Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Categories

Authentication

MFA, SSO, passwordless, biometric, and identity provider tools.

NewestRelevanceMost popularRecently updated
1386 results
CVE-2024-27198 preview

CVE-2024-27198

GitHubjrbh4ck/cve-2024-27198

PoC about CVE-2024-27198

vulnerability-analysisexploitationweb-application-exploitation+3
2 years ago
CVE-2024-50485 preview

CVE-2024-50485

GitHubrandomrobbiebf/cve-2024-50485

Exam Matrix <= 1.5 - Unauthenticated Privilege Escalation

privilege-escalationvulnerability-analysisexploitation+3
1 year ago
CVE-2025-0108-Authentication-Bypass-checker preview

CVE-2025-0108-Authentication-Bypass-checker

GitHubbarcrange/cve-2025-0108-authentication-bypass-checker

Python script that tests PAN-OS devices for CVE-2025-0108 authentication bypass by sending crafted HTTP requests and analyzing responses.

vulnerability-analysisexploitationweb-application-exploitation+3
1 year ago
HotelDruid-CVE-2021-42949 preview

HotelDruid-CVE-2021-42949

GitHubdhammon/hoteldruid-cve-2021-42949

Exploit for CVE-2021-42949 in HotelDruid v3.0.3, demonstrating predictable session token generation and authentication bypass via brute force.

vulnerability-analysisexploitationweb-security+2
4 years ago
CVE-2020-29667 preview

CVE-2020-29667

GitHubjet-pentest/cve-2020-29667

Proof-of-concept exploit for CVE-2020-29667 targeting insufficient session expiration and a hardcoded cookie value in Lan ATMService M3 ATM…

vulnerability-analysisexploitationweb-application-exploitation+2
15 years ago
CVE-2024-4040 preview

CVE-2024-4040

GitHubmufti22/cve-2024-4040

A server side template injection vulnerability in CrushFTP in all versions before 10.7.1 and 11.1.0 on all platforms allows unauthenticated remote…

vulnerability-analysisexploitationweb-application-exploitation+3
2 years ago
CVE-2024-10924 preview

CVE-2024-10924

GitHubcy3erdr4g0n/cve-2024-10924

Exploit for CVE-2024-10924, a critical authentication bypass in WordPress Really Simple Security plugin (versions 9.0.0-9.1.1.1). Allows…

vulnerability-analysisexploitationweb-application-exploitation+3
1 year ago
CVE-2020-27747 preview

CVE-2020-27747

GitHubjet-pentest/cve-2020-27747

Possible Account Takeover | Brute Force Ability

password-attacksvulnerability-analysisexploitation+2
15 years ago
CVE-2018-15473-py3 preview

CVE-2018-15473-py3

GitHubdirty-racoon/cve-2018-15473-py3

Python3 exploit for CVE-2018-15473 that enumerates valid usernames on OpenSSH servers via timing-based authentication analysis.

vulnerability-analysisexploitationpenetration-testing+1
5 years ago
CVE-2025-30144 preview

CVE-2025-30144

GitHubtibrn/cve-2025-30144

Proof-of-concept for CVE-2025-30144: JWT issuer validation bypass in fast-jwt library allowing attackers to forge tokens with array-based iss claims.

vulnerability-analysisexploitationweb-application-exploitation+3
1 year ago
cve-2016-20012 preview

cve-2016-20012

GitHubarturo-b-cmu/cve-2016-20012

Python script for SSH username enumeration using timing-based analysis to identify valid accounts on a target server.

reconnaissancevulnerability-analysisinformation-gathering+3
1 year ago
CVE-2021-3130 preview

CVE-2021-3130

GitHubjet-pentest/cve-2021-3130

Proof-of-concept for CVE-2021-3130: demonstrates credential exposure via HTML obfuscation bypass in Open-AudIT up to 4.0.2, revealing SSH, SNMP, and…

vulnerability-analysisweb-securitypenetration-testing+2
15 years ago
bloodit preview

bloodit

GitHubbrunosergi/bloodit

Bludit 3.9.2 - Auth Brute Force Mitigation Bypass. CVE-2019-17240

vulnerability-analysisexploitationweb-application-exploitation+2
5 years ago
CVE-2018-15473 preview

CVE-2018-15473

GitHubyzee00/cve-2018-15473

Fix for CVE-2018-15473

vulnerability-analysisexploitationinformation-gathering+2
2 years ago
CVE-2018-0114 preview

CVE-2018-0114

GitHubstarry-lord/cve-2018-0114

Proof-of-concept for CVE-2018-0114, demonstrating unauthenticated remote token re-signing vulnerability in versions before 0.11.0.

encryption-decryption-toolsvulnerability-analysisexploitation+2
5 years ago
CVE-2019-1619 preview

CVE-2019-1619

GitHubcipolone95/cve-2019-1619

Powershell Script to build token for CVE-2019-1619

vulnerability-analysisexploitationscripting-automation+3
1 year ago
CVE-2024-54916 preview

CVE-2024-54916

GitHubsahalll/cve-2024-54916

Frida-based proof-of-concept demonstrating authentication bypass in Telegram Android by hooking SharedConfig.checkPasscode to always return true,…

android-securitydynamic-analysis-sandboxingvulnerability-analysis+4
1 year ago
CVE-2023-1665 preview

CVE-2023-1665

GitHub0xsu3ks/cve-2023-1665

CVE-2023-1665 - Twake App

vulnerability-analysisinformation-gatheringweb-security+2
3 years ago
Previous1…727374…77Next