Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
38 results
Tivoli-Madness preview

Tivoli-Madness

GitHubvoidsec/tivoli-madness

Advisory for CVE-2020-28054 & stack based buffer overflow in IBM Tivoli Storage Manager

exploitationinformation-gatheringpenetration-testing+1
7
5 years ago
CVE-2026-9198 preview

CVE-2026-9198

GitHubywh-jfellus/cve-2026-9198

Proof of Concept for CVE-2026-9198 - IBM Langflow Unauthenticated RCE via Auto-Login Bypass

ctfeducationexploitation+4
3 months ago
EternalLiberty preview

EternalLiberty

GitHubstrangerealintel/eternalliberty

Curated repository of threat actor aliases and naming schemes used by major threat intelligence vendors, enabling cross-vendor search, attribution,…

curated-resourcesinformation-gatheringosint+1
2171 year ago
Apache-Superset-Remote-Code-Execution-PoC-CVE-2018-8021 preview

Apache-Superset-Remote-Code-Execution-PoC-CVE-2018-8021

GitHubr3dxpl0it/apache-superset-remote-code-execution-poc-cve-2018-8021

CVE-2018-8021 Proof-Of-Concept and Exploit

exploitationpayload-developmentpenetration-testing+2
1047 years ago
langflow-CVE-2026-17633-PoC preview

langflow-CVE-2026-17633-PoC

GitHuboscar-collado/langflow-cve-2026-17633-poc

PoC for CVE-2026-17633 — Authenticated RCE in IBM Langflow OSS 1.0.0–1.10.3 via custom_component endpoint. Includes CVE-2026-17632 AST scanner bypass…

code-analysisexploitationpenetration-testing+2
11 month ago
EXPLOIT-CVE-2026-9198 preview

EXPLOIT-CVE-2026-9198

GitHubjoaovicdev/exploit-cve-2026-9198

Proof-of-concept exploit for CVE-2026-9198, an unauthenticated RCE in IBM Langflow OSS, chaining auto_login and validate/code endpoints. Includes a…

educationexploitationlabs-practice+4
2 months ago
CVE-2026-9198_exploit preview

CVE-2026-9198_exploit

GitHub0xdak/cve-2026-9198_exploit

Unauthenticated RCE exploit for Langflow OSS chaining auto_login JWT bypass with validate/code exec() to achieve remote command execution and reverse…

command-and-controlexploitationpenetration-testing+4
13 months ago
IBM-Langflow-CVE-2026-48519-poc preview

IBM-Langflow-CVE-2026-48519-poc

GitHublukehebe/ibm-langflow-cve-2026-48519-poc

Proof-of-concept exploit for CVE-2026-48519, a pre-auth RCE in IBM Langflow <= 1.9.1 via the Shareable Playground /api/v1/build_public_tmp endpoint.

exploitationpenetration-testingremote-access-tool+3
1 month ago
ibmsecurity preview

ibmsecurity

GitHubibm-security/ibmsecurity

Idempotent functions for IBM Security Appliance REST APIs. Currently covering ISAM and ISDS Appliances.

api-securityconfiguration-auditingdevsecops+3
533 months ago
CVE-2026-9198 preview

CVE-2026-9198

GitHubcuteecat/cve-2026-9198

CVE-2026-9198利用代码

api-security-testingexploitationpenetration-testing+3
2 months ago
X-force preview

X-force

GitHubjul10l1r4/x-force

IBM Security utilitary library in python. Search and query all sources: threat_activities and groups, malware_analysis, industries

information-gatheringmalware-analysisosint+1
83 years ago
redis_exploit preview

redis_exploit

GitHubksnnd32/redis_exploit

🔍 Explore and test the CVE-2025-49844 (RediShell) vulnerability in Redis with this practical lab environment for secure education and research.

container-securityeducationexploitation+3
117 days ago
BRIntelcollector preview

BRIntelcollector

GitHubqbitseclabs/brintelcollector

Cyber Threat Intelligence (CTI) usando fontes e indicadores de ameaças nacionais, ou até globais, mas com evidencias ou indicadores nacionais do…

information-gatheringosintthreat-feeds-aggregators+1
811 months ago
CVE-2023-30990 preview

CVE-2023-30990

GitHubsilentsignal/cve-2023-30990

CVE-2023-30990 exploits

command-and-controlexploitationpayload-development+3
61 year ago
CVE-2022-47986 preview

CVE-2022-47986

GitHubmauricelambert/cve-2022-47986

CVE-2022-47986: Python, Ruby, NMAP and Metasploit modules to exploit the vulnerability.

exploitationexploit-frameworksweb-application-exploitation
13 years ago
tivoli-poc preview

tivoli-poc

GitHubemcalv/tivoli-poc

Proof-of-concept exploit for CVE-2017-1635, a use-after-free vulnerability in IBM Tivoli Monitoring's KDH web server component enabling remote code…

exploitationpenetration-testingremote-access-tool+2
18 years ago
ibm-sterling-b2b-integrator-poc preview

ibm-sterling-b2b-integrator-poc

GitHubreverseclabs/ibm-sterling-b2b-integrator-poc

PoC code for the LPE and RCE (CVE-2024-31903) attacks against the IBM Sterling B2B Integrator

binary-exploitationcommand-and-controlexploitation+3
11 year ago
cve-2023-30990 preview

cve-2023-30990

GitHubcyn8/cve-2023-30990

IBM i DDM Unauthenticated RCE - Java Reverse Shell

exploitationpayload-generationpenetration-testing+3
8 months ago
Previous123Next