Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
1292 results
CVE-2025-492030 preview

CVE-2025-492030

GitHubimthecopilotnow/cve-2025-492030

Proof-of-concept for CVE-2025-492030: account takeover via session token validation bypass in SecureVPN API endpoint /api/v1/authenticate.

api-securityauthenticationexploitation+3
1 year ago
CVE-2024-7593 preview

CVE-2024-7593

GitHubrxerium/cve-2024-7593

Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or 22.7R2 allows a remote unauthenticated attacker…

authenticationexploitationpenetration-testing+3
10 months ago
CVE-2018-15473 preview

CVE-2018-15473

GitHubyzee00/cve-2018-15473

Fix for CVE-2018-15473

authenticationexploitationinformation-gathering+2
2 years ago
CVE-2018-0114 preview

CVE-2018-0114

GitHubstarry-lord/cve-2018-0114

Proof-of-concept for CVE-2018-0114, demonstrating unauthenticated remote token re-signing vulnerability in versions before 0.11.0.

authenticationencryption-decryption-toolsexploitation+2
5 years ago
Digisol-DG-GR1321-s-Password-Policy-Bypass-CVE-2024-2257 preview

Digisol-DG-GR1321-s-Password-Policy-Bypass-CVE-2024-2257

GitHubredfox-security/digisol-dg-gr1321-s-password-policy-bypass-cve-2024-2257

Exploit for CVE-2024-2257: bypasses password policy on Digisol DG-GR1321 routers via crafted HTTP request, enabling unauthorized access for…

authenticationexploitationpenetration-testing+2
2 years ago
CVE-2019-17662 preview

CVE-2019-17662

GitHubtamagaft/cve-2019-17662

Golang implementation of CVE-2019-17662 TinyVNC Arbitrary File Read leading to Authentication Bypass Exploit

authenticationbinary-exploitationexploitation+2
4 years ago
SecuraBV-CVE-2020-1472 preview

SecuraBV-CVE-2020-1472

GitHubthejoyofhacking/securabv-cve-2020-1472

Python script using Impacket to test for the Zerologon vulnerability (CVE-2020-1472) by attempting Netlogon authentication bypass against domain…

authenticationexploitationnetwork-security+2
4 years ago
CVE-2024-10924 preview

CVE-2024-10924

GitHubcy3erdr4g0n/cve-2024-10924

Exploit for CVE-2024-10924, a critical authentication bypass in WordPress Really Simple Security plugin (versions 9.0.0-9.1.1.1). Allows…

authenticationeducationexploitation+3
1 year ago
CVE-2024-10728 preview

CVE-2024-10728

GitHubrandomrobbiebf/cve-2024-10728

PostX <= 4.1.16 - Missing Authorization to Arbitrary Plugin Installation/Activation

authenticationcode-analysisexploitation+3
1 year ago
CVE-2025-23369_SAML_bypass preview

CVE-2025-23369_SAML_bypass

GitHubarian91/cve-2025-23369_saml_bypass

bypass SAML authentication on GitHub Enterprise

authenticationexploitationpenetration-testing+2
1 year ago
CVE-2020-1472 preview

CVE-2020-1472

GitHubanonymous-family/cve-2020-1472

Test tool for CVE-2020-1472

authenticationexploitationnetwork-security+2
3 years ago
cve-2020-1472 preview

cve-2020-1472

GitHubken-abruzzi/cve-2020-1472

Python script to test domain controllers for CVE-2020-1472 (Zerologon) using Impacket. Performs Netlogon authentication bypass detection with minimal…

authenticationexploitationnetwork-security+2
5 years ago
CVE-2025-1639 preview

CVE-2025-1639

GitHubnxploited/cve-2025-1639

Animation Addons for Elementor Pro <= 1.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation/Activation

authenticationexploitationpayload-generation+3
1 year ago
CVE-2024-41713POC preview

CVE-2024-41713POC

GitHubzxj-hub/cve-2024-41713poc

Mitel MiCollab 企业协作平台 任意文件读取漏洞(CVE-2024-41713)由于Mitel MiCollab软件的 NuPoint 统一消息 (NPM) 组件中存在身份验证绕过漏洞,并且输入验证不足,未经身份验证的远程攻击者可利用该漏洞执行路径遍历攻击,成功利用可能导致未授权访问、破…

authenticationexploitationinformation-gathering+3
1 year ago
Vmware-ESXI preview

Vmware-ESXI

GitHubwtn-arny/vmware-esxi

CVE-2024-37085 unauthenticated shell upload to full administrator on domain-joined esxi hypervisors.

authenticationexploitationpenetration-testing+3
2 years ago
cve-2016-20012 preview

cve-2016-20012

GitHubarturo-b-cmu/cve-2016-20012

Python script for SSH username enumeration using timing-based analysis to identify valid accounts on a target server.

authenticationinformation-gatheringnetwork-security+3
1 year ago
CVE-2025-30144 preview

CVE-2025-30144

GitHubtibrn/cve-2025-30144

Proof-of-concept for CVE-2025-30144: JWT issuer validation bypass in fast-jwt library allowing attackers to forge tokens with array-based iss claims.

api-securityauthenticationexploitation+3
1 year ago
CVE-2024-54880 preview

CVE-2024-54880

GitHubailenye/cve-2024-54880

CVE-2024-54880

authenticationeducationpenetration-testing+2
1 year ago
Previous1…69707172Next