Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
407 results
CVE-2026-42208 preview

CVE-2026-42208

GitHub0xblackash/cve-2026-42208

CVE-2026-40487

ai-securityapi-securitydatabase-security+3
5 months ago
CYBERDUDEBIVASH-ServiceNow-AI-Agent-Audit-Script preview

CYBERDUDEBIVASH-ServiceNow-AI-Agent-Audit-Script

GitHubcyberdudebivash/cyberdudebivash-servicenow-ai-agent-audit-script

This script audits ServiceNow AI Agents for vulnerabilities like CVE-2025-12420, governance gaps, and compliance risks. Powered by CYBERDUDEBIVASH –…

ai-securityapi-securitycloud-security+2
8 months ago
apache__dubbo_CVE-2021-30180_2-7-9 preview

apache__dubbo_CVE-2021-30180_2-7-9

GitHubshoucheng3/apache__dubbo_cve-2021-30180_2-7-9

Exploit for CVE-2021-30180 targeting Apache Dubbo RPC framework, enabling remote code execution via crafted RPC requests in vulnerable versions.

api-securityapi-security-testingexploitation+3
1 year ago
CVE-2021-45232 preview

CVE-2021-45232

GitHubdskho/cve-2021-45232

Proof-of-concept scanner for CVE-2021-45232, targeting unauthenticated API access and default credentials in Apache APISIX Dashboard.

api-securityexploitationmisconfiguration+2
4 years ago
CVE-2025-55817 preview

CVE-2025-55817

GitHub5qu1n7/cve-2025-55817

ChilliCream Nitro GraphQL version 28.0.13 is vulnerable to multiple Stored Cross Site Scripting (XSS) Vulnerabilities

api-securityapi-security-testingvulnerability-analysis+2
1 year ago
nahsra__antisamy_CVE-2016-10006_1-5-3 preview

nahsra__antisamy_CVE-2016-10006_1-5-3

GitHubshoucheng3/nahsra__antisamy_cve-2016-10006_1-5-3

Fast, configurable HTML sanitization library for preventing XSS and malicious code injection from untrusted user input. Provides a policy-driven API…

api-securitycode-analysisdefensive-tools+2
1 year ago
CVE-2025-29557 preview

CVE-2025-29557

GitHub0xsu3ks/cve-2025-29557

Documents a high-severity ExaGrid EX10 MailConfiguration API access control flaw that leaks plaintext SMTP credentials to authenticated operators,…

api-securityeducationexploitation+3
1 year ago
CVE-2022-45354 preview

CVE-2022-45354

GitHubrandomrobbiebf/cve-2022-45354

Download Monitor <= 4.7.60 - Sensitive Information Exposure via REST API

api-securityexploitationinformation-gathering+3
3 years ago
CVE-2025-54554 preview

CVE-2025-54554

GitHubaman-parmar/cve-2025-54554

CVE-2025-54554 – Unauthenticated Access in tiaudit REST API leading to Sensitive Information Disclosure

api-securityinformation-gatheringmisconfiguration+2
1 year ago
keycloak__keycloak_CVE-2022-4361_21-1-1 preview

keycloak__keycloak_CVE-2022-4361_21-1-1

GitHubshoucheng3/keycloak__keycloak_cve-2022-4361_21-1-1

Open source identity and access management solution providing single sign-on, user federation, and centralized authentication for modern applications…

api-securityauthentication-authorizationcloud-security+2
7 months ago
keycloak__keycloak_CVE-2014-3656_1-0-5-Final preview

keycloak__keycloak_CVE-2014-3656_1-0-5-Final

GitHubshoucheng3/keycloak__keycloak_cve-2014-3656_1-0-5-final

Open-source identity and access management solution providing authentication, user federation, single sign-on, and fine-grained authorization for…

api-securityauthentication-authorizationcloud-security+3
8 months ago
spring-cloud__spring-cloud-config_CVE-2020-5410_2-1-8-RELEASE preview

spring-cloud__spring-cloud-config_CVE-2020-5410_2-1-8-RELEASE

GitHubshoucheng3/spring-cloud__spring-cloud-config_cve-2020-5410_2-1-8-release

Centralized configuration server for distributed systems with HTTP API, Git-backed storage, property encryption/decryption, and integration with…

api-securityauthentication-authorizationcloud-security+3
1 year ago
MicroserviceCVE-2021-39156 preview

MicroserviceCVE-2021-39156

GitHubmostafaanouarghorab/microservicecve-2021-39156
api-securityexploitationpenetration-testing+3
6 months ago
keycloak__keycloak_CVE-2022-3782_20-0-1 preview

keycloak__keycloak_CVE-2022-3782_20-0-1

GitHubshoucheng3/keycloak__keycloak_cve-2022-3782_20-0-1

Open source identity and access management platform providing single sign-on, user federation, and centralized authentication for modern applications…

api-securityauthentication-authorizationcloud-security+3
7 months ago
keycloak__keycloak_CVE-2022-1274_20-0-3 preview

keycloak__keycloak_CVE-2022-1274_20-0-3

GitHubshoucheng3/keycloak__keycloak_cve-2022-1274_20-0-3

Open source identity and access management solution providing single sign-on, user federation, and centralized authentication for modern applications…

api-securityauthentication-authorizationcloud-security+2
7 months ago
keycloak__keycloak_CVE-2022-4137_20-0-3 preview

keycloak__keycloak_CVE-2022-4137_20-0-3

GitHubshoucheng3/keycloak__keycloak_cve-2022-4137_20-0-3

Open source identity and access management solution providing single sign-on, user federation, and centralized authentication for modern applications…

api-securityauthentication-authorizationcloud-security+3
7 months ago
westone-CVE-2021-37580-scanner preview

westone-CVE-2021-37580-scanner

GitHubosyanina/westone-cve-2021-37580-scanner

A vulnerability scanner that detects CVE-2021-37580 vulnerabilities.

api-securityauthenticationexploitation+2
4 years ago
CVE-2025-492030 preview

CVE-2025-492030

GitHubimthecopilotnow/cve-2025-492030

Proof-of-concept for CVE-2025-492030: account takeover via session token validation bypass in SecureVPN API endpoint /api/v1/authenticate.

api-securityauthenticationexploitation+3
1 year ago
Previous1…20212223Next