2026-36214

GitHubweswrench/cve-2026-36214

Stored Cross-Site Scripting (XSS) in osTicket via Vulnerable Bootstrap Tooltip Component

exploitationpenetration-testingphishing-tools+3
12 months ago
Roundcube-CVE-2024-42008-and-CVE-2024-42010-POC preview

Roundcube-CVE-2024-42008-and-CVE-2024-42010-POC

GitHubvictoni/roundcube-cve-2024-42008-and-cve-2024-42010-poc

POC for Roundcube vulnerabilities CVE-2024-42008 and CVE-2024-42010

email-securityexploitationvulnerability-analysis+2
21 year ago
CVE-2018-8062 preview

CVE-2018-8062

GitHuboscarakaelvis/cve-2018-8062

Persistent XSS on Comtrend AR-5387un router

exploitationpenetration-testingphishing-tools+3
12 years ago
CVE-2024-50677 preview

CVE-2024-50677

GitHubzumiyumi/cve-2024-50677

This repository presents a proof-of-concept of CVE-2024-50677

exploitationpenetration-testingphishing-tools+3
11 year ago
CVE-2023-40869 preview

CVE-2023-40869

GitHubminotauro2020/cve-2023-40869

Cross Site Scripting vulnerability in mooSocial mooSocial Software v.3.1.6 allows a remote attacker to execute arbitrary code via a crafted script to…

exploitationpenetration-testingphishing-tools+3
13 years ago
CVE-2026-27579-CollabPlatform-Appwrite-CORS-Misconfiguration preview

CVE-2026-27579-CollabPlatform-Appwrite-CORS-Misconfiguration

GitHubmbanyamer/cve-2026-27579-collabplatform-appwrite-cors-misconfiguration

Exploit PoC for CVE-2026-27579, a CORS misconfiguration in Appwrite backend, demonstrating credentialed account data theft via malicious phishing…

exploitationphishing-toolsred-teaming+3
6 months ago
CVE-2018-15131 preview

CVE-2018-15131

GitHub0x00-0x00/cve-2018-15131

Zimbra Collaboration Suite Username Enumeration

email-securityinformation-gatheringosint+2
18 years ago
CVE-2025-51863 preview

CVE-2025-51863

GitHubsecsys-fdu/cve-2025-51863

Proof-of-concept for a Self-XSS vulnerability in ChatGPTUtil, demonstrating cookie theft and account hijacking via crafted SVG payloads pasted into…

exploitationphishing-toolsvulnerability-analysis+2
1 year ago
CVE-2022-2546 preview

CVE-2022-2546

GitHubopenxp-research/cve-2022-2546

All-in-One WP Migration < 7.63 - Unauthenticated Reflected XSS + CSRF

exploitationpenetration-testingphishing-tools+3
1 year ago
Zimbra-CVE-2017-8802-Hotifx preview

Zimbra-CVE-2017-8802-Hotifx

GitHubozzi-/zimbra-cve-2017-8802-hotifx

Security hotfix for CVE-2017-8802

defensive-toolsemail-securitymisconfiguration+2
8 years ago
CVE-2023-4549 preview

CVE-2023-4549

GitHubb0marek/cve-2023-4549

Repository for CVE-2023-4549 vulnerability.

exploitationpenetration-testingphishing-tools+3
2 years ago
CVE-2020-13965 preview

CVE-2020-13965

GitHubmbadanoiu/cve-2020-13965

CVE-2020-13965: Cross-Site Scripting via Malicious XML Attachment in Roundcube Webmail

exploitationphishing-toolsvulnerability-analysis+2
2 years ago
CVE-2021-40101 preview

CVE-2021-40101

GitHubs1lkys/cve-2021-40101

Survey XSS combined with CSRF leads to Admin Account Takeover in Concrete5 8.5.4

exploitationpenetration-testingphishing-tools+3
4 years ago
CVE-2020-14066 preview

CVE-2020-14066

GitHubpinpinsec/cve-2020-14066

CVE-2020-14066

email-securityexploitationpenetration-testing+2
2 years ago
Previous1234567Next