#1General purpose tools for collecting various types of information about targets.
Kitploit recommended

Modern Joomla Auth-attack Toolkit J3 / J4 / J5 - CVE-2023-23752 · CVE-2023-23755 · CVE-2025-25227
Proof-of-concept exploit for CVE-2024-36837, an unauthenticated arbitrary file read vulnerability in Zhilianyun SRM2.0. Includes batch scanning and…

Oliver POS – A WooCommerce Point of Sale (POS) <= 2.4.2.3 - Sensitive Information Exposure to Privilege Escalation

Mitigation validation utility for the Ivanti Connect Around attack chain. Runs multiple checks. CVE-2023-46805, CVE-2024-21887.

( Wordpress Exploit ) Wordpress Multiple themes - Unauthenticated Arbitrary File Upload

Scan a list of given IP's for CVE-2017-12542

WBW Product Table Pro <= 1.9.4 - Unauthenticated Arbitrary SQL Execution to RCE

CVE-2020-3452 : Cisco ASA and FTD Unauthorized Remote File Reading Nmap NSE Script

Nmap NSE Script to Detect vBulletin pre-auth 5.x RCE CVE-2019-16759

Nmap NSE script to detect Pulse Secure SSL VPN file disclosure CVE-2019-11510

Disclosure for CVE-2025-13339

CVE-2017-7921, CVE-2021-36260 updated 21/01/2026

Decrypts Hikvision IP camera configuration files extracted via CVE-2017-7921 authentication bypass, revealing user credentials and device settings.

HIKRAVEN - Advanced Hikvision Security Assessment Platform for professional penetration testing. Detects 12+ CVEs including CVE-2021-36260…

CVE-2014-0160 (Heartbeat Buffer over-read bug)

This repo contains a script to automatically test sites for vulnerability to the Heartbleed Bug (CVE-2014-0160) based on the input file for the urls.

Multi-threaded tool for scanning many hosts for CVE-2014-0160.

Test for SSL heartbeat vulnerability (CVE-2014-0160)