Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Categories

Authentication

MFA, SSO, passwordless, biometric, and identity provider tools.

Kitploit recommended

Top tools

10 selected
keycloak preview#1

keycloak

GitHubkeycloak/keycloak
37.7k11h 48m ago
hydra preview#2

hydra

GitHubory/hydra
17.6k3 months ago
dex preview#3

dex

GitHubdexidp/dex
11.2k1 day ago
authelia preview#4

authelia

GitHubauthelia/authelia
28.5k36 minutes ago
authentik preview#5

authentik

GitHubgoauthentik/authentik
26.2k7h 46m ago
zitadel preview#6

zitadel

GitHubzitadel/zitadel
15.5k1 day ago
oauth2-proxy preview#7

oauth2-proxy

GitHuboauth2-proxy/oauth2-proxy
15.3k1 month ago
pomerium preview#8

pomerium

GitHubpomerium/pomerium
5.1k6h 59m ago
spire preview#9

spire

GitHubspiffe/spire
2.6k12h 54m ago
auth preview#10

auth

GitHubsupabase/auth
2.6k7h 56m ago
NewestRelevanceMost popularRecently updated
1390 results
CVE-2026-11387 preview

CVE-2026-11387

GitHub1beelze/cve-2026-11387

Exploits unauthenticated privilege escalation in SMS Alert WooCommerce plugin (CVE-2026-11387) via OTP bypass and arbitrary password reset, with…

password-attacksvulnerability-analysisexploitation+4
14 months ago
poc-CVE-2026-0073 preview

poc-CVE-2026-0073

GitHubxqi1337/poc-cve-2026-0073

CVE-2026-0073 - ADB Wireless Mutual Authentication Bypass PoC

android-securityvulnerability-analysisexploitation+3
14 months ago
CVE-2026-56782-Gorse-Auth-Bypass preview

CVE-2026-56782-Gorse-Auth-Bypass

GitHubbiitts/cve-2026-56782-gorse-auth-bypass

CVE-2026-56782 — Gorse <0.5.10 unauthenticated DB dump/restore (admin_api_key fail-open). Lab + PoC, verified e2e.

vulnerability-analysisexploitationdata-exfiltration+6
14 months ago
cve-2026-43515-poc preview

cve-2026-43515-poc

GitHubcovepseng/cve-2026-43515-poc

Exploitability PoC for CVE-2026-43515 (Apache Tomcat constraint bypass).

vulnerability-analysisexploitationweb-application-exploitation+3
14 months ago
pam_pkcs11 preview

pam_pkcs11

GitHubx41sec/pam_pkcs11

pam_pkcs11 Bugfix

authentication-authorizationcryptographyhardware-security+2
28 years ago
keycloak preview

keycloak

GitHubmuhammedhussein17/keycloak

Security research disclosing CVE-2026-9794, an unauthenticated client ID enumeration flaw in Keycloak SAML ECP via faultstring oracle, fixed in…

identity-managementvulnerability-analysisinformation-gathering+3
5 months ago
CPanel-Audit-Remediation-Tool preview

CPanel-Audit-Remediation-Tool

GitHubunderh0st/cpanel-audit-remediation-tool

Audit and incident response tool for CVE-2026-41940 vulnerability

vulnerability-scannersconfiguration-auditingweb-security+3
6 months ago
CVE-2021-27876 preview

CVE-2021-27876

GitHubwingerbijay/cve-2021-27876

Unauthenticated RCE exploit for Veritas Backup Exec Agent (CVE-2021-27876/77/78) — SHA auth bypass to SYSTEM via NDMP

privilege-escalationvulnerability-analysisexploitation+3
14 months ago
CVE-2026-8181 preview

CVE-2026-8181

GitHubxshadow-here/cve-2026-8181

CVE-2026-8181 | Burst Statistics 3.4.0 - 3.4.1.1 - Authentication Bypass to Admin Account Takeover

privilege-escalationreconnaissancepassword-attacks+6
15 months ago
Active-Directory-BadSuccessor preview

Active-Directory-BadSuccessor

GitHubmusa-xvi/active-directory-badsuccessor

A TryHackme room covering the CVE-2025-53779 exploitation using windows

privilege-escalationreconnaissanceexploitation+6
5 months ago
PetitPotam preview

PetitPotam

GitHubcorelight/petitpotam

Detects NTLM relay attacks via PetitPotam exploit using Zeek, distinguishing successful and unsuccessful attempts by analyzing DCERPC return codes.

defensive-toolsnetwork-securityauthentication+2
15 years ago
CVE-2025-48827 preview

CVE-2025-48827

GitHubsh4den/cve-2025-48827

This repository contains a proof-of-concept exploit for CVE-2025-48827, a critical authentication bypass vulnerability affecting vBulletin…

vulnerability-analysisexploitationweb-application-exploitation+3
14 months ago
Flowise-CVE-2025-58434-Chain-59528 preview

Flowise-CVE-2025-58434-Chain-59528

GitHub0xdaeras/flowise-cve-2025-58434-chain-59528

FlowiseAI CVE-2025-58434 & CVE-2025-59528 exploit PoC, demonstrating unauthenticated ATO via reset token leakage, followed by authenticated RCE.…

vulnerability-analysisexploitationweb-application-exploitation+4
15 months ago
CVE-2026-51788 preview

CVE-2026-51788

GitHubaykhan32/cve-2026-51788

Detailed CVE-2026-51788 advisory for a DoS vulnerability in cleverange_auth v0.1.10, with technical analysis, CVSS scoring, and mitigation guidance…

vulnerability-analysisweb-securityauthentication+3
3 months ago
CVE-2026-44338-Lab preview

CVE-2026-44338-Lab

GitHubrootdirective-sec/cve-2026-44338-lab

Docker-based lab demonstrating CVE-2026-44338 authentication bypass in PraisonAI's legacy Flask API. Includes vulnerable and patched services with…

vulnerability-analysisweb-application-exploitationpenetration-testing+3
5 months ago
CVE-2026-28766 preview

CVE-2026-28766

GitHubmichaeladamgroberman/cve-2026-28766

CVE-2026-28766: Missing Authentication on User Account Endpoint — Gardyn Home Kit (ICSA-26-055-03)

iot-securityvulnerability-analysisinformation-gathering+3
5 months ago
Ssh Mitm preview

Ssh Mitm

GitLabssh-mitm/ssh-mitm

Mirror moved — see GitHub and Codeberg

web-proxies-interceptioninformation-gatheringnetwork-security+3
4 months ago
CVE-2025-2563 preview

CVE-2025-2563

GitHubdokter69/cve-2025-2563

Multi-threaded exploit for CVE-2025-2563 targeting unauthenticated privilege escalation in the WordPress User Registration & Membership plugin.…

privilege-escalationvulnerability-analysisexploitation+4
16 months ago
Previous1…545556…78Next