Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
37 results
permission-manager preview

permission-manager

GitHubsighupio/permission-manager

Permission Manager is a project that brings sanity to Kubernetes RBAC and Users management, Web UI FTW

authentication-authorizationcloud-infrastructure-securitycloud-security+2
1.4k
3 years ago
CVE-2025-3102-exploit preview

CVE-2025-3102-exploit

GitHubsupraaa-1337/cve-2025-3102-exploit

Exploitation of an authorization bypass vulnerability in the SureTriggers plugin for WordPress versions <= 1.0.78, allowing unauthenticated attackers…

authentication-authorizationexploitationpenetration-testing+2
11 year ago
macOS-enterprise-privileges preview

macOS-enterprise-privileges

GitHubsap/macos-enterprise-privileges

This application gives Mac users in enterprise environments control over the administration of their machines by elevating their access level to…

authentication-authorizationconfiguration-auditingdefensive-tools+2
2.0k5h 4m ago
CVE-2019-19550 preview

CVE-2019-19550

GitHubredteambrasil/cve-2019-19550

Proof-of-concept exploit for authentication bypass in Senior Rubiweb 6.2.34, enabling admin access to sensitive information via crafted URLs.

authentication-authorizationexploitationmisconfiguration+2
1 month ago
freemius-exploit preview

freemius-exploit

GitHubrandomrobbiebf/freemius-exploit

Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update

authentication-authorizationexploitationpenetration-testing+3
3 years ago
CVE-2025-27580 preview

CVE-2025-27580

GitHubtruststacksecurity/cve-2025-27580

Exploit for CVE-2025-27580: A predictable token vulnerability in NIH BRICS through 14.0.0-67 allows unauthenticated users with a Common Access Card…

authentication-authorizationexploitationpenetration-testing+3
1 year ago
CVE-2024-30896 preview

CVE-2024-30896

GitHubxenom0rph97/cve-2024-30896

Proof-of-concept exploit for CVE-2024-30896, a privilege escalation vulnerability in InfluxDB allowing allAccess token holders to gain operator-level…

authentication-authorizationcloud-securitydatabase-security+3
21 year ago
auth preview

auth

GitHubsupabase/auth

A JWT based API for managing users and issuing JWT tokens

authenticationauthentication-authorizationidentity-access-management+1
2.6k5 days ago
jenkinsci__script-security-plugin_CVE-2023-24422_1228.vd93135a_2fb_25 preview

jenkinsci__script-security-plugin_CVE-2023-24422_1228.vd93135a_2fb_25

GitHubshoucheng3/jenkinsci__script-security-plugin_cve-2023-24422_1228.vd93135a_2fb_25

Jenkins plugin providing script approval workflows and Groovy sandboxing to enforce secure script execution, with ACL-aware permission checks and…

api-securityauthentication-authorizationcode-analysis+5
6 months ago
CVE-2026-29000-PoC-Exploit preview

CVE-2026-29000-PoC-Exploit

GitHubtc4dy/cve-2026-29000-poc-exploit

CVE-2026-29000 – pac4j-jwt Authentication Bypass (🔥 CVSS 10.0). One-click admin forge via public key JWE wrapping. Leaks configs, users, secrets.…

authentication-authorizationeducationexploitation+6
33 months ago
kcmapper preview

kcmapper

GitHubsynacktiv/kcmapper

KcMapper is a security auditing tool for Keycloak. It exports your Keycloak configuration (realms, clients, users, roles, etc.) into a Neo4j graph…

authentication-authorizationconfiguration-auditingidentity-access-management+3
146 months ago
conjur preview

conjur

GitHubcyberark/conjur

CyberArk Conjur automatically secures secrets used by privileged users and machine identities

authentication-authorizationcloud-securitydevsecops+3
9451 month ago
RCity-CVE-2024-27198 preview

RCity-CVE-2024-27198

GitHubstuub/rcity-cve-2024-27198

CVE-2024-27198 & CVE-2024-27199 PoC - RCE, Admin Account Creation, Enum Users, Server Information

authentication-authorizationeducationexploitation+4
352 years ago
CVE-2024-0204 preview

CVE-2024-0204

GitHubm-cetin/cve-2024-0204

This script exploits the CVE-2024-0204 vulnerability in Fortra GoAnywhere MFT, allowing the creation of unauthorized administrative users, for…

authentication-authorizationeducationexploitation+3
22 years ago
CrushFTP-auth-bypass-CVE-2025-31161 preview

CrushFTP-auth-bypass-CVE-2025-31161

GitHub0xdtc/crushftp-auth-bypass-cve-2025-31161

Exploit for CrushFTP CVE-2025-31161 auth bypass: detects vulnerable targets, enumerates users, and creates unauthorized admin accounts through…

authentication-authorizationcommand-and-controlctf+7
11 months ago
import-users-from-csv-with-meta preview

import-users-from-csv-with-meta

GitHubrandomrobbiebf/import-users-from-csv-with-meta

Import Users From CSV with Meta 1.15 - Unauthorised Authenticated Users Export

authentication-authorizationexploitationinformation-gathering+3
3 years ago
autogpt-CVE-2026-30950-poc preview

autogpt-CVE-2026-30950-poc

GitHubzeropathai/autogpt-cve-2026-30950-poc

POC for CVE-2026-30950 which allows session hijacking in AutoGpt

authentication-authorizationexploitationpenetration-testing+3
3 months ago
kratos preview

kratos

GitHubory/kratos

API-first identity and user management system for cloud-native applications. Handles login, registration, MFA, recovery, and profile management with…

api-securityauthenticationauthentication-authorization+5
13.9k1 month ago
Previous123Next