Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
198 results
CVE-2011-2523-exploit preview

CVE-2011-2523-exploit

GitHubdahalsamir/cve-2011-2523-exploit

Python exploit for vsFTPd 2.3.4 backdoor (CVE-2011-2523) that triggers a hidden shell on port 6200 via a crafted username, enabling remote command…

binary-exploitationcommand-and-controleducation+5
6 months ago
CVE-2021-3156-Sudo-Buffer-Overflow-Linux preview

CVE-2021-3156-Sudo-Buffer-Overflow-Linux

GitHubrana-ali93/cve-2021-3156-sudo-buffer-overflow-linux

Red Team exploitation of CVE-2021-3156 (Baron Samedit) – Heap Buffer Overflow in Sudo leading to Local Privilege Escalation on Ubuntu 20.04

binary-exploitationeducationexploitation+5
7 months ago
Exploitation-of-a-Remote-Code-Execution-vulnerability--CVE-2024-7954- preview

Exploitation-of-a-Remote-Code-Execution-vulnerability--CVE-2024-7954-

GitHubshivanshkuntal/exploitation-of-a-remote-code-execution-vulnerability--cve-2024-7954-

Exploitation of a Remote Code Execution vulnerability- (CVE-2024-7954)

educationexploitationinformation-gathering+8
110 months ago
Vulnerable-Lab-Exploitation preview

Vulnerable-Lab-Exploitation

GitHubhackhermind-pixel/vulnerable-lab-exploitation

A hands-on project demonstrating the setup of virtual security lab, network reconnaissance, and exploitation of CVE-2012-1823.

educationexploitationinformation-gathering+8
18 months ago
CVE-2023-4220 preview

CVE-2023-4220

GitHubgmh5225/cve-2023-4220

CVE-2023-4220 POC RCE

educationexploitationpenetration-testing+2
2 years ago
wordpress-rce-vapt-cve-2020-25213 preview

wordpress-rce-vapt-cve-2020-25213

GitHubcmadhushanka/wordpress-rce-vapt-cve-2020-25213

Educational cybersecurity project demonstrating exploitation and mitigation of CVE-2020-25213 (WordPress File Manager Plugin RCE). Includes malware…

educationexploitationlabs-practice+6
5 months ago
Demonstration-of-CVE-2023-38831-via-Reverse-Shell-Execution preview

Demonstration-of-CVE-2023-38831-via-Reverse-Shell-Execution

GitHubtolu12wani/demonstration-of-cve-2023-38831-via-reverse-shell-execution

This project demonstrates a simulated exploitation of the WinRAR vulnerability CVE-2023-38831 to execute a reverse shell. The purpose of this task…

educationexploitationpayload-generation+3
1 year ago
CVE-2025-70149-SQL-Injection preview

CVE-2025-70149-SQL-Injection

GitHubanusha-khan29/cve-2025-70149-sql-injection

Security research project — SQL Injection vulnerability exploitation and mitigation

database-securityeducationlabs-practice+3
2 months ago
CVE-2025-24071 preview

CVE-2025-24071

GitHubac8999/cve-2025-24071

Python script to execute CVE-2025-24071

exploitationinformation-gatheringpassword-cracking+3
1 year ago
it355-lab4-enterprise-lan-security preview

it355-lab4-enterprise-lan-security

GitHubambjlou/it355-lab4-enterprise-lan-security

This repository contains a comprehensive security assessment of an enterprise LAN environment. The core focus of this project was the identification,…

educationexploitationincident-response+4
6 months ago
Detect-BlueKeep preview

Detect-BlueKeep

GitHubtranqtruong/detect-bluekeep

a simple tool to detect the exploitation of BlueKeep vulnerability (CVE-2019-0708)

educationexploitationintrusion-detection+3
11 year ago
CVE-2023-32243-Detection-and-Mitigation-in-WordPress preview

CVE-2023-32243-Detection-and-Mitigation-in-WordPress

GitHubdev0558/cve-2023-32243-detection-and-mitigation-in-wordpress

Educational lab demonstrating detection and mitigation of CVE-2023-32243 privilege escalation in WordPress Essential Addons for Elementor, using…

educationexploitationlabs-practice+6
1 year ago
CVE-2026-8838-Mitigation-and-Detection preview

CVE-2026-8838-Mitigation-and-Detection

GitHubsana-404/cve-2026-8838-mitigation-and-detection

Detection and mitigation scripts for CVE-2026-8838, providing vulnerability scanning, configuration auditing, and incident response guidance to…

configuration-auditingincident-responseintrusion-detection+3
2 months ago
log4shell-homework9 preview

log4shell-homework9

GitHubserpilrivas/log4shell-homework9

Log4Shell (CVE-2021-44228) exploit demo for SEAS 8405. Includes a vulnerable Spring Boot app, fake LDAP server, Docker setup, MITRE mapping, incident…

educationexploitationincident-response+3
1 year ago
MegaQuagga_Pentesting_Report preview

MegaQuagga_Pentesting_Report

GitHubaktia1/megaquagga_pentesting_report

Web application penetration testing project targeting a WordPress environment. Includes exploitation of CVE-2019-9978, reverse shell execution,…

educationexploitationpenetration-testing+5
5 months ago
Folina-Vulnerability-Exploitation-Detection-and-Mitigation preview

Folina-Vulnerability-Exploitation-Detection-and-Mitigation

GitHubrathoreabhiii/folina-vulnerability-exploitation-detection-and-mitigation

Project Repository for Exploitation, Detection and Mitigation of Folina Vulnerability (CVE-2022-30190)

educationexploitationincident-response+3
1 year ago
shennina preview

shennina

GitHubmazen160/shennina

Automating Host Exploitation with AI

ai-securitycommand-and-controldata-exfiltration+5
5563 years ago
ZeroLogon-PoC-DC-Pwn preview

ZeroLogon-PoC-DC-Pwn

GitHubmods20hh/zerologon-poc-dc-pwn

Zerologon (CVE-2020-1472) Proof-of-Concept application - Critical Active Directory vulnerability exploitation tool.

educationexploitationpapers-research+6
42 months ago
Previous12…11Next