Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
17 results
CVE-2026-60206-PoC-Exploit preview

CVE-2026-60206-PoC-Exploit

GitHubtc4dy/cve-2026-60206-poc-exploit

👾 CVE-2026-60206 - Oracle WebLogic SAML Auth Bypass Exploit Framework ⚡Bash & Python versions. Features: --detect safe check, --exploit…

authentication-authorizationexploitationexploit-frameworks+8
4
1 month ago
Discuz-X5.0-Authentication-Bypass-Exploit-Framework preview

Discuz-X5.0-Authentication-Bypass-Exploit-Framework

GitHubcerberusmrxi/discuz-x5.0-authentication-bypass-exploit-framework

Discuz! X5.0 Authentication Bypass Exploit Framework (CVE-2026-49952) - Critical vulnerability allowing unauthenticated database backup access via…

authentication-authorizationdatabase-securityexploit-frameworks+4
11 month ago
CVE-2024-51996 preview

CVE-2024-51996

GitHubmoften/cve-2024-51996

CVE-2024-51996 es una vulnerabilidad crítica que afecta al componente security-http del framework Symfony.

authentication-authorizationexploitationpenetration-testing+3
11 year ago
CVE-2024-38821-POC preview

CVE-2024-38821-POC

GitHubmasa42/cve-2024-38821-poc

Proof-of-concept exploit for CVE-2024-38821, demonstrating authentication bypass in Spring Framework via path traversal to access restricted…

authentication-authorizationeducationexploitation+3
11 year ago
CVE-2022-36537 preview

CVE-2022-36537

GitHubethan-repo-lab4b6/cve-2022-36537

Python exploit for CVE-2022-36537, an authentication bypass in ZK Framework affecting R1Soft Server Backup Manager, allowing retrieval of web context…

authentication-authorizationexploitationinformation-gathering+3
3 years ago
whiskeysamlandfriends preview

whiskeysamlandfriends

GitHubsecureworks/whiskeysamlandfriends

Python-based framework for generating Golden SAML tokens, Kerberos tickets, and Azure Access Tokens to exploit federated identity systems and…

authentication-authorizationcloud-securityexploit-frameworks+3
812 years ago
CVE-2026-54121-PoC-Exploit preview

CVE-2026-54121-PoC-Exploit

GitHubtc4dy/cve-2026-54121-poc-exploit

👻 CVE-2026-54121 - Best CertiGhost AD CS Multi-Exploit Framework | Advanced toolkit with rogue DC/LDAP servers, certificate abuse, PKINIT hash…

authentication-authorizationexploitationexploit-frameworks+5
285 days ago
CVE-2022-22978-PoC preview

CVE-2022-22978-PoC

GitHubducluongtran9121/cve-2022-22978-poc

PoC of CVE-2022-22978 vulnerability in Spring Security framework

authentication-authorizationeducationexploitation+3
134 years ago
CVE-2025-29972 preview

CVE-2025-29972

GitHubthemehackers/cve-2025-29972

CVE-2025-29927 is a critical security vulnerability affecting Next.js, a popular React framework for building full-stack web applications. This flaw…

authentication-authorizationexploitationpenetration-testing+2
21 year ago
CVE-2022-36537 preview

CVE-2022-36537

GitHubmalwareman007/cve-2022-36537

POC of CVE-2022-36537

authentication-authorizationexploitationinformation-gathering+3
361 year ago
CVE-2023-36899 preview

CVE-2023-36899

GitHubmidisec/cve-2023-36899

CVE-2023-36899漏洞的复现环境和工具,针对ASP.NET框架中的无cookie会话身份验证绕过。

authentication-authorizationexploitationids-ips-evasion+3
333 years ago
CVE-2022-36537-EXPLOIT preview

CVE-2022-36537-EXPLOIT

GitHubagnihackers/cve-2022-36537-exploit

CVE-2022-36537

authentication-authorizationexploitationinformation-gathering+3
93 years ago
cpsniper preview

cpsniper

GitHub44pie/cpsniper

cPanelSniper STABLE - CVE-2026-41940 optimized for 10M+ targets

authentication-authorizationcommand-and-controlexploitation+5
24 months ago
CVE-2022-22978 preview

CVE-2022-22978

GitHubumakant76705/cve-2022-22978

Step-by-step demonstration of CVE-2022-22978 authorization bypass in Spring Security's RegexRequestMatcher, with vulnerable app setup, payload…

authentication-authorizationeducationlabs-practice+3
24 years ago
CVE-2025-29972 preview

CVE-2025-29972

GitHubth-secforge/cve-2025-29972

CVE-2025-29927 - Critical Security Vulnerability in Next.js

authentication-authorizationexploitationpenetration-testing+3
11 year ago
CVE-2025-29927 preview

CVE-2025-29927

GitHubzs1n/cve-2025-29927

PoC | NextJS Middleware 15.2.2 - Authorization Bypass

authentication-authorizationexploitationids-ips-evasion+3
1 year ago
CVE-2022-22978 preview

CVE-2022-22978

GitHubraghvendra1207/cve-2022-22978

Proof-of-concept demonstrating authorization bypass in Spring Security's RegexRequestMatcher (CVE-2022-22978) using CRLF injection, with analysis and…

authentication-authorizationeducationexploitation+3
3 years ago