Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
5129 results
health-check preview

health-check

GitHubrandomrobbiebf/health-check

Health Check & Troubleshooting <= 1.2.3 - Authenticated Path Traversal

data-exfiltrationexploitationinformation-gathering+3
3 years ago
CVE-2026-85706 preview

CVE-2026-85706

GitHubsolivaquaant/cve-2026-85706

Proof-of-concept and reproduction lab for CVE-2026-85706, an unauthenticated path-traversal file read in GitLab CE/EE repository commits and files…

data-exfiltrationexploitationinformation-gathering+7
2 days ago
CVE-2026-82222 preview

CVE-2026-82222

GitHubghostlyrootb2h/cve-2026-82222

Exploit framework for CVE-2026-82222, an unauthenticated RCE in GiveWP WordPress plugin. Supports mass scanning, auto-detection, multi-threading,…

command-and-controlexploitationinformation-gathering+5
5 days ago
CMS-Made-Simple-2.2.9-Unauthenticated-SQL-Injection-Exploit-CVE-2019-9053- preview

CMS-Made-Simple-2.2.9-Unauthenticated-SQL-Injection-Exploit-CVE-2019-9053-

GitHubhf3cyber/cms-made-simple-2.2.9-unauthenticated-sql-injection-exploit-cve-2019-9053-

Time-based blind SQL injection exploit for CMS Made Simple <= 2.2.9 (CVE-2019-9053) that extracts username, email, password hash, and salt, with…

exploitationinformation-gatheringpassword-cracking+3
1 year ago
Log4j_Attacker_IPList preview

Log4j_Attacker_IPList

GitHubc3-h2/log4j_attacker_iplist

Curated list of attacker IP addresses targeting the Log4j vulnerability (CVE-2021-44228) for threat intelligence, incident response, and network…

information-gatheringioc-managementlog-analysis+2
4 years ago
CVE-2017-5487 preview

CVE-2017-5487

GitHubndr-repo/cve-2017-5487

PoC for CVE-2017-5487 - WordPress User Enumeration via REST

information-gatheringpenetration-testingred-teaming+3
1 year ago
CVE-2022-39196- preview

CVE-2022-39196-

GitHubdayiliwaseem/cve-2022-39196-

Black board CMS Escalation of Privileges

data-exfiltrationexploitationinformation-gathering+3
4 years ago
CVE-2026-12415-or-CVE-2026-12416.py preview

CVE-2026-12415-or-CVE-2026-12416.py

GitHubxxconi/cve-2026-12415-or-cve-2026-12416.py

CVE-2026-12415-or-CVE-2026-12416.py

exploitationpayload-developmentpenetration-testing+3
2 months ago
cve-2019-17497 preview

cve-2019-17497

GitHubjm-lemmi/cve-2019-17497

POC Files for CVE-2019-17497

exploitationinformation-gatheringphishing+2
4 years ago
CVE-2020-10132 preview

CVE-2020-10132

GitHubinfosec4fun/cve-2020-10132

CVE-2020-10132 - SearchBlox product before V-9.1 is vulnerable to CORS misconfiguration.

information-gatheringmisconfigurationpenetration-testing+2
3 years ago
fortileak-01-2025-Be preview

fortileak-01-2025-Be

GitHubniklasmato/fortileak-01-2025-be

This repository contains informaion about the Fortigate firewall vulnerability (CVE-2022-40684) and affected data that were publicly disclosed by the…

incident-responseinformation-gatheringioc-management+3
1 year ago
CVE-2024-21413 preview

CVE-2024-21413

GitHubmseymend/cve-2024-21413

CVE-2024-21413 Açığını Kullanarak Giriş Bilgilerini Alma

email-securityexploitationinformation-gathering+2
2 years ago
nvdcve preview

nvdcve

GitLabolbat/nvdcve

Daily-updated JSON repository of NVD/CVE vulnerability data, enabling easy retrieval and git-based exploration of CVE modification history for…

curated-resourcesinformation-gatheringthreat-intelligence+1
3h 55m ago
CVE-2026-21015-PHP-Filter-Chain-Arbitrary-File-Read preview

CVE-2026-21015-PHP-Filter-Chain-Arbitrary-File-Read

GitHubgeorge0papasotiriou/cve-2026-21015-php-filter-chain-arbitrary-file-read

PoC exploit for CVE-2026-21015 that abuses PHP filter chains to read arbitrary files through a vulnerable include() call, disclosing source and…

data-exfiltrationexploitationinformation-gathering+4
1 month ago
CVE-2024-7135 preview

CVE-2024-7135

GitHubnxploited/cve-2024-7135

Proof-of-concept exploit for authenticated arbitrary file read via directory traversal in WordPress Tainacan plugin (CVE-2024-7135).

data-exfiltrationexploitationinformation-gathering+2
1 year ago
CVE-2025-39247 preview

CVE-2025-39247

GitHubsita-technologies/cve-2025-39247

HikCentral Professional - Pre-Auth License ActiveCode Leak

binary-analysiscryptographyexploitation+6
3 months ago
nmap-scan-results preview

nmap-scan-results

GitHubnonosticisiguzo-command/nmap-scan-results

Found 200+ vulnerabilities on scanme.nmap.org including CVE-2023-38408 (9.8 critical)

information-gatheringnetwork-securityport-scanning+3
5 months ago
CVE-2025-24071 preview

CVE-2025-24071

GitHubac8999/cve-2025-24071

Python script to execute CVE-2025-24071

exploitationinformation-gatheringpassword-cracking+3
1 year ago
Previous1…99100Next