Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
213 results
bifrost preview

bifrost

GitHubbifrost-proxy/bifrost

High-performance HTTP/HTTPS/SOCKS5 MITM proxy in Rust with TLS interception, rule-based request rewriting, traffic capture, breakpoints, script…

api-security-testingnetwork-securitypacket-sniffing-analysis+6
161
12h 18m ago
CVE-2026-42533 preview

CVE-2026-42533

GitHubsuominen/cve-2026-42533
curated-resourceseducationexploitation+3
6 days ago
CVE-2026-50229 preview

CVE-2026-50229

GitHubzero-trace7/cve-2026-50229

Automated XSS scanner and proof-of-concept exploit for CVE-2026-50229 in Apache Tomcat examples. Detects and exploits reflected cross-site scripting…

educationexploitationpenetration-testing+3
18 days ago
XSSight preview

XSSight

GitHubnu11secur1ty/xssight

Educational resource on Cross-site Scripting (XSS) attack techniques, covering non-persistent, persistent, and DOM-based vectors with practical…

educationinformation-gatheringpenetration-testing+3
1017 days ago
CVE-2026-93485 preview

CVE-2026-93485

GitHub0xblackash/cve-2026-93485

Defensive research repository for CVE-2026-93485, a WordPress core stored XSS flaw, with version-check scanner, technical analysis, and patch…

defensive-toolseducationpapers-research+3
19 days ago
hacker-profile preview

hacker-profile

GitLabnoraj/hacker-profile

Personal hacker profile page showcasing CTF achievements, cybersecurity projects, and curated resources. Built with Middleman and Gulp for static…

ctfcurated-resourceseducation
124 days ago
hackerone-reports preview

hackerone-reports

GitHubreddelexc/hackerone-reports

Curated collection of top HackerOne bug bounty reports organized by vulnerability type and program, with scripts to fetch, deduplicate, and rank…

ctfcurated-resourceseducation+7
6.6k1 month ago
CVE-2026-26211 preview

CVE-2026-26211

GitHublindhunt/cve-2026-26211

Public disclosure and proof-of-concept for CVE-2026-26211, a stored XSS vulnerability in Ekushey Project Manager CRM v5.0, including technical…

educationexploitationpapers-research+2
11 month ago
CVE-2023-41425-WonderCMS-Authenticated-RCE preview

CVE-2023-41425-WonderCMS-Authenticated-RCE

GitHubdiegomjx/cve-2023-41425-wondercms-authenticated-rce

Xss injection, WonderCMS 3.2.0 -3.4.2

educationexploitationpayload-generation+4
11 month ago
CVE-2026-40864 preview

CVE-2026-40864

GitHubromain-deperne/cve-2026-40864

Proof-of-concept for CVE-2026-40864: JupyterHub XSRF bypass via cross-origin form POST exploiting Sec-Fetch-Mode: no-cors. Includes PoC HTML, root…

educationexploitationpenetration-testing+3
1 month ago
CVE-2026-82221-PoC preview

CVE-2026-82221-PoC

GitHubgabrielftanaka/cve-2026-82221-poc

PoC for Unauthenticated Reflected Cross-Site Scripting (XSS) in RegistrationMagic WordPress Plugin

educationexploitationpapers-research+2
1 month ago
CVE-2026-30252 preview

CVE-2026-30252

GitHubvenablee/cve-2026-30252

The ZenShare Suite application is vulnerable by a Reflected Cross-Site Scripting (XSS) vulnerability, affecting web application login and recovery…

educationexploitationpapers-research+2
1 month ago
CVE-2026-32635-Angular-XSS-Mitigation- preview

CVE-2026-32635-Angular-XSS-Mitigation-

GitHubfevar54/cve-2026-32635-angular-xss-mitigation-

Demostracion educativa de mitigacion y deteccion de CVE-2026-32635: XSS en atributos i18n de Angular.

code-analysiseducationstatic-analysis+2
1 month ago
CVE-2026-64638 preview

CVE-2026-64638

GitHub0xblackash/cve-2026-64638

CVE-2026-64638

educationexploitationvulnerability-analysis+2
12 months ago
CVE-2026-70376 preview

CVE-2026-70376

GitHubilhomjonr/cve-2026-70376

Advisory and Python PoC for Pluck CMS CSRF: fail-open Referer check plus double-extension upload enables webshell deployment and remote code…

educationexploitationpenetration-testing+3
2 months ago
CVE-2026-9086-poc preview

CVE-2026-9086-poc

GitHubsaku0512/cve-2026-9086-poc

CVE-2026-9086 proof-of-concept for Keycloak client URI validation bypass using mixed-case javascript: and data: XSS payloads, with Docker-based…

educationexploitationlabs-practice+3
12 months ago
CVE-2026-9833 preview

CVE-2026-9833

GitHubaj2108/cve-2026-9833

Technical analysis of a reflected XSS vulnerability in the Tag Groups WordPress plugin before 2.2.0, covering root cause, attack flow, impact,…

educationvulnerability-analysisweb-application-exploitation+1
2 months ago
CVE-2026-13156 preview

CVE-2026-13156

GitHubminhhk68/cve-2026-13156

CVE-2026-13156 Vulnerability Advisory & PoC — Discovered by Huynh Kien Minh (MinhHK).

educationexploitationpapers-research+3
2 months ago
Previous12…12Next