Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
29 results
CVE-2017-16995 preview

CVE-2017-16995

GitHubgugronnier/cve-2017-16995

Exploit adapted for a specific PoC on Ubuntu 16.04.01

binary-exploitationexploitationpenetration-testing+2
1
7 years ago
nextjs-cve-2026-23870-checker preview

nextjs-cve-2026-23870-checker

GitHubemresandikci/nextjs-cve-2026-23870-checker

Checker and fixer for all 13 vulnerabilities in the Next.js May 2026 security release (CVE-2026-23870)

code-analysisdevsecopsmisconfiguration+3
3 months ago
CVE-2020-1967 preview

CVE-2020-1967

GitHubirsl/cve-2020-1967

Proof-of-concept exploit for OpenSSL CVE-2020-1967, a denial-of-service vulnerability in TLS 1.3 signature_algorithms_cert handling, with…

binary-exploitationexploitationpenetration-testing+1
206 years ago
CVE-2025-23048-POC preview

CVE-2025-23048-POC

GitHubabsholi7ly/cve-2025-23048-poc

Apache HTTP Server versions 2.4.35 – 2.4.63 are vulnerable to a client certificate authentication bypass when TLS 1.3 session resumption is used…

authenticationexploitationpenetration-testing+3
410 months ago
CVE-2024-53345 preview

CVE-2024-53345

GitHubshadowbyte1/cve-2024-53345

Critical 0 Day in Car Rental Management System Versions 1.0 - 1.3

exploitationpayload-generationprivilege-escalation+3
11 year ago
CVE-2019-7609 preview

CVE-2019-7609

GitHubtoxxxaka/cve-2019-7609

New CVE-2019-7609 which works with python 13

exploitationpayload-generationpenetration-testing+3
6 months ago
CVE-2024-48245 preview

CVE-2024-48245

GitHubshadowbyte1/cve-2024-48245

SQL Injection Vulnerability in Vehicle Management System 1.0 - 1.3

database-securityexploitationpenetration-testing+3
11 year ago
CVE-2024-50507 preview

CVE-2024-50507

GitHubrandomrobbiebf/cve-2024-50507

DS.DownloadList <= 1.3 - Unauthenticated PHP Object Injection

code-analysisexploitationpenetration-testing+3
1 year ago
CVE-2007-3831 preview

CVE-2007-3831

GitHubalt3kx/cve-2007-3831

PHP remote file inclusion in main.php in ISS Proventia Network IPS GX5108 1.3 and GX5008 1.5

exploitationinformation-gatheringpapers-research+3
8 years ago
CVE-2024-41290 preview

CVE-2024-41290

GitHubparagbagul111/cve-2024-41290

FlatPress CMS v1.3.1 1.3 was discovered to use insecure methods to > store authentication data

authenticationexploitationinformation-gathering+3
1 year ago
CVE-2024-33210 preview

CVE-2024-33210

GitHubparagbagul111/cve-2024-33210

A cross-site scripting (XSS) vulnerability has been identified in Flatpress 1.3. This vulnerability allows an attacker to inject malicious scripts…

exploitationpenetration-testingvulnerability-analysis+2
1 year ago
CVE-2024-33209 preview

CVE-2024-33209

GitHubparagbagul111/cve-2024-33209

FlatPress 1.3. is vulnerable to Cross Site Scripting (XSS). An attacker can inject malicious JavaScript code into the "Add New Entry" section, which…

exploitationpenetration-testingvulnerability-analysis+2
1 year ago
CVE-2020-16898 preview

CVE-2020-16898

GitHubadvanced-threat-research/cve-2020-16898

CVE-2020-16898 (Bad Neighbor) Microsoft Windows TCP/IP Vulnerability Detection Logic and Rule

exploitationintrusion-detectionnetwork-security+1
2095 years ago
ACEDcup preview

ACEDcup

GitHubgrrrdog/acedcup

Payload generator for Java Binary Deserialization attack with Commons FileUpload (CVE-2013-2186)

exploitationpayload-generationpenetration-testing+2
3710 years ago
ARC-Browser-Address-Bar-Spoofing-PoC preview

ARC-Browser-Address-Bar-Spoofing-PoC

GitHubhackintoanetwork/arc-browser-address-bar-spoofing-poc

Proof-of-concept exploit for CVE-2024-25733 demonstrating address bar spoofing in ARC Browser on iOS/iPadOS using JavaScript-based navigation…

exploitationios-securitymobile-security+2
62 years ago
CopyFail preview

CopyFail

GitHub1neptune/copyfail

go CVE-2026-31431 (CopyFail) local privilege escalation exploit

binary-exploitationcontainer-escapeexploitation+3
22 months ago
CVE-2021-45745 preview

CVE-2021-45745

GitHubsanupl/cve-2021-45745

CVE-2021-45745 - A Stored Cross Site Scripting (XSS) vulnerability exists in Bludit 3.13.1 via the About Plugin in login panel. Application stores…

exploitationpenetration-testingvulnerability-analysis+2
13 months ago
CVE-2021-45744 preview

CVE-2021-45744

GitHubsanupl/cve-2021-45744

CVE-2021-45744 - A Stored Cross Site Scripting (XSS) vulnerability exists in bludit 3.13.1 via the TAGS section in login panel. Application stores…

exploitationpenetration-testingvulnerability-analysis+2
13 months ago
Previous12Next