Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
871 results
CVE-2020-17519 preview

CVE-2020-17519

GitHubqmf0c3uk/cve-2020-17519

Exploit for CVE-2020-17519 targeting Apache Flink directory traversal vulnerability. Enables unauthenticated remote file read for security testing…

exploitationpenetration-testingreconnaissance+2
1
5 years ago
CVE-2026-41089-Netlogon-RCE-PoC preview

CVE-2026-41089-Netlogon-RCE-PoC

GitHubsyntaxmethod/cve-2026-41089-netlogon-rce-poc

Proof-of-concept exploit for CVE-2026-41089, a Netlogon remote code execution vulnerability in Windows Active Directory environments, for security…

educationexploitationpenetration-testing+3
321 month ago
flashingestor preview

flashingestor

GitHubmacmod/flashingestor

TUI-based Active Directory data collector that ingests LDAP objects, performs remote RPC/SMB/HTTP collection, and generates BloodHound CE-compatible…

information-gatheringnetwork-mappingpenetration-testing+2
1787 months ago
WSOB preview

WSOB

GitHubdsssssssm/wsob

Python exploit tool for CVE-2022-29464, enabling unrestricted file upload and remote code execution on vulnerable WSO2 products via directory…

exploitationpenetration-testingred-teaming+2
263 years ago
Exploit-CVE-2026-1357 preview

Exploit-CVE-2026-1357

GitHubitsismarcos/exploit-cve-2026-1357

Exploit for CVE-2026-1357 in WordPress WPVivid plugin, enabling remote code execution via crafted AES-encrypted payloads and directory traversal to…

exploitationpayload-developmentpenetration-testing+2
18 months ago
CVE-2024-57784 preview

CVE-2024-57784

GitHubs4fv4n/cve-2024-57784

Exploit for CVE-2024-57784: authenticated directory traversal in Zenitel AlphaWeb XE 11.2.3.10. Enables remote file reading via HTTP GET requests…

exploitationinformation-gatheringpenetration-testing+2
1 year ago
CVE-2002-0347 preview

CVE-2002-0347

GitHubalt3kx/cve-2002-0347

Directory traversal vulnerability in Cobalt RAQ 4 allows remote attackers to read password-protected files, and possibly files outside the web root,…

exploitationinformation-gatheringreconnaissance+2
8 years ago
CVE-2024-32399 preview

CVE-2024-32399

GitHubnn0b0dy/cve-2024-32399

Proof-of-concept exploit for directory traversal vulnerability (CVE-2024-32399) in RaidenMAILD Mail Server <=4.9.4, demonstrating remote sensitive…

exploitationinformation-gatheringpenetration-testing+2
12 years ago
CVE-2015-5531-POC preview

CVE-2015-5531-POC

GitHubmoch3n/cve-2015-5531-poc

Proof-of-concept exploit for CVE-2015-5531, a directory traversal vulnerability in Elasticsearch 1.6.1 and earlier, allowing remote file read via…

exploitationinformation-gatheringpenetration-testing+2
24 years ago
CVE-2023-51127 preview

CVE-2023-51127

GitHubrisuxx/cve-2023-51127

Discloses CVE-2023-51127, a directory traversal vulnerability in FLIR AX8 thermal cameras allowing unauthenticated remote attackers to read arbitrary…

exploitationinformation-gatheringpenetration-testing+2
12 years ago
CVE-2025-43919-POC preview

CVE-2025-43919-POC

GitHubcybersecplayground/cve-2025-43919-poc

A new vulnerability has been discovered in GNU Mailman 2.1.39, bundled with cPanel/WHM, allowing unauthenticated remote attackers to read arbitrary…

exploitationinformation-gatheringpenetration-testing+3
11 year ago
CVE-2013-6987 preview

CVE-2013-6987

GitHubstoicboomer/cve-2013-6987

exploit for DNS 4.3

exploitationinformation-gatheringpenetration-testing+2
6 years ago
SessionGopher preview

SessionGopher

GitHubarvanaghi/sessiongopher

SessionGopher is a PowerShell tool that uses WMI to extract saved session information for remote access tools such as WinSCP, PuTTY, SuperPuTTY,…

information-gatheringlateral-movementpenetration-testing+3
1.3k7 years ago
spraykatz preview

spraykatz

GitHubaas-n/spraykatz

Credentials gathering tool automating remote procdump and parse of lsass process.

information-gatheringlateral-movementpenetration-testing+1
7836 years ago
TaskHound preview

TaskHound

GitHub1r0bit/taskhound

Tool to enumerate privileged Scheduled Tasks on Remote Systems

information-gatheringlateral-movementpenetration-testing+4
3121 month ago
RDWAtool preview

RDWAtool

GitHubp0dalirius/rdwatool

A python script to extract information from a Microsoft Remote Desktop Web Access (RDWA) application

information-gatheringpassword-attacksreconnaissance+1
1229 months ago
sccmsqlclient preview

sccmsqlclient

GitHubsynacktiv/sccmsqlclient

MSSQL client for SCCM environments, enabling reconnaissance, remote PowerShell execution on managed clients, and extraction of sensitive secrets such…

database-securityexploitationinformation-gathering+6
324 months ago
hekate preview

hekate

GitHubsourceincite/hekate

Exploit for VMWare Workspace ONE Access chaining five CVEs for unauthenticated remote code execution via JDBC injection and privilege escalation.

authentication-authorizationexploitationinformation-gathering+5
484 years ago
Previous12…49Next