Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Database assessment, SQL injection testing, auditing, encryption, and activity monitoring tools.

Kitploit recommended

Top tools

10 selected

sqlmap

sqlmapproject/sqlmap

38.2k1 day ago

openvas-scanner

greenbone/openvas-scanner

4.8k9h 39m ago

nuclei

projectdiscovery/nuclei

30.4k1 day ago

metasploit-framework

rapid7/metasploit-framework

38.8k8h 3m ago

nmap

nmap/nmap

13.3k4 days ago

zaproxy

zaproxy/zaproxy

15.6k1 day ago

wapiti

wapiti-scanner/wapiti

1.9k24 days ago

semgrep

semgrep/semgrep

16.2k6 days ago

trivy

aquasecurity/trivy

37.4k8h 23m ago

#10

wazuh

wazuh/wazuh

16.5k7h 45m ago

Newest Relevance Most popular Recently updated

649 results

Magento-CVE-2019-7139-SQLi-PoC

0xsemz/magento-cve-2019-7139-sqli-poc

Python proof-of-concept exploit for CVE-2019-7139, an unauthenticated SQL injection in Magento's product_frontend_action endpoint, enumerating…

vulnerability-analysisexploitationweb-application-exploitation+4

81 month ago

CVE-2026-32710

dinosn/cve-2026-32710

Heap OOB write in MariaDB JSON_SCHEMA_VALID() → persistent privilege escalation (lab-assisted)

privilege-escalationexploit-frameworksvulnerability-analysis+4

165 months ago

bissap

synacktiv/bissap

A new open-source tool to quickly audit SAP permissions.

authentication-authorizationprivilege-escalationvulnerability-analysis+4

814 days ago

cve-2026-2005

dinosn/cve-2026-2005

Exploit for CVE-2026-2005, a heap overflow in PostgreSQL's pgcrypto extension leading to remote code execution. Includes PoC generators, Docker lab,…

vulnerability-analysisexploitationpenetration-testing+2

185 months ago

ghost-cve-2026-26980

dinosn/ghost-cve-2026-26980

CVE-2026-26980 — Ghost CMS Content API SQL Injection Lab (unauthenticated blind SQLi via slug filter ordering)

vulnerability-analysisexploitationweb-application-exploitation+5

196 months ago

Hscan

jas502n/hscan

Hscan-Win-Gui

reconnaissancevulnerability-scannersweb-vulnerability-scanners+5

168 years ago

CVE-2026-26980

vognik/cve-2026-26980

Unauthenticated SQL injection exploit for Ghost CMS Content API (CVE-2026-26980); dumps database tables from SQLite/MySQL with active/passive checks…

vulnerability-analysisexploitationweb-application-exploitation+4

102 months ago

mongobleed-exploit-CVE-2025-14847

security-phoenix-demo/mongobleed-exploit-cve-2025-14847

Exploit lab, docker and code scanner for mongobleed Vulnerability CVE-2025-14847 plus Phoenix Security Sync tools

vulnerability-scannerscode-analysisexploitation+3

139 months ago

vibe-coding-security

boxed-dev/vibe-coding-security

Pre-launch security checklist for AI-generated apps (Lovable, v0, Bolt, Cursor). 69 checks covering Supabase RLS, exposed keys, and prompt injection.…

vulnerability-analysisconfiguration-auditingweb-security+9

132 months ago

CVE-2023-20110

redfr0g/cve-2023-20110

PoC script for CVE-2023-20110 - Cisco Smart Software Manager On-Prem SQL Injection Vulnerability

vulnerability-analysisexploitationweb-application-exploitation+2

163 years ago

CVE-2026-58048-PoC-Exploit

tc4dy/cve-2026-58048-poc-exploit

👾 CVE-2026-58048 – cPanel Root SQL Execution Toolkit (CVSS 9.4) | Full Red/Blue Team Toolkit suite for unpatched cPanel & WHM 11.x. 2 tools: Safe…

reconnaissancevulnerability-scannersvulnerability-analysis+7

720 days ago

unauthorized-tools

jas502n/unauthorized-tools

未授权批量检测脚本

vulnerability-analysisconfiguration-auditingnetwork-security+2

147 years ago

Backdooring-ZMM100-FingerPrint-Devices

9aylas/backdooring-zmm100-fingerprint-devices

AuthBypass & Auto Backdooring Devices

authentication-authorizationembedded-systems-securitypassword-attacks+4

167 years ago

darkmysqli

blackarch/darkmysqli

[Mirror]

vulnerability-scannersweb-application-exploitationpenetration-testing+1

912 years ago

Complete-google-dorks

nu11secur1ty/complete-google-dorks

Curated collection of Google dork queries for advanced search engine reconnaissance, uncovering exposed databases, configuration files, admin panels,…

osintpassword-crackingreconnaissance+7

121 year ago

CVE-2023-25157-and-CVE-2023-25158

murataydemir/cve-2023-25157-and-cve-2023-25158

GeoServer & GeoTools SQL Injection (CVE-2023-25157 & CVE-2023-25158)

vulnerability-analysisexploitationweb-application-exploitation+3

143 years ago

CVE-2017-12635

assalielmehdi/cve-2017-12635

Case study and POC of CVE-2017-12635: Apache CouchDB 1.7.0 / 2.x < 2.1.1 - Remote Privilege Escalation

privilege-escalationvulnerability-analysisexploitation+4

106 years ago

CVE-2022-24707

altelus1/cve-2022-24707

PoC of CVE-2022-24707