Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Categories

Identity & Access Management (IAM)

Tools for managing user identities, authentication, authorization, and access controls within systems and networks.

NewestRelevanceMost popularRecently updated
877 results
lsPass preview

lsPass

GitLableestripp/lspass

Local-first encrypted password manager for logins, notes, and API keys, using a SQLite vault sealed with Argon2id and XChaCha20-Poly1305; no cloud or…

encryption-decryption-toolscryptographyprivacy+1
1 day ago
BloodBash preview

BloodBash

GitHubsquidsec/bloodbash

Offline AD/Entra attack-path analyzer for SharpHound/AzureHound JSON. Surfaces prioritized privilege escalation, credential, and misconfiguration…

privilege-escalationvulnerability-analysislateral-movement+6
4061 day ago
CVE-2026-61241 preview

CVE-2026-61241

GitHubgodliveanton/cve-2026-61241

Oracle OID LDAP Server Privileges Management Exploit

privilege-escalationexploitationnetwork-security+3
1 day ago
cve-2026-41940-PoC preview

cve-2026-41940-PoC

GitHublanicer/cve-2026-41940-poc

Exploits cPanel/WHM CVE-2026-41940 authentication bypass via CRLF session injection for unauthenticated root-level WHM access, then lists accounts,…

authentication-authorizationprivilege-escalationvulnerability-scanners+5
291 day ago
ksmbrace preview

ksmbrace

GitHubturtlearm/ksmbrace

ksmbd CVEs: CVE-2026-31717, CVE-2026-68083

authentication-authorizationdefensive-toolsvulnerability-analysis+3
51 day ago
CVE-2026-71518 preview

CVE-2026-71518

GitHubilhomjonr/cve-2026-71518

Advisory and PoC for an unauthenticated authorization bypass in Typemill media downloads, using path-equivalent URL variants to access…

authentication-authorizationvulnerability-analysisexploitation+3
13 days ago
CVE-2026-44848-PoC preview

CVE-2026-44848-PoC

GitHubboreas37/cve-2026-44848-poc

PoC for CVE-2026-44848: Portainer missing authorization on Docker plugin endpoints -> host RCE (GHSA-rrmm-9v76-h3p4). Stdlib-only Python.

authentication-authorizationcontainer-securityvulnerability-analysis+3
2 days ago
CVE-2024-4040-CrushFTP-server preview

CVE-2024-4040-CrushFTP-server

GitHubgraysignal/cve-2024-4040-crushftp-server

Exploit for CVE-2024-4040 affecting CrushFTP server in all versions before 10.7.1 and 11.1.0 on all platforms

authentication-authorizationvulnerability-analysisexploitation+3
2 years ago
CVE-2026-71204-PoC preview

CVE-2026-71204-PoC

GitHubnel-droid/cve-2026-71204-poc

PoC: changedetection.io settings blind-merge mass assignment (CVE-2026-71204, Medium 6.3)

authentication-authorizationvulnerability-analysisexploitation+2
4 days ago
CVE-2026-71206-PoC preview

CVE-2026-71206-PoC

GitHubnel-droid/cve-2026-71206-poc

PoC: Shiori JWT CheckToken never re-validates account state (CVE-2026-71206, High 8.2)

authentication-authorizationvulnerability-analysisexploitation+3
4 days ago
CVE-2026-72585-PoC preview

CVE-2026-72585-PoC

GitHubnel-droid/cve-2026-72585-poc

PoC: Grafana Editor role deletes protected contact points (CVE-2026-72585, Medium 6.5)

authentication-authorizationvulnerability-analysisexploitation+2
4 days ago
CVE-2023-22515 preview

CVE-2023-22515

GitHubs1incere/cve-2023-22515

Confluence Unauthorized Administrator User Addition Exploitation Script

authentication-authorizationvulnerability-analysisexploitation+3
254 months ago
probo preview

probo

GitHubgetprobo/probo

Open source solutions for SOC2, GDPR, and ISO27001

defensive-toolscloud-securitydevsecops+3
1.3k3 days ago
jit preview

jit

GitHubjitpass/jit

Find the plaintext secrets on your Mac and move them behind Touch ID, injected just in time without breaking the tools that read them. Free and…

authentication-authorizationencryption-decryption-toolsconfiguration-auditing+3
145 days ago
CVE-2025-32433-PoC-Analysis preview

CVE-2025-32433-PoC-Analysis

GitHubliam-worsley/cve-2025-32433-poc-analysis

This is an analysis for CVE-2025-32433 (Erlang OTP SSH Vulnerability). I did not write any of the code, I only wrote comments describing what the…

authentication-authorizationvulnerability-analysisexploitation+4
6 days ago
cve-2026-71362-magento-lab preview

cve-2026-71362-magento-lab

GitHubdinosn/cve-2026-71362-magento-lab

Docker lab reproducing CVE-2026-71362 Magento/Adobe Commerce account takeover via customer-session identity switch, with PoC and official-patch A/B/A…

authentication-authorizationvulnerability-analysisexploitation+4
15 days ago
CVE-2026-13610 preview

CVE-2026-13610

GitHubghostpels/cve-2026-13610

Exploit PoC for unauthenticated doctor/receptionist account creation in the KiviCare WordPress plugin via improper privilege management, providing…

authentication-authorizationprivilege-escalationvulnerability-analysis+4
6 days ago
CVE-2026-31816 preview

CVE-2026-31816

GitHubk3ystr0k3r/cve-2026-31816

PoC exploit for critical Budibase auth bypass: unanchored webhook regex lets attackers append ?/webhooks/trigger, reach protected APIs, and chain…

authentication-authorizationexploitationweb-application-exploitation+3
6 days ago
Previous12…49Next