Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Categories

Authentication

MFA, SSO, passwordless, biometric, and identity provider tools.

Kitploit recommended

Top tools

10 selected
keycloak preview#1

keycloak

GitHubkeycloak/keycloak
37.7k9h 37m ago
hydra preview#2

hydra

GitHubory/hydra
17.6k3 months ago
dex preview#3

dex

GitHubdexidp/dex
11.2k14 hours ago
authelia preview#4

authelia

GitHubauthelia/authelia
28.5k4h 31m ago
authentik preview#5

authentik

GitHubgoauthentik/authentik
26.2k8h 41m ago
zitadel preview#6

zitadel

GitHubzitadel/zitadel
15.5k11h 48m ago
oauth2-proxy preview#7

oauth2-proxy

GitHuboauth2-proxy/oauth2-proxy
15.3k1 month ago
pomerium preview#8

pomerium

GitHubpomerium/pomerium
5.1k8h 6m ago
spire preview#9

spire

GitHubspiffe/spire
2.6k9h 17m ago
auth preview#10

auth

GitHubsupabase/auth
2.6k3 days ago
NewestRelevanceMost popularRecently updated
1391 results
CVE-2024-20674 preview

CVE-2024-20674

GitHubgpotter2/cve-2024-20674

Exploit for CVE-2024-20674: Kerberos mutual authentication bypass via logic bug in client-side U2U TGT-REP handling. Enables unauthenticated network…

vulnerability-analysisexploitationnetwork-security+2
11 year ago
CVE-2025-10658 preview

CVE-2025-10658

GitHubjfriedli/cve-2025-10658

Python exploit script for CVE-2025-10658: brute-forces 6-digit OTP in WordPress SupportCandy guest login to achieve full account takeover via…

password-attacksvulnerability-analysisexploitation+3
17 months ago
CVE-2023-23397-Report preview

CVE-2023-23397-Report

GitHubcyb3rmaddy/cve-2023-23397-report

An exploitation demo of Outlook Elevation of Privilege Vulnerability

vulnerability-analysisexploitationlateral-movement+3
13 years ago
CVE-2025-4094 preview

CVE-2025-4094

GitHubstarawneh/cve-2025-4094

CVE-2025-4094 – WordPress Digits Plugin < 8.4.6.1 - OTP Authentication Bypass

password-attacksvulnerability-analysisexploitation+3
11 year ago
proftpd_bypass preview

proftpd_bypass

GitHubjptr218/proftpd_bypass

An implementation of CVE-2015-3306

vulnerability-analysisexploitationweb-application-exploitation+2
15 years ago
cve-2022-31749 preview

cve-2022-31749

GitHubiveresk/cve-2022-31749

PoC checker for CVE-2022-31749 exploiting a parameter injection vulnerability in WatchGuard SSH interface to exfiltrate hashed user passwords via FTP.

password-crackingvulnerability-analysisexploitation+3
14 years ago
phonepe-sensitive-data-exposure-cve-2025-5154 preview

phonepe-sensitive-data-exposure-cve-2025-5154

GitHubhonestcorrupt/phonepe-sensitive-data-exposure-cve-2025-5154

CVE-2025-5154: Proof-of-concept for unencrypted local storage of authentication tokens, PII, and KYC data in the PhonePe Android app, enabling…

android-securityvulnerability-analysisexploitation+6
11 year ago
CVE-2025-31161 preview

CVE-2025-31161

GitHubdairrow/cve-2025-31161

PoC Authentication Bypass to RCE to Exploit CVE-2025-31161

privilege-escalationvulnerability-analysisexploitation+5
19 months ago
CVE-2025-63667 preview

CVE-2025-63667

GitHubremenis/cve-2025-63667

Vatilon-based IP camera firmwares issue Session-Id tokens without verifying credentials, allowing attackers to obtain sessions and retrieve plaintext…

embedded-systems-securityiot-securityvulnerability-analysis+4
111 months ago
cve-2026-29145 preview

cve-2026-29145

GitHubgregk4sec/cve-2026-29145

Original security research and proof-of-concept for CVE-2026-29145, an Apache Tomcat OCSP authentication bypass vulnerability, including technical…

vulnerability-analysisexploitationweb-security+1
16 months ago
FlowiseAI-Critical-KillChain preview

FlowiseAI-Critical-KillChain

GitHubcveteam/flowiseai-critical-killchain

Critical unauthenticated kill chain leading to full RCE in FlowiseAI (CVE-2025-58434 + CVE-2025-59528)

vulnerability-analysisexploitationweb-application-exploitation+5
16 months ago
Apache-OFBiz-Auth-Bypass-and-RCE-Exploit-CVE-2023-49070-CVE-2023-51467 preview

Apache-OFBiz-Auth-Bypass-and-RCE-Exploit-CVE-2023-49070-CVE-2023-51467

GitHubgraysignal/apache-ofbiz-auth-bypass-and-rce-exploit-cve-2023-49070-cve-2023-51467

This exploit scans whether the provided target is vulnerable to CVE-2023-49070/CVE-2023-51467 and also exploits it depending on the choice of the…

vulnerability-scannersexploitationweb-application-exploitation+3
12 years ago
CVE-2024-45337 preview

CVE-2024-45337

GitHubpeace-maker/cve-2024-45337

Proof of Concept for CVE-2024-45337 against Gitea and Forgejo

privilege-escalationvulnerability-analysisexploitation+3
11 year ago
CVE-2025-4602 preview

CVE-2025-4602

GitHubd0n601/cve-2025-4602

eMagicOne Store Manager for WooCommerce <= 1.2.5 - Unauthenticated Arbitrary File Read

vulnerability-analysisexploitationweb-application-exploitation+3
11 year ago
CVE-2026-24061 preview

CVE-2026-24061

GitHubmonstertsl/cve-2026-24061

Python-based scanner that detects CVE-2026-24061 in GNU Inetutils telnetd, allowing batch testing of multiple targets for the authentication bypass…

vulnerability-scannersexploitationpenetration-testing+2
19 months ago
CVE-2026-29000 preview

CVE-2026-29000

GitHubotuva/cve-2026-29000

Proof-of-concept exploit for CVE-2026-29000, an authentication bypass in pac4j-jwt via nested PlainJWT with alg:none inside a JWE container.

vulnerability-analysisexploitationweb-application-exploitation+2
17 months ago
OpenSC preview

OpenSC

GitHubx41sec/opensc

OpenSC bugfixing

encryption-decryption-toolscryptographyhardware-security+2
18 years ago
CVE-2025-64513 preview

CVE-2025-64513

GitHubshinyseam/cve-2025-64513

PoC for CVE-2025-64513 — Milvus Proxy Authentication Bypass Vulnerability Batch scanner to verify unauthorized access and gather Milvus version,…

vulnerability-analysisexploitationinformation-gathering+3
111 months ago
Previous1…585960…78Next