Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
656 results
CVE-2018-15961 preview

CVE-2018-15961

GitHubvah13/cve-2018-15961

Unrestricted file upload in Adobe ColdFusion

exploitationpayload-generationpenetration-testing+3
97 years ago
exploit-CVE-2018-15139 preview

exploit-CVE-2018-15139

GitHubsec-it/exploit-cve-2018-15139

OpenEMR < 5.0.1.4 - (Authenticated) File upload - Remote command execution

exploitationpenetration-testingvulnerability-analysis+1
25 years ago
CVE-2024-5084 preview

CVE-2024-5084

GitHubktn1990/cve-2024-5084

WordPress Hash Form – Drag & Drop Form Builder <= 1.1.0 - Unauthenticated Arbitrary File Upload to Remote Code Execution

exploitationpayload-generationpenetration-testing+3
2 years ago
WeblogicScan preview

WeblogicScan

GitHubrabbitmask/weblogicscan

Automated vulnerability scanner for Oracle WebLogic Server, detecting historical CVEs including deserialization, SSRF, and arbitrary file upload with…

exploitationinformation-gatheringpenetration-testing+3
2.3k3 years ago
fuxploider preview

fuxploider

GitHubalmandin/fuxploider

File upload vulnerability scanner and exploitation tool.

exploitationpenetration-testingvulnerability-scanners+1
3.3k1 year ago
CVE-2022-29464 preview

CVE-2022-29464

GitHubhakivvi/cve-2022-29464

Python exploit for CVE-2022-29464, an unauthenticated arbitrary file upload vulnerability in WSO2 servers, enabling remote code execution via…

exploitationpayload-generationpenetration-testing+3
3774 years ago
Upload_Bypass preview

Upload_Bypass

GitHubsajibuu/upload_bypass

A simple tool for bypassing file upload restrictions.

exploitationpayload-generationpenetration-testing+2
9062 years ago
RAU_crypto preview

RAU_crypto

GitHubbao7uo/rau_crypto

Telerik UI for ASP.NET AJAX File upload and .NET deserialisation exploit (CVE-2017-11317, CVE-2017-11357, CVE-2019-18935)

encryption-decryption-toolsexploitationpayload-generation+3
1806 years ago
FUSE preview

FUSE

GitHubwsp-lab/fuse

A penetration testing tool for finding file upload bugs (NDSS 2020)

penetration-testingvulnerability-analysisweb-security
2575 years ago
cve-2021-22005-exp preview

cve-2021-22005-exp

GitHubshmilylty/cve-2021-22005-exp

Exploit for CVE-2021-22005, a pre-auth arbitrary file upload vulnerability in VMware vCenter Server, enabling remote code execution via webshell…

exploitationpenetration-testingremote-access-tool+2
1944 years ago
cve-2019-2618 preview

cve-2019-2618

GitHubjas502n/cve-2019-2618

Exploit script for CVE-2019-2618, a Weblogic arbitrary file upload vulnerability, with JSP webshell deployment and encrypted credential decryption.

encryption-decryption-toolsexploitationpassword-attacks+3
1737 years ago
CVE-2018-2894 preview

CVE-2018-2894

GitHublandgrey/cve-2018-2894

CVE-2018-2894 WebLogic Unrestricted File Upload Lead To RCE Check Script

exploitationpayload-generationpenetration-testing+2
1408 years ago
juniper-rce_cve-2023-36844 preview

juniper-rce_cve-2023-36844

GitHubwatchtowrlabs/juniper-rce_cve-2023-36844

Proof-of-concept exploit chaining four CVEs (CVE-2023-36844-47) for pre-authentication remote code execution on Juniper JunOS SRX and EX series…

exploitationpayload-developmentpenetration-testing+3
1153 years ago
CVE-2023-50164-Apache-Struts-RCE preview

CVE-2023-50164-Apache-Struts-RCE

GitHubjakabakos/cve-2023-50164-apache-struts-rce

A critical security vulnerability, identified as CVE-2023-50164 (CVE: 9.8) was found in Apache Struts, allowing attackers to manipulate file upload…

educationexploitationpayload-development+3
8510 months ago
JQShell preview

JQShell

GitHubstahlz/jqshell

Automated exploit tool for CVE-2018-9206 (jQuery File Upload) with single/multi-target scanning, Tor proxy support, and output logging for…

educationexploitationpenetration-testing+2
627 years ago
CVE-2024-53677-S2-067 preview

CVE-2024-53677-S2-067

GitHubtam-k592/cve-2024-53677-s2-067

A critical vulnerability, CVE-2024-53677, has been identified in the popular Apache Struts framework, potentially allowing attackers to execute…

exploitationpayload-developmentpenetration-testing+3
951 year ago
Check-WP-CVE-2020-35489 preview

Check-WP-CVE-2020-35489

GitHubdn9uy3n/check-wp-cve-2020-35489

The (WordPress) website test script can be exploited for Unlimited File Upload via CVE-2020-35489

exploitationpenetration-testingvulnerability-scanners+2
325 years ago
CVE-2019-19634 preview

CVE-2019-19634

GitHubjra89/cve-2019-19634

This is a filter bypass exploit that results in arbitrary file upload and remote code execution in class.upload.php <= 2.0.4

code-analysisexploitationpayload-generation+3
366 years ago
Previous12…37Next