Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

643 results

CVE-2026-5430

abraxas/cve-2026-5430

Disclosure pack and Python PoC for CVE-2026-5430, a JWT algorithm-confusion flaw in WSO2 API Manager 4.5.0 enabling unauthenticated admin account…

api-securityauthenticationcryptography+6

8 days ago

CVE-2025-51471-POC

ajtazer/cve-2025-51471-poc

This PoC is for educational and authorized security testing purposes only. Do NOT use against systems you don't own.

authenticationexploitationred-teaming+2

29 months ago

cve-2026-29145

gregk4sec/cve-2026-29145

Original security research and proof-of-concept for CVE-2026-29145, an Apache Tomcat OCSP authentication bypass vulnerability, including technical…

authenticationexploitationvulnerability-analysis+1

5 months ago

CVE-2023-27524

karthi-the-hacker/cve-2023-27524

Exploit tool for CVE-2023-27524, an authentication bypass vulnerability in Apache Superset. Enables unauthenticated access to Superset instances for…

authenticationexploitationpenetration-testing+2

12 years ago

CVE-2025-31161

cesarbtakeda/cve-2025-31161

Exploit for CVE-2025-31161 with Python and C implementations, allowing authorized penetration testers to manipulate user accounts on target hosts.

authenticationexploitationpenetration-testing+2

111 months ago

CVE-2026-34828

0xmrma/cve-2026-34828

listmonk’s Session Persistence After Password Reset and Password Change

authenticationexploitationpenetration-testing+2

16 months ago

CVE-2021-3130

jet-pentest/cve-2021-3130

Proof-of-concept for CVE-2021-3130: demonstrates credential exposure via HTML obfuscation bypass in Open-AudIT up to 4.0.2, revealing SSH, SNMP, and…

authenticationmisconfigurationpenetration-testing+2

5 years ago

libfido2

yubico/libfido2

Provides library functionality for FIDO2, including communication with a device over USB or NFC.

authenticationcryptographyhardware-security+2

7382 months ago

django-defender

jazzband/django-defender

A simple super fast django reusable app that blocks people from brute forcing login attempts

authenticationdefensive-toolspassword-attacks+1

1.1k8 months ago

CVE-2022-40684

carlosevieira/cve-2022-40684

PoC for CVE-2022-40684 - Authentication bypass lead to Full device takeover (Read-only)

authenticationexploitationpenetration-testing+2

863 years ago

github-dev-token-steal-poc

ammaraskar/github-dev-token-steal-poc

Proof-of-concept exploit demonstrating a GitHub OAuth token-stealing vulnerability via crafted developer workflow triggers, enabling unauthorized…

authenticationexploitationsupply-chain-security+2

204 months ago

CVE-2024-8698-POC

huydoppaz/cve-2024-8698-poc

Proof-of-concept exploit for CVE-2024-8698 targeting Keycloak SAML authentication bypass. Demonstrates vulnerability exploitation in identity…

authenticationexploitationpenetration-testing+2

61 year ago

CVE-2026-73313

bombobombone/cve-2026-73313

Proof-of-concept exploit for CVE-2026-73313, an MFA bypass in XenForo's passkey TFA provider allowing account takeover after password compromise.

authenticationexploitationpenetration-testing+2

25 days ago

CVE-2026-51954

envincion1991-cmyk/cve-2026-51954

Vulnerability Research

api-securityauthenticationexploitation+2

2 months ago

CVE-2026-75431_PowerJob_jwt_key_predictable

unpredictable21/cve-2026-75431_powerjob_jwt_key_predictable

Demonstrates a critical JWT signing key predictability vulnerability in PowerJob Server, allowing offline key derivation and token forgery for admin…

authenticationexploitationpenetration-testing+2

1 month ago

watchTowr-vs-Progress-ShareFile-CVE-2026-2699

watchtowrlabs/watchtowr-vs-progress-sharefile-cve-2026-2699

Detection artifact for CVE-2026-2699 Progress ShareFile authentication bypass. Sends GET to /ConfigService/Admin.aspx to check vulnerability.

authenticationpenetration-testingvulnerability-analysis+1

36 months ago

TYPO3-v7.6.15-Unencrypted-Login-Request

faizzaidi/typo3-v7.6.15-unencrypted-login-request

Proof-of-concept exploit for TYPO3 v7.6.15 unencrypted login request vulnerability (CVE-2017-6370), demonstrating plaintext credential exposure over…

authenticationexploitationpenetration-testing+2

29 years ago

2026-41940-poc

nickpaulsec/2026-41940-poc

CVE-2026-41940: detect and exploit cpanel vuln

authenticationexploitationpenetration-testing+2

15 months ago

Previous 1 234…36 Next