Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
17584 results
CVE-2025-49844_POC preview

CVE-2025-49844_POC

GitHubmiclelsoncn/cve-2025-49844_poc

Proof-of-concept exploit for CVE-2025-49844, a Redis Lua script remote code execution vulnerability, demonstrating exploitation and providing…

exploitationpenetration-testingred-teaming+2
2
11 months ago
CVE-2020-26217-XStream preview

CVE-2020-26217-XStream

GitHubkairo-one/cve-2020-26217-xstream

CVE-2020-26217 XStream反序列化的poc

command-and-controlexploitationpayload-generation+3
29 months ago
CVE-2024-36401 preview

CVE-2024-36401

GitHuburjack2025/cve-2024-36401

An Python Exp For "GeoServer"

command-and-controlexploitationpenetration-testing+3
211 months ago
React-Security-CVE-2025-55182-Exploit preview

React-Security-CVE-2025-55182-Exploit

GitHubsangleshubham/react-security-cve-2025-55182-exploit

NodeJS-based exploit script and scanner for the React Server Components "React2Shell" vulnerability (CVE-2025-55182).

exploitationpayload-developmentpenetration-testing+3
28 months ago
CVE-2026-23744 preview

CVE-2026-23744

GitHubozcanpng/cve-2026-23744

Unauthenticated remote code execution proof-of-concept for CVE-2026-23744 targeting MCPJam Inspector. Generates crafted MCP serverConfig payloads to…

command-and-controlexploitationpayload-generation+5
11 month ago
CVE-2021-22204 preview

CVE-2021-22204

GitHub0xbruno/cve-2021-22204

Proof-of-concept exploit for CVE-2021-22204, a remote code execution vulnerability in ExifTool, demonstrating exploitation via crafted image files.

exploitationpenetration-testingred-teaming+2
24 years ago
cve-2021-32849 preview

cve-2021-32849

GitHublowkey0808/cve-2021-32849

Python exploit for CVE-2021-32849, a command injection in Gerapy, enabling remote code execution with reverse shell.

command-and-controlexploitationpenetration-testing+2
24 years ago
gotigate preview

gotigate

GitHubgustavorobertux/gotigate

Go-based exploit for CVE-2022-40684 targeting Fortinet FortiGate devices. Automates authentication bypass to gain administrative access via the web…

command-and-controlexploitationpenetration-testing+3
23 years ago
php_hack preview

php_hack

GitHubjptr218/php_hack

Exploit tool for CVE-2019-11043, targeting insecure pointer arithmetic in PHP-FPM to gain remote access on poorly configured PHP servers via…

exploitationpenetration-testingred-teaming+2
25 years ago
CVE-2024-53615 preview

CVE-2024-53615

GitHubbeune/cve-2024-53615

CVE-2024-53615

command-and-controleducationexploitation+2
21 year ago
CVE-2022-1388 preview

CVE-2022-1388

GitHubdevengpk/cve-2022-1388

Exploit and mass-check script for CVE-2022-1388 targeting F5 BIG-IP iControl REST unauthenticated remote command execution. Supports single host,…

command-and-controlexploitationpenetration-testing+3
23 years ago
Strutscli preview

Strutscli

GitHubopt9/strutscli

Struts2 RCE CVE-2017-5638 CLI shell

command-and-controlexploitationpenetration-testing+2
29 years ago
CVE-2023-39362-cacti-snmp-command-injection-poc preview

CVE-2023-39362-cacti-snmp-command-injection-poc

GitHubjakabakos/cve-2023-39362-cacti-snmp-command-injection-poc

Proof-of-concept exploit for CVE-2023-39362, an authenticated command injection in Cacti's SNMP options. Includes a vulnerable Docker environment for…

command-and-controlexploitationlabs-practice+4
22 years ago
CVE-2024-48887-Exploit preview

CVE-2024-48887-Exploit

GitHubgroshi215/cve-2024-48887-exploit

Unverified Password Change (CWE-620)

authenticationexploitationpenetration-testing+3
21 year ago
CVE-2020-0618 preview

CVE-2020-0618

GitHubitstarsec/cve-2020-0618

Melissa

command-and-controlexploitationpayload-generation+2
24 years ago
CVE-2024-24386 preview

CVE-2024-24386

GitHuberick-duarte/cve-2024-24386

Proof-of-concept exploit for a command injection vulnerability in VitalPBX Task Manager module, demonstrating reverse shell payload delivery via cron…

command-and-controlexploitationpenetration-testing+3
22 years ago
CVE-2019-3396-Memshell-for-Behinder preview

CVE-2019-3396-Memshell-for-Behinder

GitHubavento/cve-2019-3396-memshell-for-behinder

CVE-2019-3396 Memshell for Behinder

command-and-controlexploitationpayload-development+3
22 years ago
CVE-2021-46704-POC preview

CVE-2021-46704-POC

GitHubmithatguner/cve-2021-46704-poc

CVE-2021-46704 GenieACS Command Injection POC

command-and-controlexploitationpenetration-testing+2
23 years ago
Previous1…9899100Next