Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
191 results
CVE-2025-29927 preview

CVE-2025-29927

GitHubkh4sh3i/cve-2025-29927

CVE-2025-29927: Next.js Middleware Bypass Vulnerability

authentication-authorizationexploitationpenetration-testing+3
2
1 year ago
oracle-oam-authentication-bypas-exploit preview

oracle-oam-authentication-bypas-exploit

GitHubaymanelsherif/oracle-oam-authentication-bypas-exploit

Exploit for Oracle Access Manager padding oracle vulnerability (CVE-2018-2879)

authentication-authorizationcryptographyexploitation+3
77 years ago
CVE-2018-19410-POC preview

CVE-2018-19410-POC

GitHubhimash/cve-2018-19410-poc

Proof of concept for the vulnerability CVE-2018-19410

authentication-authorizationexploitationpenetration-testing+2
32 years ago
CVE-2024-0204 preview

CVE-2024-0204

GitHubm-cetin/cve-2024-0204

This script exploits the CVE-2024-0204 vulnerability in Fortra GoAnywhere MFT, allowing the creation of unauthorized administrative users, for…

authentication-authorizationeducationexploitation+3
22 years ago
nextjs-auth-bypass preview

nextjs-auth-bypass

GitHubshahin-shadow/nextjs-auth-bypass

Analysis and exploitation of a Next.js authorization bypass vulnerability (CVE-2025-29927)

authentication-authorizationeducationpenetration-testing+3
5 months ago
aisecplus-week01-servicenow-ai-security-incident preview

aisecplus-week01-servicenow-ai-security-incident

GitHubololadeabiola03/aisecplus-week01-servicenow-ai-security-incident

Research and analysis of the ServiceNow Virtual Agent vulnerability (CVE-2025-12420), including attack flow, MITRE ATT&CK mapping, detection…

ai-securityauthentication-authorizationcloud-security+5
3 months ago
DNN_CVE-2015-2794 preview

DNN_CVE-2015-2794

GitHubstyx00/dnn_cve-2015-2794

NSE plugin for Nmap that scans a DotNetNuke (DNN) web application for an Administration Authentication Bypass vulnerability (CVE-2015-2794, EDB-ID:…

authentication-authorizationexploitationpenetration-testing+2
10 years ago
CVE-2023-4800 preview

CVE-2023-4800

GitHubb0marek/cve-2023-4800

Repository for CVE-2023-4800 vulnerability.

authentication-authorizationinformation-gatheringmisconfiguration+2
3 years ago
GSSC-CVE-2022-41923 preview
Archived

GSSC-CVE-2022-41923

GitHubgrails/gssc-cve-2022-41923

Workaround guide for CVE-2022-41923 privilege management vulnerability in Grails Spring Security Core plugin, providing patched filter definitions…

authentication-authorizationcode-analysiseducation+3
73 years ago
DahuaLoginBypass preview

DahuaLoginBypass

GitHubbp2008/dahualoginbypass

Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.

authentication-authorizationexploitationiot-security+3
1982 months ago
CVE-2026-55040 preview

CVE-2026-55040

GitHubsfewer-r7/cve-2026-55040

Proof-of-concept exploit for Microsoft SharePoint CVE-2026-55040 that forges JWT tokens, bypasses authentication, auto-discovers metadata, and…

authentication-authorizationexploitationimpersonation-tools+4
581 month ago
CVE-2023-42793 preview

CVE-2023-42793

GitHubh454nsec/cve-2023-42793

JetBrains TeamCity Authentication Bypass CVE-2023-42793 Exploit

authentication-authorizationexploitationpenetration-testing+3
452 years ago
CVE-2024-6670 preview

CVE-2024-6670

GitHubsinsinology/cve-2024-6670

Proof-of-concept exploit for Progress WhatsUp Gold SQL injection authentication bypass (CVE-2024-6670). Includes root cause analysis and automated…

authentication-authorizationexploitationpenetration-testing+2
352 years ago
CVE-2022-32532 preview

CVE-2022-32532

GitHublay0us/cve-2022-32532

Apache Shiro CVE-2022-32532

authentication-authorizationexploitationpenetration-testing+2
134 years ago
CVE-2025-41646---Critical-Authentication-Bypass- preview

CVE-2025-41646---Critical-Authentication-Bypass-

GitHubgreenforcenetworks/cve-2025-41646---critical-authentication-bypass-

CVE-2025-41646 - Critical Authentication bypass

authentication-authorizationexploitationids-ips-evasion+5
11 year ago
CVE-2023-27524 preview

CVE-2023-27524

GitHubzz-socmap/cve-2023-27524

Apache Superset Auth Bypass Vulnerability CVE-2023-27524.

authentication-authorizationexploitationpayload-generation+3
33 years ago
CVE-2026-8206 preview

CVE-2026-8206

GitHubizxci/cve-2026-8206

Exploit for CVE-2026-8206 targeting unauthenticated account takeover in the Kirki WordPress plugin. Provides a proof-of-concept for security testing…

authentication-authorizationexploitationpenetration-testing+2
3 months ago
CVE-2025-3102 preview

CVE-2025-3102

GitHub0xgh057r3c0n/cve-2025-3102

SureTriggers <= 1.0.78 - Authorization Bypass Exploit

authentication-authorizationeducationexploitation+3
1 year ago
Previous12…11Next