Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
383 results
SecureCivic preview

SecureCivic

GitLabroxanne_ardary/securecivic

SecureCivic is a citizen-built, open source identity verification platform designed for SSA adoption. It replaces private data brokers with a secure,…

api-securityauthentication-authorizationcloud-security+7
1 month ago
Fix-CVE-2026-60137-CVE-2026-63030-in-wordpress preview

Fix-CVE-2026-60137-CVE-2026-63030-in-wordpress

GitHubmrmtwoj/fix-cve-2026-60137-cve-2026-63030-in-wordpress

CVE-2026-60137Temporary Emergency Mitigation for CVE-2026-60137 & CVE-2026-63030 (wp2shell)

api-securitycode-analysisdefensive-tools+3
1 month ago
CVE-2024-1208-and-CVE-2024-1210 preview

CVE-2024-1208-and-CVE-2024-1210

GitHubkarlemilnikka/cve-2024-1208-and-cve-2024-1210

Detailed disclosure of CVE-2024-1208 and CVE-2024-1210: sensitive information exposure via REST API in LearnDash WordPress plugin, allowing…

api-securityeducationinformation-gathering+3
32 years ago
sdk preview

sdk

GitLabcosignet/sdk

Thin TypeScript + zero-dep Python client and recipes to gate high-risk actions behind a payload-bound passkey approval.

api-securityauthenticationauthentication-authorization+3
1 month ago
google_gax preview

google_gax

GitHubworkshops-de/google_gax

Patched google_gax 0.4.1 for Tesla 1.18.3+ compatibility (CVE-2026-48598)

api-securitygeneral-purpose-utilitiessupply-chain-security+1
3 months ago
laravel-framework preview

laravel-framework

GitHubderrickschoen/laravel-framework

Fork of laravel/framework 10.50.2 with CVE-2026-48019 (CRLF injection in default email rule) backported into ValidatesAttributes::validateEmail.…

api-securityauthenticationemail-security+3
3 months ago
CVE-2026-35616 preview

CVE-2026-35616

GitHubwa6n3r/cve-2026-35616

Exploit script for CVE-2026-35616 that bypasses certificate chain verification in Fortinet API by discovering valid CNs, generating a forged client…

api-securityexploitationpenetration-testing+2
14 months ago
CVE-2026-33186 preview

CVE-2026-33186

GitHubjohanneslks/cve-2026-33186

gRPC-Go RBAC Authorization Policy Bypass via Missing `:path` Slash (Auth Bypass)

api-securityauthentication-authorizationeducation+3
12 months ago
rust_citadel preview

rust_citadel

GitHubmrcord77/rust_citadel

Post-quantum hybrid encryption library combining X25519 + ML-KEM-768 with AES-256-GCM

api-securityauthentication-authorizationcloud-security+2
24 months ago
CVE-2024-1209 preview

CVE-2024-1209

GitHubkarlemilnikka/cve-2024-1209

Sensitive Information Exposure via assignments in LearnDash.

api-securityeducationinformation-gathering+3
22 years ago
mcp-doorman preview

mcp-doorman

GitHubsushank05/mcp-doorman

A lightweight mcp to prevent poisoning CVE (CVE-2025-54136), researchers hijacking Claude Code/Copilot/Gemini via prompt injection, and hundreds of…

ai-securityapi-securitydefensive-tools+5
8 days ago
CVE-2025-61777 preview

CVE-2025-61777

GitHub0x0w1z/cve-2025-61777

CVE on FlagForgeCTF on versions v2.0.0 to v2.3.1. Upgraded to version 2.3.2 to fix the issue.

api-securityexploitationpenetration-testing+2
211 months ago
CVE-2026-25197 preview

CVE-2026-25197

GitHubmichaeladamgroberman/cve-2026-25197

CVE-2026-25197: Authorization Bypass via IDOR — Gardyn Home Kit (ICSA-26-055-03)

api-securityeducationinformation-gathering+6
3 months ago
CVE-2026-44595 preview

CVE-2026-44595

GitHubex-cal1bur/cve-2026-44595

# CVE-2026-44595 YAMCS Unauthorized User Enumeration via IAM API

api-securityauthentication-authorizationexploitation+3
3 months ago
CVE-2026-35616-detector.py preview

CVE-2026-35616-detector.py

GitHubfevar54/cve-2026-35616-detector.py

Detector de CVE-2026-35616: identifica servidores FortiClient EMS vulnerables (7.4.5-7.4.6).

api-securitynetwork-securitypenetration-testing+2
5 months ago
CVE-2025-11203-PoC preview

CVE-2025-11203-PoC

GitHublearner202649/cve-2025-11203-poc

The code for personally reproducing the corresponding vulnerability

api-securityeducationexploitation+3
3 months ago
CVE-2026-31283 preview

CVE-2026-31283

GitHubsaykino/cve-2026-31283

Documentation of CVE-2026-31283: an email bombing vulnerability in Totara LMS's forgot password API due to missing rate limiting, allowing…

api-securityeducationemail-security+3
5 months ago
sudowp-crowdsignal-forms preview

sudowp-crowdsignal-forms

GitHubsudo-wp/sudowp-crowdsignal-forms

A security-hardened fork of Crowdsignal Forms. Patches CVE-2025-69015 (Broken Access Control), modernizes for PHP 8.2+, and enforces strict…

api-securityauthentication-authorizationcode-analysis+3
5 months ago
Previous1…171819…22Next