Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
29 results
CVE-2025-24071 preview

CVE-2025-24071

GitHubkaiisyms/cve-2025-24071

Microsoft Windows File Explorer Spoofing Vulnerability / NTLM Hash Leak

exploitationinformation-gatheringred-teaming+1
1 year ago
CVE-2025-23048-POC preview

CVE-2025-23048-POC

GitHubabsholi7ly/cve-2025-23048-poc

Apache HTTP Server versions 2.4.35 – 2.4.63 are vulnerable to a client certificate authentication bypass when TLS 1.3 session resumption is used…

authenticationexploitationpenetration-testing+3
410 months ago
CVE-2024-41290 preview

CVE-2024-41290

GitHubparagbagul111/cve-2024-41290

FlatPress CMS v1.3.1 1.3 was discovered to use insecure methods to > store authentication data

authenticationexploitationinformation-gathering+3
1 year ago
CVE-2024-33210 preview

CVE-2024-33210

GitHubparagbagul111/cve-2024-33210

A cross-site scripting (XSS) vulnerability has been identified in Flatpress 1.3. This vulnerability allows an attacker to inject malicious scripts…

exploitationpenetration-testingvulnerability-analysis+2
1 year ago
CVE-2024-33209 preview

CVE-2024-33209

GitHubparagbagul111/cve-2024-33209

FlatPress 1.3. is vulnerable to Cross Site Scripting (XSS). An attacker can inject malicious JavaScript code into the "Add New Entry" section, which…

exploitationpenetration-testingvulnerability-analysis+2
1 year ago
CVE-2021-45745 preview

CVE-2021-45745

GitHubsanupl/cve-2021-45745

CVE-2021-45745 - A Stored Cross Site Scripting (XSS) vulnerability exists in Bludit 3.13.1 via the About Plugin in login panel. Application stores…

exploitationpenetration-testingvulnerability-analysis+2
13 months ago
CVE-2021-45744 preview

CVE-2021-45744

GitHubsanupl/cve-2021-45744

CVE-2021-45744 - A Stored Cross Site Scripting (XSS) vulnerability exists in bludit 3.13.1 via the TAGS section in login panel. Application stores…

exploitationpenetration-testingvulnerability-analysis+2
13 months ago
CVE-2019-7609 preview

CVE-2019-7609

GitHubtoxxxaka/cve-2019-7609

New CVE-2019-7609 which works with python 13

exploitationpayload-generationpenetration-testing+3
6 months ago
CVE-2014-5284 preview

CVE-2014-5284

GitHubmbadanoiu/cve-2014-5284

Bash implementation of CVE-2014-5284

exploitationpenetration-testingprivilege-escalation+2
7 years ago
Bludit-3.13.1-TAGS-Field-Stored-Cross-Site-Scripting-XSS preview

Bludit-3.13.1-TAGS-Field-Stored-Cross-Site-Scripting-XSS

GitHubsanupl/bludit-3.13.1-tags-field-stored-cross-site-scripting-xss

CVE-2021-45744 - A Stored Cross Site Scripting (XSS) vulnerability exists in bludit 3.13.1 via the TAGS section in login panel. Application stores…

exploitationpenetration-testingvulnerability-analysis+2
3 months ago
Bludit-3.13.1-About-Plugin-Stored-Cross-Site-Scripting-XSS preview

Bludit-3.13.1-About-Plugin-Stored-Cross-Site-Scripting-XSS

GitHubsanupl/bludit-3.13.1-about-plugin-stored-cross-site-scripting-xss

CVE-2021-45745 - A Stored Cross Site Scripting (XSS) vulnerability exists in Bludit 3.13.1 via the About Plugin in login panel. Application stores…

exploitationpenetration-testingvulnerability-analysis+2
3 months ago
ACEDcup preview

ACEDcup

GitHubgrrrdog/acedcup

Payload generator for Java Binary Deserialization attack with Commons FileUpload (CVE-2013-2186)

exploitationpayload-generationpenetration-testing+2
3710 years ago
CVE-2020-1967 preview

CVE-2020-1967

GitHubirsl/cve-2020-1967

Proof-of-concept exploit for OpenSSL CVE-2020-1967, a denial-of-service vulnerability in TLS 1.3 signature_algorithms_cert handling, with…

binary-exploitationexploitationpenetration-testing+1
206 years ago
ARC-Browser-Address-Bar-Spoofing-PoC preview

ARC-Browser-Address-Bar-Spoofing-PoC

GitHubhackintoanetwork/arc-browser-address-bar-spoofing-poc

Proof-of-concept exploit for CVE-2024-25733 demonstrating address bar spoofing in ARC Browser on iOS/iPadOS using JavaScript-based navigation…

exploitationios-securitymobile-security+2
62 years ago
CVE-2017-16995 preview

CVE-2017-16995

GitHubgugronnier/cve-2017-16995

Exploit adapted for a specific PoC on Ubuntu 16.04.01

binary-exploitationexploitationpenetration-testing+2
17 years ago
CVE-2020-8290 preview

CVE-2020-8290

GitHubgeffner/cve-2020-8290

CVE-2020-8290 – Elevation of Privilege in Backblaze

exploitationpenetration-testingprivilege-escalation+1
5 years ago
CVE-2022-30525 preview

CVE-2022-30525

GitHubfurkanzengin/cve-2022-30525

A OS Command Injection Vulnerability in the CGI Program of Zyxel

command-and-controlexploitationpenetration-testing+3
14 years ago
CVE-2018-10715 preview

CVE-2018-10715

GitHubalt3kx/cve-2018-10715

CVE-2018-10715

exploitationinformation-gatheringpenetration-testing+2
8 years ago
Previous12Next