Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
12 results
CVE-2026-8809 preview

CVE-2026-8809

GitHubizxci/cve-2026-8809

Advanced Custom Fields: Extended <= 0.9.2.5 - Unauthenticated Privilege Escalation via Validation Bypass to '_acf_post_id' Parameter

authenticationexploitationpenetration-testing+3
3 months ago
CVE-2008-5416 preview

CVE-2008-5416

GitHubsecforce/cve-2008-5416

Microsoft SQL Server sp_replwritetovarbin Memory Corruption via SQL Injection

database-securityexploitationpenetration-testing+2
39 years ago
weevely3 preview

weevely3

GitHubepinna/weevely3

Weaponized web shell

penetration-testingpost-exploitationprivilege-escalation+4
3.5k0 years ago
WordPress_Backup_Migration-RCE_Unauthenticated preview

WordPress_Backup_Migration-RCE_Unauthenticated

GitHubjoaoaugustom/wordpress_backup_migration-rce_unauthenticated

This exploit is based on CVE-2023-6553 and was built upon the original exploit by Chocapik, it was added that a direct reverse shell can be obtained.

command-and-controlexploit-frameworkspayload-development+3
1 month ago
CVE-2025-13486-POC preview

CVE-2025-13486-POC

GitHub0xanis/cve-2025-13486-poc

POC for CVE-2025-13486

educationexploitationpayload-generation+3
59 months ago
cve-2025-13486-vuln-setup preview

cve-2025-13486-vuln-setup

GitHubkre80r/cve-2025-13486-vuln-setup

Docker test environment for CVE-2025-13486 (ACF Extended RCE). For security research only.

container-securityeducationexploitation+3
9 months ago
CVE-2021-41277_SSRF preview

CVE-2021-41277_SSRF

GitHubsasukeourad/cve-2021-41277_ssrf

Proof-of-concept demonstrating SSRF and LFI in Metabase versions < 0.40.5 (CVE-2021-41277), including internal network scanning and access to cloud…

exploitationinformation-gatheringpenetration-testing+3
44 years ago
CVE-2016-3861 preview

CVE-2016-3861

GitHubkswzzl/cve-2016-3861

my extended take on Mark Brand's CVE 2016-3861 libutils bug

binary-exploitationeducationexploitation+2
13 years ago
CVE-2025-13486 preview

CVE-2025-13486

GitHubmatakucing-ofc/cve-2025-13486

The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to Remote Code Execution in versions 0.9.0.5 through 0.9.1.1 via the…

exploitationpayload-generationpenetration-testing+3
29 months ago
CVE-2025-13486.-CVE-2025-13486 preview

CVE-2025-13486.-CVE-2025-13486

GitHub0xnemian/cve-2025-13486.-cve-2025-13486

Vulnerable setup for CVE-2025-13486 - Advanced Custom Fields: Extended - Remote Code Execution

educationexploitationlabs-practice+2
9 months ago
CVE-2025-13486 preview

CVE-2025-13486

GitHub0xgh057r3c0n/cve-2025-13486

Advanced Custom Fields Extended (ACFE) WordPress Plugin Exploit RCE - Admin Creation

educationexploitationpayload-generation+3
19 months ago
CVE-2024-13184 preview

CVE-2024-13184

GitHubrandomrobbiebf/cve-2024-13184

The Ultimate WordPress Toolkit – WP Extended <= 3.0.12 - Unauthenticated SQL Injection via Login Attempts Module

exploitationinformation-gatheringpenetration-testing+2
1 year ago