Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools for creating, managing, and analyzing fake login pages and email campaigns.

Kitploit recommended

Top tools

10 selected

gophish

gophish/gophish

14.1k1 year ago

evilginx2

kgretzky/evilginx2

15.5k3 months ago

social-engineer-toolkit

trustedsec/social-engineer-toolkit

15.2k3 months ago

Modlishka

drk1wi/modlishka

5.4k29 days ago

muraena

muraenateam/muraena

1.1k1 year ago

zphisher

htr-tech/zphisher

16.6k2 years ago

wifiphisher

wifiphisher/wifiphisher

14.8k3 months ago

chlonium

rxwx/chlonium

3163 years ago

#10

SocialFish

undeadsec/socialfish

4.8k3 months ago

#11

CredSniper

ustayready/credsniper

1.4k6 years ago

Newest Relevance Most popular Recently updated

349 results

CVE-2024-50677

zumiyumi/cve-2024-50677

This repository presents a proof-of-concept of CVE-2024-50677

phishing-toolsvulnerability-analysisexploitation+3

11 year ago

CVE-2024-42009

bhanunamikaze/cve-2024-42009

This Proof of Concept (PoC) demonstrates an exploit for CVE-2024-42009, leveraging a cross-site scripting (XSS) vulnerability to extract emails from…

phishing-toolsreconnaissancepayload-generation+5

11 year ago

CVE-2023-23397

moneertv/cve-2023-23397

CVE-2023-23397 C# PoC

password-crackingphishing-toolsreconnaissance+3

13 years ago

CVE-2024-4367-POC-PDFJS

elamani-drawing/cve-2024-4367-poc-pdfjs

PoC (Proof of Concept) de la CVE-2024-4367 - Vulnérabilité RCE dans libwebp. Démonstration complète incluant : création de payloads, scénarios…

phishing-toolspayload-generationexploitation+4

11 year ago

CVE-2023-08-21-exploit

amirzargham/cve-2023-08-21-exploit

Axigen < 10.3.3.47, 10.2.3.12 - Reflected XSS

phishing-toolsvulnerability-analysisexploitation+3

12 years ago

Kotaemon-CVE-2025-56526-56527-disclosure

hantul/kotaemon-cve-2025-56526-56527-disclosure

Public disclosure for CVE-2025-56526 and CVE-2025-56527 — Stored XSS via unsanitized PDF content rendering and plaintext credential exposure in…

phishing-toolsvulnerability-analysisexploitation+5

110 months ago

CVE-2025-22131-PoC

zzn1nj4/cve-2025-22131-poc

PoC for CVE-2025-22131

phishing-toolspayload-generationvulnerability-analysis+2

11 year ago

CVE-2017-5223

cscli/cve-2017-5223

Proof-of-concept exploit for CVE-2017-5223 demonstrating arbitrary file read via PHPMailer's attachment and email content injection.

phishing-toolsvulnerability-analysisexploitation+2

17 years ago

CVE-2023-21716

reggyraider/cve-2023-21716

CVE-2023-21716 - Microsoft Word RTF fonttbl Heap Corruption RCE exploit with reverse shell payload

phishing-toolspayload-generationexploitation+4

3 months ago

CVE-2023-41425-WonderCMS-Authenticated-RCE

diegomjx/cve-2023-41425-wondercms-authenticated-rce

Xss injection, WonderCMS 3.2.0 -3.4.2

phishing-toolspayload-generationexploitation+4

11 year ago

CVE-2023-40869

minotauro2020/cve-2023-40869

Cross Site Scripting vulnerability in mooSocial mooSocial Software v.3.1.6 allows a remote attacker to execute arbitrary code via a crafted script to…

phishing-toolsvulnerability-analysisexploitation+3

13 years ago