Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Categories

Phishing Tools

Tools for creating, managing, and analyzing fake login pages and email campaigns.

Kitploit recommended

Top tools

10 selected
gophish preview#1

gophish

GitHubgophish/gophish
14.1k1 year ago
evilginx2 preview#2

evilginx2

GitHubkgretzky/evilginx2
15.5k3 months ago
social-engineer-toolkit preview#3

social-engineer-toolkit

GitHubtrustedsec/social-engineer-toolkit
15.2k3 months ago
Modlishka preview#4

Modlishka

GitHubdrk1wi/modlishka
5.4k1 month ago
muraena preview#5

muraena

GitHubmuraenateam/muraena
1.1k1 year ago
zphisher preview#6

zphisher

GitHubhtr-tech/zphisher
16.6k2 years ago
wifiphisher preview#7

wifiphisher

GitHubwifiphisher/wifiphisher
14.8k3 months ago
chlonium preview#9

chlonium

GitHubrxwx/chlonium
3163 years ago
SocialFish preview#10

SocialFish

GitHubundeadsec/socialfish
4.8k3 months ago
CredSniper preview#11

CredSniper

GitHubustayready/credsniper
1.4k6 years ago
NewestRelevanceMost popularRecently updated
349 results
iTop-CVEs-exploit preview

iTop-CVEs-exploit

GitHubharshit-mashru/itop-cves-exploit

This repository contains exploits for iTOP CVE-2024-52002, 52000, 31998, 31448 that involve CSRF+XSS chaining to get RCE

phishing-toolsvulnerability-analysisexploitation+3
1 year ago
PoC-CVE-2022-30190 preview

PoC-CVE-2022-30190

GitHubjmousqueton/poc-cve-2022-30190

POC CVE-2022-30190 : CVE 0-day MS Offic RCE aka msdt follina

phishing-toolspayload-generationvulnerability-analysis+4
1574 years ago
Embedded-PDF preview

Embedded-PDF

GitHubjasmoon99/embedded-pdf

This demonstration video shows how we can control the victim's device by sending the innocent-looking PDF file to the target which actually consists…

phishing-toolspayload-generationexploitation+6
715 years ago
monikerlinktest preview

monikerlinktest

GitHubkaihaochen04/monikerlinktest

cve-2024-21413

password-crackingphishing-toolsvulnerability-analysis+3
4 months ago
cve-2026-41200-stig-manager-oidc-reflected-xss preview

cve-2026-41200-stig-manager-oidc-reflected-xss

GitHubhunt-benito/cve-2026-41200-stig-manager-oidc-reflected-xss

Proof-of-concept exploit generator for reflected XSS in STIG Manager OIDC authentication, enabling session token theft via crafted callback URLs and…

phishing-toolsvulnerability-analysisexploitation+3
2 months ago
CVE-2025-30349 preview

CVE-2025-30349

GitHubnatasaka/cve-2025-30349

Horde IMP (through 6.2.27) vulnerability – obfuscation via HTML encoding – XSS payload

phishing-toolsvulnerability-analysisexploitation+2
21 year ago
ExtensionSpoofer preview

ExtensionSpoofer

GitHubhenriksb/extensionspoofer

Spoof file icons and extensions in Windows

phishing-toolsids-ips-evasionimpersonation-tools+3
1871 month ago
CVE-2025-1306 preview

CVE-2025-1306

GitHubnxploited/cve-2025-1306

Newscrunch <= 1.8.4 - Cross-Site Request Forgery to Arbitrary File Upload

phishing-toolspayload-generationexploitation+2
51 year ago
CVE-2025-1015 preview

CVE-2025-1015

GitHubr3m0t3nu11/cve-2025-1015

an attacker to create and export an address book containing a malicious payload in a field. For example, in the “Other” field of the Instant…

phishing-toolspayload-generationvulnerability-analysis+3
31 year ago
WhoCord preview

WhoCord

GitHubsiv-nick/whocord

Scans Discord links across mutual guilds to extract profiles, cross‑references 700+ sites, searches usernames with 30+ tools, and generates an…

osintphishing-toolsreconnaissance+8
830 days ago
CVE-2024-47875-PhpSpreadsheet-XSS-PoC preview

CVE-2024-47875-PhpSpreadsheet-XSS-PoC

GitHubroj1py/cve-2024-47875-phpspreadsheet-xss-poc

This is a PoC/Exploit for the CVE-2024-47875 PhpSpreadsheet XSS Vuln

phishing-toolspayload-generationexploitation+3
11 year ago
CVE-2024-42009-roundcube-xss preview

CVE-2024-42009-roundcube-xss

GitHubsegunakinsoyinu/cve-2024-42009-roundcube-xss

Stored XSS exploit for Roundcube Webmail ≤1.6.6 (CVE-2024-42009) with zero-click email exfiltration via CSS animation event handlers. Includes SMTP…

phishing-toolsexploitationweb-application-exploitation+4
2 months ago
CVE-2024-42009-PoC preview

CVE-2024-42009-PoC

GitHubdanithehack3r/cve-2024-42009-poc

CVE-2024-42009 Proof of Concept

phishing-toolsexploitationweb-application-exploitation+3
71 year ago
WiFi-SpiderWeb preview

WiFi-SpiderWeb

GitHubbadrrx/wifi-spiderweb

An active cyber defense & honeypot system for OpenWrt routers running from a USB drive.

defensive-toolsembedded-systems-securityphishing-tools+7
33 months ago
CVE-2024-30956 preview

CVE-2024-30956

GitHubleocottret/cve-2024-30956

(DOM-based XSS) HTML Injection vulnerability in TOWeb v.12.05 and before allows an attacker to inject HTML/JS code via the _message.html component.

phishing-toolsvulnerability-analysisexploitation+2
2 years ago
CVE-2023-41425-WonderCMS-Authenticated-RCE preview

CVE-2023-41425-WonderCMS-Authenticated-RCE

GitHubdiegomjx/cve-2023-41425-wondercms-authenticated-rce

Xss injection, WonderCMS 3.2.0 -3.4.2

phishing-toolspayload-generationexploitation+4
11 year ago
CVE-2023-40869 preview

CVE-2023-40869

GitHubminotauro2020/cve-2023-40869

Cross Site Scripting vulnerability in mooSocial mooSocial Software v.3.1.6 allows a remote attacker to execute arbitrary code via a crafted script to…

phishing-toolsvulnerability-analysisexploitation+3
13 years ago
CVE-2018-25031 preview

CVE-2018-25031

GitHubmathis2001/cve-2018-25031

CVE-2018-25031 tests

phishing-toolsvulnerability-analysisexploitation+3
34 months ago
Previous1…456…20Next