Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Categories

Identity & Access Management (IAM)

Tools for managing user identities, authentication, authorization, and access controls within systems and networks.

NewestRelevanceMost popularRecently updated
878 results
BadZure preview

BadZure

GitHubmvelazc0/badzure

BadZure automates the deployment of intentionally misconfigured Entra ID tenants and Azure subscriptions, populating them with diverse entities and…

privilege-escalationctfpenetration-testing+6
517
15 days ago
CVE-2026-23004-Automotive-UDS-Authentication-Bypass-via-Replay-Attack preview

CVE-2026-23004-Automotive-UDS-Authentication-Bypass-via-Replay-Attack

GitHubgeorge0papasotiriou/cve-2026-23004-automotive-uds-authentication-bypass-via-replay-attack
authentication-authorizationembedded-systems-securityiot-security+4
15 days ago
c4-meta-system preview

c4-meta-system

GitLabcognitive-functors/c4-meta-system

Production AI defense with 7-layer protection: mathematical constraints, object-capability access, distributed O2 consensus, SVETILO ethics. First…

authentication-authorizationdefensive-toolsmachine-learning+4
15 days ago
Azure-APIM-Dev-Portal-Signup-Bypass preview

Azure-APIM-Dev-Portal-Signup-Bypass

GitHubdz-y/azure-apim-dev-portal-signup-bypass

Python script to bypass Azure APIM signup when UI is disabled, this is different from the CVE-2025-66390 as it does not require you to setup anything…

authentication-authorizationcloud-infrastructure-securityweb-application-exploitation+6
15 days ago
ROADtools preview

ROADtools

GitHubdirkjanm/roadtools

A collection of Azure AD/Entra tools for offensive and defensive security purposes

cloud-infrastructure-securityreconnaissanceinformation-gathering+5
2.7k16 days ago
android-hardware-attestation-demo preview

android-hardware-attestation-demo

GitHubquarkslab/android-hardware-attestation-demo

An Android HW Attestation demo

android-securityauthentication-authorizationmobile-app-pentesting+3
3916 days ago
captaincredz preview

captaincredz

GitHubsynacktiv/captaincredz

CaptainCredz is a modular and discreet password-spraying tool.

password-attackspenetration-testingidentity-access-management+2
13916 days ago
MailAccess preview

MailAccess

GitHubkatrielmoses/mailaccess

Free email OSINT tool, 2500+ platforms, identity clustering, breach detection. No API keys required. pip install mailaccess

osintreconnaissancevulnerability-analysis+8
31916 days ago
milvus-auth-audit preview

milvus-auth-audit

GitHubqianlijaingshan/milvus-auth-audit

Milvus 认证安全检测脚本：CVE-2025-64513 (sourceid后门) / CVE-2026-26190 (/expr弱token) / 内部端口53100

authentication-authorizationvulnerability-scannersexploitation+4
16 days ago
CVE-2026-70481 preview

CVE-2026-70481

GitHubfoxer131/cve-2026-70481
authentication-authorizationvulnerability-analysisexploitation+4
16 days ago
Silent-Call preview

Silent-Call

GitHub0xreadingsteiner/silent-call

Silent;Call — Pre-authentication remote root on Cisco CUCM 15.x (CVSS 10.0)

authentication-authorizationprivilege-escalationvulnerability-analysis+4
1216 days ago
CVE-2026-59243_exploit preview

CVE-2026-59243_exploit

GitHub0xdak/cve-2026-59243_exploit
authentication-authorizationexploitationweb-application-exploitation+3
16 days ago
CVE-2026-16232 preview

CVE-2026-16232

GitHubhackspeak/cve-2026-16232

CVE-2026-16232 (Check Point SmartConsole authentication bypass) PoC - unauth to admin; for authorized security testing

authentication-authorizationvulnerability-analysisexploitation+1
217 days ago
checkpoint-smartconsole-poc preview

checkpoint-smartconsole-poc

GitHubhackspeak/checkpoint-smartconsole-poc

CVE-2026-16232 (Check Point SmartConsole authentication bypass) PoC - unauth to admin; for authorized security testing

authentication-authorizationprivilege-escalationvulnerability-analysis+2
217 days ago
Le Panthéon de la Souveraineté preview

Le Panthéon de la Souveraineté

GitLabschroeder-sys/pantheon-souverainete

Infrastructure cloud modulaire, redondante et 100% souveraine pour s'affranchir des GAFAM. Guides techniques, architecture Zero-Trust et chiffrement…

cloud-infrastructure-securityencryption-decryption-toolsconfiguration-auditing+8
17 days ago
CVE-2026-22005-OAuth-2.0-Device-Code-Phishing-Short-Interval- preview

CVE-2026-22005-OAuth-2.0-Device-Code-Phishing-Short-Interval-

GitHubgeorge0papasotiriou/cve-2026-22005-oauth-2.0-device-code-phishing-short-interval-
authentication-authorizationphishing-toolsexploitation+4
17 days ago
CVE-2026-21017-LDAP-Anonymous-Bind-Privilege-Escalation preview

CVE-2026-21017-LDAP-Anonymous-Bind-Privilege-Escalation

GitHubgeorge0papasotiriou/cve-2026-21017-ldap-anonymous-bind-privilege-escalation
authentication-authorizationprivilege-escalationvulnerability-analysis+3
17 days ago
CVE-2026-21010-VoIP-SIP-Digest-Authentication-Replay preview

CVE-2026-21010-VoIP-SIP-Digest-Authentication-Replay

GitHubgeorge0papasotiriou/cve-2026-21010-voip-sip-digest-authentication-replay
authentication-authorizationvulnerability-analysisexploitation+3
17 days ago
Previous1…678…49Next