Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
15435 results
prestashop-exploits preview

prestashop-exploits

GitHubambionics/prestashop-exploits

Collection of exploits/POC for PrestaShop cookie vulnerabilities (CVE-2018-13784)

exploitationpayload-generationpenetration-testing+2
50
8 years ago
CVE-2021-44228-Log4j-Payloads preview

CVE-2021-44228-Log4j-Payloads

GitHubcrackercat/cve-2021-44228-log4j-payloads

Collection of payloads for exploiting the Log4j remote code execution vulnerability (CVE-2021-44228), including JNDI injection strings and bypass…

exploitationpayload-generationpenetration-testing+2
34 years ago
img-payloads preview

img-payloads

GitHubcoffinxp/img-payloads

Curated collection of image-based payloads for authorized red-team testing and security education, with HTML examples for generating or embedding web…

curated-resourceseducationexploitation+3
1891 year ago
wordpress-hacking preview

wordpress-hacking

GitHubstealthcopter/wordpress-hacking

A collection of useful resources for hacking WordPress and it's plugins and themes

curated-resourcesdynamic-code-analysisexploitation+4
911 year ago
easy-exploits preview

easy-exploits

GitHubefchatz/easy-exploits

Curated collection of proof-of-concept exploits for 16 CVEs targeting web applications (ASUS, D-Link, Netgear, TP-Link, Xiaomi) and Wi-Fi WPA3-SAE,…

educationexploitationpenetration-testing+3
164 years ago
PAYLOAD-LISTS preview

PAYLOAD-LISTS

GitHubnu11secur1ty/payload-lists

Curated collection of injection payloads for web application security testing, covering SSTI, XXE, XSS, SSRF, SQLi, NoSQLi, LDAP, command injection,…

curated-resourceseducationpayload-generation+3
52 months ago
CVEs preview

CVEs

GitHubburaksevben/cves

Curated collection of proof-of-concept exploits for web vulnerabilities including cross-site scripting and SQL injection, with detailed technical…

curated-resourcesexploitationpapers-research+2
102 years ago
pentaho-exploits preview

pentaho-exploits

GitHubdwbzn/pentaho-exploits

Collection of exploit scripts for Pentaho business analytics platform, targeting authentication bypass, command injection, and other security flaws…

exploitationpenetration-testingvulnerability-analysis+1
82 years ago
VmWare-vCenter-vulnerability preview

VmWare-vCenter-vulnerability

GitHubvulnmachines/vmware-vcenter-vulnerability

Collection of Proof-of-Concept exploits for VMware vCenter vulnerabilities enabling RCE, SSRF, and arbitrary file read. Includes Shodan query for…

exploitationpenetration-testingreconnaissance+2
84 years ago
CVE-2019-7214 preview

CVE-2019-7214

GitHubdevzspy/cve-2019-7214

Collection of PoCs created for SmarterMail < Build 6985 RCE

exploitationpayload-developmentpenetration-testing+2
25 years ago
Metasploit-Exploits-CVE-2023-6710 preview

Metasploit-Exploits-CVE-2023-6710

GitHubdedsec-47/metasploit-exploits-cve-2023-6710

Welcome to the Metasploit Exploits Repository, your go-to resource for a comprehensive collection of cutting-edge exploits designed for penetration…

educationexploit-frameworkspayload-development+4
12 years ago
cve preview

cve

GitHubfollowboy1999/cve

Collection of proof-of-concept exploits for specific CVEs, demonstrating vulnerabilities in web applications and other software.

exploitationvulnerability-analysisweb-application-exploitation
16 years ago
cve-2025-55182 preview

cve-2025-55182

GitHubprestonhashworth/cve-2025-55182

CVE-2025-55182 testing toolkit with Postman collection, cURL examples, and F5 WAF signature validation for vulnerability assessment and protection…

api-security-testingexploitationpenetration-testing+3
10 months ago
vmp2 preview
Archived

vmp2

GitHubaftermathlabs/vmp2

Unpack and deobfuscate VMProtect 2 protected binaries with an emulation-based VM explorer, handler profiler, and experimental LLVM recompiler for…

binary-analysiscode-analysisdynamic-code-analysis+3
13211 months ago
Vulns preview

Vulns

GitHubstrik3r0x1/vulns

Collection of public proof-of-concept exploits for multiple CVEs, providing vulnerability demonstration code and references for security research and…

curated-resourcesexploitationpapers-research+2
511 months ago
xss-payload-list preview

xss-payload-list

GitHubh3x0v3rl0rd/xss-payload-list

Curated collection of XSS payload vectors for web application security testing, covering various contexts and bypass techniques.

curated-resourceseducationvulnerability-analysis+2
5 years ago
Writeups preview

Writeups

GitHubserotav/writeups

Collection of detailed and optimized(?) write-ups for various CTF challenges

binary-exploitationctfeducation+5
101 month ago
Hacking-Cheatsheets preview

Hacking-Cheatsheets

GitHubilias1988/hacking-cheatsheets

A comprehensive collection of penetration testing cheatsheets, guides, and tools.

curated-resourcesdigital-forensicseducation+9
5671 month ago
Previous12…100Next