Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Automated tools for detecting known vulnerabilities in systems and applications.

Kitploit recommended

Top tools

10 selected

nuclei

projectdiscovery/nuclei

30.4k13h 9m ago

zaproxy

zaproxy/zaproxy

15.6k19h 12m ago

openvas-scanner

greenbone/openvas-scanner

4.8k8 days ago

trivy

aquasecurity/trivy

37.4k16h 16m ago

vuls

future-architect/vuls

12.2k20h 29m ago

lynis

cisofy/lynis

16.1k9h 6m ago

prowler

prowler-cloud/prowler

14.3k16h 17m ago

ScoutSuite

nccgroup/scoutsuite

7.8k2 years ago

wapiti

wapiti-scanner/wapiti

1.9k24 days ago

#10

nikto

sullo/nikto

10.6k24 days ago

Newest Relevance Most popular Recently updated

3618 results

CVE-2016-3088

cl4ym0re/cve-2016-3088

Apache ActiveMQ PUT RCE Scan

vulnerability-scannersexploitationweb-application-exploitation+2

44 years ago

nmap-CVE-2022-29464

gpiechnik2/nmap-cve-2022-29464

Repository containing nse script for vulnerability CVE-2022-29464 known as WSO2 RCE.

reconnaissancevulnerability-scannersexploitation+3

34 years ago

echteeteepee

perplext/echteeteepee

Go tool and Nuclei template for testing James Kettle's (CVE-2025-32094) HTTP/1.1 must die: the desync endgame

vulnerability-scannersdynamic-analysis-sandboxingweb-security+3

51 year ago

Get-log4j-Windows.ps1

keysau/get-log4j-windows.ps1

Identifying all log4j components across all windows servers, entire domain, can be multi domain. CVE-2021-44228

vulnerability-scannersvulnerability-analysisscripting-automation+3

74 years ago

wp2shell

crypto-cat/wp2shell

PoC for CVE-2026-63030 + CVE-2026-60137, AKA WP2Shell

vulnerability-scannerscode-analysisexploitation+2

31 month ago

CVE-2022-4395

mrg3p5/cve-2022-4395

Mass Auto Exploit CVE-2022-4395 Unauthenticated Arbitrary File Upload

vulnerability-scannersexploitationweb-application-exploitation+1

73 years ago

conscryptchecker

roeeh/conscryptchecker

This app verifies if your device is still vulnerable to CVE-2015-3825 / CVE-2015-3837, aka "One Class to Rule Them All", by checking if it contains…

android-securityvulnerability-scannersvulnerability-analysis+1

410 years ago

PHPunit-Exploit

madexploits/phpunit-exploit

PHPunit Checker CVE-2017-9841 By MrMad

vulnerability-scannersexploitationweb-application-exploitation+2

53 years ago

CVE-2026-63030

anggatechi/cve-2026-63030

WordPress Core Pre-Auth RCE — Batch Route Confusion + SQL Injection

reconnaissancevulnerability-scannersexploitation+3

11 month ago

CVE-2025-24016-Nuclei-Template

huseyinstif/cve-2025-24016-nuclei-template

Nuclei template to detect CVE-2025-24016 unsafe deserialization RCE in Wazuh servers via a crafted JSON payload that triggers a NameError.

vulnerability-scannerscode-analysisexploitation+3

41 year ago

CVE-2025-12101-checker

6h4ack/cve-2025-12101-checker

Simple Python PoC to check Citrix NetScaler ADC/Gateway for CVE-2025-12101 reflected XSS on /cgi/logout using a crafted SAMLResponse + RelayState…

vulnerability-scannersexploitationweb-application-exploitation+3

510 months ago

cpanel-cve-2026-41940-fix

shahidmallaofficial/cpanel-cve-2026-41940-fix

One-shot detection and remediation for cPanel/WHM servers compromised via CVE-2026-41940, including IOC checks, malware cleanup, C2 blocking, and…

cloud-infrastructure-securityvulnerability-scannersconfiguration-auditing+5

54 months ago

CVE-2026-24061

franckferman/cve-2026-24061

GNU InetUtils telnetd - Unauthenticated Remote Root via NEW-ENVIRON Variable Injection.

vulnerability-scannersexploitationnetwork-security+5

55 months ago

CVE-2025-66478-POC

wangxso/cve-2025-66478-poc

CVE-2025-66478 Proof of Concept

reconnaissancevulnerability-scannersvulnerability-analysis+6

58 months ago

Log4Shell

r00thunter/log4shell

Generic Scanner for Apache log4j RCE CVE-2021-44228

vulnerability-scannerspayload-generationexploitation+3

74 years ago

cve-2020-11023-scanner

honeyb33z/cve-2020-11023-scanner

Static analysis scanner for CVE-2020-11023 XSS vulnerabilities in JavaScript. Detects vulnerable jQuery versions and dangerous DOM manipulation…

static-analysisvulnerability-scannersvulnerability-analysis+3