Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
1494 results
CVE-2026-55040 preview

CVE-2026-55040

GitHubl0ggg/cve-2026-55040

Exploit code for CVE-2026-55040, it can create auth header for any validate account.

authenticationexploitationpenetration-testing+2
2
23 days ago
CVE-2025-64512 preview

CVE-2025-64512

GitHubdodgenefoli/cve-2025-64512
exploitationpenetration-testingvulnerability-analysis+2
9 days ago
CVE-2022-35914-RCE preview

CVE-2022-35914-RCE

GitHubcyb3rk0ala/cve-2022-35914-rce

PoC exploit for CVE-2022-35914 — GLPI v.10.0.2 htmLawed command injection, command execution, and reverse shell support.

exploitationpenetration-testingremote-access-tool+1
9 days ago
CVE-2026-23744-PoC preview

CVE-2026-23744-PoC

GitHubmluex0/cve-2026-23744-poc

CVE-2026-23744 is an unauthenticated command injection in MCPJam Inspector ≤1.4.2 via /api/mcp/connect. This POC exploits it by sending a crafted…

exploitationpenetration-testingvulnerability-analysis+1
210 days ago
CVE-2026-15598 preview

CVE-2026-15598

GitHubiamdremig/cve-2026-15598
exploitationvulnerability-analysisweb-application-exploitation+1
110 days ago
CVE-2026-65591 preview

CVE-2026-65591

GitHubiamdremig/cve-2026-65591
exploitationvulnerability-analysisweb-application-exploitation
110 days ago
CVE-2026-9198 preview

CVE-2026-9198

GitHubprocjevt/cve-2026-9198

Exploit script for CVE-2026-9198 targeting IBM Langflow, providing proof-of-concept code to validate vulnerabilities and support authorized security…

exploitationpenetration-testingvulnerability-analysis+1
10 days ago
CVE-2025-59528-PoC preview

CVE-2025-59528-PoC

GitHubsonnelon/cve-2025-59528-poc

The poc of CVE-2025-59528

exploitationpenetration-testingvulnerability-analysis+1
11 days ago
amasty-chekout-POC-rce preview

amasty-chekout-POC-rce

GitHubchrissec2014/amasty-chekout-poc-rce

my poc for CVE-2026-53787

exploitationpenetration-testingweb-application-exploitation+1
5 days ago
CVE-2026-26119 preview

CVE-2026-26119

GitHubcyb3rwitch3r/cve-2026-26119

Authenticated remote code execution exploit for Windows Admin Center via WinREST/PowerShell invokeCommand; takes credentials and runs arbitrary…

exploitationpenetration-testingred-teaming+1
111 days ago
By-Poloss..-..CVE-2026-15038-POC preview

By-Poloss..-..CVE-2026-15038-POC

GitHubpolosss/by-poloss..-..cve-2026-15038-poc

PoC exploit for CVE-2026-15038 in InfiniteWP Client WordPress plugin: bypasses authentication on Multisite, binds attacker RSA key, escalates to…

authenticationexploitationpenetration-testing+3
111 days ago
CVE-2026-3891 preview

CVE-2026-3891

GitHubch4120n/cve-2026-3891

PoC for CVE-2026-3891 – Unauthenticated File Upload RCE in Pix for WooCommerce ≤ 1.5.0. Automated nonce retrieval, PHP upload, and command execution.

exploitationpenetration-testingweb-application-exploitation
217 days ago
POC-CVE-2026-32621-Apollo-Federation-XSS-Vulnerability preview

POC-CVE-2026-32621-Apollo-Federation-XSS-Vulnerability

GitHubsam00/poc-cve-2026-32621-apollo-federation-xss-vulnerability
api-securityexploitationvulnerability-analysis+1
14 days ago
pdfjs-cve-2024-4367-poc preview

pdfjs-cve-2024-4367-poc

GitHubdharmarajps/pdfjs-cve-2024-4367-poc
exploitationvulnerability-analysisweb-application-exploitation+1
17 days ago
test-xss-swagger-CVE-2019-1749 preview

test-xss-swagger-CVE-2019-1749

GitHubdelbertgiovanni/test-xss-swagger-cve-2019-1749

PoC for testing reflected XSS in Swagger UI via CVE-2019-1749; sends crafted payloads and verifies vulnerable endpoints with minimal setup.

exploitationpenetration-testingvulnerability-analysis+2
17 days ago
pentest-mapper preview

pentest-mapper

GitHubportswigger/pentest-mapper

A Burp Suite Extension for Application Penetration Testing to map flows and vulnerabilities

api-securityapi-security-testingpenetration-testing+2
1222 years ago
api_wordlist preview

api_wordlist

GitHubchrislockard/api_wordlist

A wordlist of API names for web application assessments

api-security-testingcurated-resourcesfuzzing+2
9251 year ago
XSS2Shell-CVE-2026-64638 preview

XSS2Shell-CVE-2026-64638

GitHubjendmaoul/xss2shell-cve-2026-64638

CVE-2026-64638 — WordPress Pre-Auth Reflected XSS → RCE via DOM Clobbering + Application Password Theft + REST API Plugin Activation. Dual-mode PoC…

exploitationpayload-developmentpenetration-testing+4
113 days ago
Previous1234…83Next