Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
14 results
CVE-2026-39987 preview

CVE-2026-39987

GitHub0xblackash/cve-2026-39987

CVE-2026-39987

command-and-controleducationexploitation+5
5 months ago
CVE-2025-9816 preview

CVE-2025-9816

GitHubmonzaviman/cve-2025-9816

Proof of Concept for Stored-XSS on Vulnerable WP-Statistics Plugin known as CVE-2025-9816

exploitationpayload-generationpenetration-testing+3
10 months ago
CVE-2022-42889-PoC preview

CVE-2022-42889-PoC

GitHubsunnyvale-it/cve-2022-42889-poc

CVE-2022-42889 (a.k.a. Text4Shell) RCE Proof of Concept

container-securityeducationexploitation+3
23 years ago
pbck-exploit preview

pbck-exploit

GitHubshinthink/pbck-exploit

📤 Mass exploitation framework for CVE-2026-56290 — Page Builder CK Joomla unauthenticated file upload to RCE

exploit-frameworkspayload-developmentpenetration-testing+4
33 months ago
Log4j-CVE-2021-44228 preview

Log4j-CVE-2021-44228

GitHubdark-ninja10/log4j-cve-2021-44228

On Thursday (December 9th), a 0-day exploit in the popular Java logging library log4j (version 2) was discovered that results in Remote Code…

exploitationinformation-gatheringpenetration-testing+2
4 years ago
CVE-2025-68613-POC preview

CVE-2025-68613-POC

GitHubthestingr/cve-2025-68613-poc

Public PoC + Scanner and research for CVE-2025-68613: Critical RCE in n8n Workflow Automation via Expression Injection (CVSS 10.0). Includes…

educationexploitationinformation-gathering+8
299 months ago
CVE-2025-30208 preview

CVE-2025-30208

GitHubth-secforge/cve-2025-30208

CVE‑2025‑30208 is a medium-severity arbitrary file read vulnerability in the Vite development server (a popular frontend build tool)

exploitationinformation-gatheringpenetration-testing+3
11 year ago
CVE-2025-51868 preview

CVE-2025-51868

GitHubsecsys-fdu/cve-2025-51868

Demonstrates an Insecure Direct Object Reference (IDOR) vulnerability in Dippy's chat component, allowing attackers to access and tamper with other…

information-gatheringpenetration-testingvulnerability-analysis+2
1 year ago
CVE-2025-51858 preview

CVE-2025-51858

GitHubsecsys-fdu/cve-2025-51858

Documentation of CVE-2025-51858, a self-XSS vulnerability in ChatPlayground.ai enabling JWT theft and account hijacking, combined with an IDOR in…

exploitationinformation-gatheringpenetration-testing+3
11 year ago
CVE-2026-45829 preview

CVE-2026-45829

GitHub0xblackash/cve-2026-45829

CVE-2026-45829

educationexploitationpenetration-testing+4
4 months ago
cve-2025-29927 preview

cve-2025-29927

GitHubbalajih4kr/cve-2025-29927

CVE-2025-29927 is a critical vulnerability in Next.js, a popular React-based web framework. The flaw exists in how the middleware feature handles…

exploitationmisconfigurationvulnerability-analysis+2
1 year ago
V3n0M-Scanner preview

V3n0M-Scanner

GitHubv3n0m-scanner/v3n0m-scanner

Popular Pentesting scanner in Python3.6 for SQLi/XSS/LFI/RFI and other Vulns

dns-subdomain-enumerationexploit-frameworksinformation-gathering+3
1.6k3 years ago
wodat preview

wodat

GitHubinitroot/wodat

Windows Oracle Database Attack Toolkit

database-securitypassword-attackspenetration-testing+1
794 years ago
AzureGoat preview

AzureGoat

GitHubine-labs/azuregoat

AzureGoat : A Damn Vulnerable Azure Infrastructure

cloud-infrastructure-securitycloud-securityeducation+5
9671 year ago