Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
29 results
CopyFail preview

CopyFail

GitHub1neptune/copyfail

go CVE-2026-31431 (CopyFail) local privilege escalation exploit

binary-exploitationcontainer-escapeexploitation+3
2
2 months ago
nextjs-cve-2026-23870-checker preview

nextjs-cve-2026-23870-checker

GitHubemresandikci/nextjs-cve-2026-23870-checker

Checker and fixer for all 13 vulnerabilities in the Next.js May 2026 security release (CVE-2026-23870)

code-analysisdevsecopsmisconfiguration+3
3 months ago
Bludit-3.13.1-TAGS-Field-Stored-Cross-Site-Scripting-XSS preview

Bludit-3.13.1-TAGS-Field-Stored-Cross-Site-Scripting-XSS

GitHubsanupl/bludit-3.13.1-tags-field-stored-cross-site-scripting-xss

CVE-2021-45744 - A Stored Cross Site Scripting (XSS) vulnerability exists in bludit 3.13.1 via the TAGS section in login panel. Application stores…

exploitationpenetration-testingvulnerability-analysis+2
3 months ago
CVE-2021-45744 preview

CVE-2021-45744

GitHubsanupl/cve-2021-45744

CVE-2021-45744 - A Stored Cross Site Scripting (XSS) vulnerability exists in bludit 3.13.1 via the TAGS section in login panel. Application stores…

exploitationpenetration-testingvulnerability-analysis+2
13 months ago
Bludit-3.13.1-About-Plugin-Stored-Cross-Site-Scripting-XSS preview

Bludit-3.13.1-About-Plugin-Stored-Cross-Site-Scripting-XSS

GitHubsanupl/bludit-3.13.1-about-plugin-stored-cross-site-scripting-xss

CVE-2021-45745 - A Stored Cross Site Scripting (XSS) vulnerability exists in Bludit 3.13.1 via the About Plugin in login panel. Application stores…

exploitationpenetration-testingvulnerability-analysis+2
3 months ago
CVE-2021-45745 preview

CVE-2021-45745

GitHubsanupl/cve-2021-45745

CVE-2021-45745 - A Stored Cross Site Scripting (XSS) vulnerability exists in Bludit 3.13.1 via the About Plugin in login panel. Application stores…

exploitationpenetration-testingvulnerability-analysis+2
13 months ago
CVE-2019-7609 preview

CVE-2019-7609

GitHubtoxxxaka/cve-2019-7609

New CVE-2019-7609 which works with python 13

exploitationpayload-generationpenetration-testing+3
6 months ago
CVE-2025-23048-POC preview

CVE-2025-23048-POC

GitHubabsholi7ly/cve-2025-23048-poc

Apache HTTP Server versions 2.4.35 – 2.4.63 are vulnerable to a client certificate authentication bypass when TLS 1.3 session resumption is used…

authenticationexploitationpenetration-testing+3
410 months ago
CVE-2025-24071 preview

CVE-2025-24071

GitHubkaiisyms/cve-2025-24071

Microsoft Windows File Explorer Spoofing Vulnerability / NTLM Hash Leak

exploitationinformation-gatheringred-teaming+1
1 year ago
CVE-2024-48245 preview

CVE-2024-48245

GitHubshadowbyte1/cve-2024-48245

SQL Injection Vulnerability in Vehicle Management System 1.0 - 1.3

database-securityexploitationpenetration-testing+3
11 year ago
CVE-2024-53345 preview

CVE-2024-53345

GitHubshadowbyte1/cve-2024-53345

Critical 0 Day in Car Rental Management System Versions 1.0 - 1.3

exploitationpayload-generationprivilege-escalation+3
11 year ago
CVE-2024-50507 preview

CVE-2024-50507

GitHubrandomrobbiebf/cve-2024-50507

DS.DownloadList <= 1.3 - Unauthenticated PHP Object Injection

code-analysisexploitationpenetration-testing+3
1 year ago
CVE-2024-41290 preview

CVE-2024-41290

GitHubparagbagul111/cve-2024-41290

FlatPress CMS v1.3.1 1.3 was discovered to use insecure methods to > store authentication data

authenticationexploitationinformation-gathering+3
1 year ago
CVE-2024-33210 preview

CVE-2024-33210

GitHubparagbagul111/cve-2024-33210

A cross-site scripting (XSS) vulnerability has been identified in Flatpress 1.3. This vulnerability allows an attacker to inject malicious scripts…

exploitationpenetration-testingvulnerability-analysis+2
1 year ago
CVE-2024-33209 preview

CVE-2024-33209

GitHubparagbagul111/cve-2024-33209

FlatPress 1.3. is vulnerable to Cross Site Scripting (XSS). An attacker can inject malicious JavaScript code into the "Add New Entry" section, which…

exploitationpenetration-testingvulnerability-analysis+2
1 year ago
CVE-2024-38063-Medium preview

CVE-2024-38063-Medium

GitHubarenaldyp/cve-2024-38063-medium

Kode Eksploitasi CVE-2024-38063

exploitationpayload-developmentpenetration-testing+3
1 year ago
ARC-Browser-Address-Bar-Spoofing-PoC preview

ARC-Browser-Address-Bar-Spoofing-PoC

GitHubhackintoanetwork/arc-browser-address-bar-spoofing-poc

Proof-of-concept exploit for CVE-2024-25733 demonstrating address bar spoofing in ARC Browser on iOS/iPadOS using JavaScript-based navigation…

exploitationios-securitymobile-security+2
62 years ago
PPLFault preview
Archived

PPLFault

GitHubgabriellandau/pplfault

Windows privilege escalation exploit abusing a TOCTOU in Code Integrity to bypass Protected Process Light, execute as WinTcb-Light, and dump…

exploitationpenetration-testingpost-exploitation+2
5672 years ago
Previous12Next