Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

MFA, SSO, passwordless, biometric, and identity provider tools.

Kitploit recommended

Top tools

10 selected

keycloak

keycloak/keycloak

37.7k20h 51m ago

hydra

ory/hydra

17.6k3 months ago

dex

dexidp/dex

11.2k8h 53m ago

authelia

authelia/authelia

28.5k10h 57m ago

authentik

goauthentik/authentik

26.3k0 days ago

zitadel

zitadel/zitadel

15.5k3 days ago

oauth2-proxy

oauth2-proxy/oauth2-proxy

15.3k2 days ago

pomerium

pomerium/pomerium

5.1k0 days ago

spire

spiffe/spire

2.6k1 day ago

#10

auth

supabase/auth

2.6k17h 59m ago

Newest Relevance Most popular Recently updated

1423 results

hostap

jmalinen/hostap

Clone of w1.fi hostap.git - NOTE: This is not the main development location and pull requests for this repository are ignored. See the upstream…

wi-fi-auditingwireless-securityauthentication

166 years ago

AdvSim.Cryptography

fuzzysecurity/advsim.cryptography

Simple and sane cryptographic wrapper library.

encryption-decryption-toolscryptographyutilities-frameworks+1

333 years ago

exploit-mikrotik-2026

blackhatexploitation/exploit-mikrotik-2026

CVE-2026-67276 MikroTik RouterOS SSH Authentication Bypass Exploit

reconnaissancevulnerability-analysisexploitation+4

152 months ago

watchTowr-vs-CrushFTP-Authentication-Bypass-CVE-2025-54309

watchtowrlabs/watchtowr-vs-crushftp-authentication-bypass-cve-2025-54309

Proof-of-concept exploit for CVE-2025-54309, demonstrating an authentication bypass via race condition in CrushFTP WebInterface to enumerate users.

vulnerability-analysisexploitationinformation-gathering+3

281 year ago

CVE-2024-3183-POC

im10n/cve-2024-3183-poc

POC for CVE-2024-3183 (FreeIPA Rosting)

password-attacksvulnerability-analysisexploitation+2

292 years ago

cacti-cve-2022-46169-exploit

ariyaadinatha/cacti-cve-2022-46169-exploit

This is poc of CVE-2022-46169 authentication bypass and remote code execution

vulnerability-analysisexploitationweb-application-exploitation+3

153 years ago

OWASP-WSTG-Rag

zilbonn/owasp-wstg-rag

OWASP Web Security Testing Guide RAG system with ChromaDB, MCP for Claude Code

vulnerability-analysisapi-security-testinginformation-gathering+8

2211 months ago

CVE-2022-23131

kh4sh3i/cve-2022-23131

Python exploit for CVE-2022-23131 targeting Zabbix SAML SSO authentication bypass. Includes Shodan and FOFA dorks for vulnerable instance discovery.

vulnerability-analysisexploitationweb-application-exploitation+3

154 years ago

kl-security-key

karaaslanlabs/kl-security-key

Experimental RP2040 FIDO2/WebAuthn authenticator with packed attestation and documented Windows/Entra interoperability

embedded-systems-securityiot-securitycryptography+6

921 days ago

CVE-2026-20127

sfewer-r7/cve-2026-20127

Exploit for Cisco Catalyst SD-WAN Controller authentication bypass (CVE-2026-20127) that forges DTLS CHALLENGE_ACK_ACK messages to gain unauthorized…

vulnerability-analysisexploitationnetwork-security+3

248 months ago

keycloak-cve-2026-18963-hunt

kyos-public/keycloak-cve-2026-18963-hunt

Hunt for CVE-2026-18963 exploitation traces (Keycloak unauthenticated account takeover) in the Keycloak database

vulnerability-analysisdigital-forensicsauthentication+3

169 days ago

cve-2026-82329-jfrog-artifactory

dinosn/cve-2026-82329-jfrog-artifactory

Reproducible Docker lab and Python PoC for CVE-2026-82329, an unauthenticated auth-bypass in JFrog Artifactory leading to admin takeover, with…

vulnerability-analysisexploitationweb-application-exploitation+5

122 months ago

password_generator

krishnakanthb13/password_generator

A production-ready, cryptographically secure password generator CLI with 17 generation modes, entropy transparency, and comprehensive customization…

general-purpose-utilitiespassword-crackingencryption-decryption-tools+3

248 months ago

CVE-2026-mikrotik-poc

gagaltotal/cve-2026-mikrotik-poc

MikroTik RouterOS PoC Collection - CVE-2026-86060 - CVE-2026-67279 - CVE-2026-67276 RouterOS SSH

embedded-systems-securityvulnerability-analysisexploitation+5

71 month ago

UltraRealy_with_CVE-2019-1040

lazaars/ultrarealy_with_cve-2019-1040

Updated version for the tool UltraRealy with support of the CVE-2019-1040 exploit

privilege-escalationvulnerability-analysisexploitation+7

207 years ago

WantasticCore

wantasticapp/wantasticcore

AIO Cloud Managment Server

container-securityiot-securityweb-proxies-interception+6

1422 days ago

watchTowr-vs-Ivanti-Sentry-RCE-CVE-2026-10520-CVE-2026-10523

watchtowrlabs/watchtowr-vs-ivanti-sentry-rce-cve-2026-10520-cve-2026-10523

Python-based detection artifact generator for Ivanti Sentry authentication bypass and remote code execution vulnerabilities (CVE-2026-10520,…

vulnerability-scannersexploitationweb-application-exploitation+3

145 months ago

PKCS11SSHAgent

sanmilie/pkcs11sshagent

SRO PKCS11 – SSH Agent CNG est un agent Windows souverain, ultra‑léger et zéro‑dépendance qui unifie PKCS#11, SSH-agent, Pageant et CNG/Smartcard…

encryption-decryption-toolscryptographyhardware-security+3

248 months ago

Previous 1…262728…80 Next