Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
54 results
exocomp preview

exocomp

GitHubcookiengineer/exocomp

Self-hosted multi-agent environment for Go with LLM-powered pentesting agents (exploiter, reverser, threathunter, webscanner) that automate…

ai-securitycode-analysiseducation+8
23
23 days ago
CVE-2026-14894 preview

CVE-2026-14894

GitHubnxploited/cve-2026-14894

Multi-threaded mass exploiter chaining unauthenticated WordPress file-upload flaws in Super Forms and Elementor Pro to deploy and verify a PHP web…

exploitationpayload-developmentpenetration-testing+7
1 month ago
LFiFreak preview

LFiFreak

GitHubosandamalith/lfifreak

A unique automated LFi Exploiter with Bind/Reverse Shells

exploitationpayload-generationpenetration-testing+1
3213 months ago
PageBuilderCK-CVE-2026-56290-Exploit preview

PageBuilderCK-CVE-2026-56290-Exploit

GitHubsagsooz/pagebuilderck-cve-2026-56290-exploit

Page Builder CK for Joomla - Unauthenticated SSRF / Remote File Write leading to PHP execution Exploiter

exploitationpayload-generationpenetration-testing+3
23 months ago
Multi-threaded-mass-exploiter-CVE-2018-13379-POC preview

Multi-threaded-mass-exploiter-CVE-2018-13379-POC

GitHubinstructor-admin/multi-threaded-mass-exploiter-cve-2018-13379-poc

CVE-2018-13379 mass exploiter for Fortinet FortiOS SSL VPN. Extracts credentials instantly, saves to CSV + PostgreSQL. Multi-threaded, no bullshit…

exploitationinformation-gatheringpassword-attacks+4
15 months ago
CVE-2026-0740 preview

CVE-2026-0740

GitHubxshadow-here/cve-2026-0740

Automated mass exploiter for CVE-2026-0740, an unauthenticated arbitrary file upload in Ninja Forms File Uploads plugin, enabling remote code…

exploitationpayload-generationpenetration-testing+3
36 months ago
CVE-Scanner preview

CVE-Scanner

GitHubchrisync/cve-scanner

CVE-2021-42287/CVE-2021-42278/OTHER Scanner & Exploiter.

exploitationinformation-gatheringpenetration-testing+3
8 months ago
nextploiter preview

nextploiter

GitHubvonuyvicoo/nextploiter

NextJS exploiter for CVE-2025-55182 and more.

exploitationinformation-gatheringpenetration-testing+3
19 months ago
CVE-2026-22812-POC preview

CVE-2026-22812-POC

GitHubcaybermods/cve-2026-22812-poc

Python tool to check and exploit CVE-2026-22812 in OpenCode, supporting command execution, file read, and multi-target scanning on ports 4095-4100.

exploitationinformation-gatheringpenetration-testing+3
19 months ago
React2Shell preview

React2Shell

GitHubprowlsec/react2shell

An advanced command-line framework for discovery, validation, and exploitation of CVE-2025-55182 and CVE-2025-66478 affecting Next.js applications…

command-and-controlexploitationpayload-generation+4
110 months ago
CVE-2024-13513.py preview

CVE-2024-13513.py

GitHub0axz-tools/cve-2024-13513.py

Automated scanner and exploiter for CVE-2024-13513 in Oliver POS WordPress plugin, checking vulnerable installations and changing password-reset…

exploitationinformation-gatheringpenetration-testing+3
1 year ago
CVE-2018-19207 preview

CVE-2018-19207

GitHubanothersec/cve-2018-19207

WP GDPR Compliance <= 1.4.2 - Remote Code Execution (exploiter)

exploitationpayload-developmentvulnerability-analysis+1
11 year ago
CVE-2014-4725 preview

CVE-2014-4725

GitHubanothersec/cve-2014-4725

MailPoet Newsletters <= Arbitrary File Upload (exploiter)

exploitationpayload-generationpenetration-testing+2
21 year ago
Noregressh preview

Noregressh

GitHubohhdamnbro/noregressh

CVE-2024-6387 and more Checker and Exploiter - Reverse/Bind-Shell Support. education only

command-and-controlexploitationinformation-gathering+6
21 year ago
padre preview

padre

GitHubglebarez/padre

Blazing fast, advanced Padding Oracle exploit

cryptographyexploitationpenetration-testing+1
2811 year ago
CVE-2025-46811 preview

CVE-2025-46811

GitHubb-l-x/cve-2025-46811

CVE-2025-46811

command-and-controlexploitationpenetration-testing+3
1 year ago
FakeImageExploiter preview

FakeImageExploiter

GitHubr00t-3xp10it/fakeimageexploiter

Use a Fake image.jpg to exploit targets (hide known file extensions)

command-and-controlexploitationpayload-development+5
9481 year ago
CVE-Scanner preview

CVE-Scanner

GitHubdanielfexkex/cve-scanner

CVE-2021-42287/CVE-2021-42278/OTHER Scanner & Exploiter.

exploitationpenetration-testingreconnaissance+3
21 year ago
Previous123Next