Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems Security
General Purpose Utilities
Indicator of Compromise (IOC) Management
OSINT (Open Source Intelligence)
Packet Sniffing & Analysis
Password Cracking
Penetration Testing Frameworks
Phishing Tools
Privilege Escalation
Reconnaissance
Static Analysis
Vulnerability Scanners
Web Vulnerability Scanners
Wi-Fi Auditing
Bluetooth Security
Container Security
Dynamic Analysis (Sandboxing)
Encryption/Decryption Tools
Exploit Frameworks
Identity Management
iOS Security
IoT Security
Memory Forensics
Network Mapping
OSINT for Social Engineering
Password Attacks
Payload Generation
Persistence Mechanisms
Port Scanning
Static Code Analysis (SAST)
Threat Feeds & Aggregators
Vulnerability Analysis
Web Proxies & Interception
Code Analysis
DNS & Subdomain Enumeration
Dynamic Code Analysis (DAST)
Exploitation
Hash Analysis
IDS/IPS Evasion
Impersonation Tools
Lateral Movement
Mobile App Pentesting
Network Forensics
Reverse Engineering
RFID/NFC Tools
SCADA/ICS Security
Scripting & Automation
Serverless Security
Shellcode
Web Application Exploitation
API Security Testing
Configuration Auditing
Data Exfiltration
Debuggers
Forensics
Information Gathering
Mobile Forensics
Network Access Control
Post-Exploitation
Security Virtualization
Phishing
WAF Bypass
Web Security
Fuzzing
Network Security
Steganography
Wireless Security
Data Recovery
Malware Analysis
Digital Forensics
Hardware Hacking
Cryptography
CTF
Penetration Testing
Cloud Security
DevSecOps
Mobile Security
Privacy
Command and Control
Social Engineering
Hardware Security
Utilities & Frameworks
Hardware & IoT Security
Secret Detection
Binary Analysis
Threat Intelligence
Identity & Access Management (IAM)
Supply Chain Security
Authentication
Machine Learning
Intrusion Detection
Papers & Research
Misconfiguration
Subdomain Enumeration
Email Harvesting
Learning & Education
AI-Assisted Reversing
DNS Fuzzing
Red Teaming
Incident Response
Crawler
Curated Resources
Remote Access Tool
Shellcode Generation
Payload Development
Remote Access Trojan
API Security
Anti-Bot
Fingerprint Spoofing
CAPTCHA Bypass
Email Security
DNS Analysis
Chaos Engineering
Learning Paths & Courses
Container Escape
AI Security
Database Security
Firmware Analysis
Anomaly Detection
Log Analysis
Adversarial Attack
Binary Exploitation
Labs & Practice
NewestRelevanceMost popularRecently updated
85 results
CVE-2024-10924 preview

CVE-2024-10924

GitHubrandomrobbiebf/cve-2024-10924

Really Simple Security (Free, Pro, and Pro Multisite) 9.0.0 – 9.1.1.1 – Authentication Bypass

authentication-authorizationexploitationinformation-gathering+3
41 year ago
CVE-2026-0073-PoC-Exploit preview

CVE-2026-0073-PoC-Exploit

GitHubtc4dy/cve-2026-0073-poc-exploit

Zero-click authentication bypass exploit for Android ADB Wireless Debugging (CVE-2026-0073). Provides interactive shell, command execution, and…

android-securityauthentication-authorizationeducation+6
91 month ago
Azure-AccessPermissions preview
Archived

Azure-AccessPermissions

GitHubcsandker/azure-accesspermissions

PowerShell script to enumerate Azure Active Directory access permissions, including role assignments, service principals, and privileged access…

authentication-authorizationcloud-infrastructure-securitycloud-security+4
1103 years ago
cPanel-WHM-CVE-2026-41940-auth-bypass-exploit preview

cPanel-WHM-CVE-2026-41940-auth-bypass-exploit

GitHubcerberusmrxi/cpanel-whm-cve-2026-41940-auth-bypass-exploit

Critical authentication bypass exploit for cPanel/WHM CVE-2026-41940. Leverages CRLF injection in cpsrvd daemon to gain root WHM access without…

authentication-authorizationexploitationinformation-gathering+3
23 months ago
CVE-2026-8239 preview

CVE-2026-8239

GitHubaj2108/cve-2026-8239

Security write-up for an IDOR in Concrete CMS exposing conversation ratings through missing authorization on the get_rating endpoint, with root…

authentication-authorizationeducationinformation-gathering+3
3 months ago
Silverpeas-AuthBypass-CVE-2024-36042 preview

Silverpeas-AuthBypass-CVE-2024-36042

GitHubha5ant/silverpeas-authbypass-cve-2024-36042

Python PoC for CVE-2024-36042 authentication bypass in Silverpeas < 6.3.5. Features version detection, multi-threaded user enumeration, message…

authentication-authorizationexploitationinformation-gathering+5
5 months ago
phpBB-CVE-2026-48611 preview

phpBB-CVE-2026-48611

GitHubethicalgrey/phpbb-cve-2026-48611

Automated PoC for CVE-2026-48611 — phpBB OAuth login_link authentication bypass

authentication-authorizationexploitationinformation-gathering+5
2 months ago
CVE-2023-4800 preview

CVE-2023-4800

GitHubb0marek/cve-2023-4800

Repository for CVE-2023-4800 vulnerability.

authentication-authorizationinformation-gatheringmisconfiguration+2
3 years ago
kcmapper preview

kcmapper

GitHubsynacktiv/kcmapper

KcMapper is a security auditing tool for Keycloak. It exports your Keycloak configuration (realms, clients, users, roles, etc.) into a Neo4j graph…

authentication-authorizationconfiguration-auditingidentity-access-management+3
148 months ago
OAUTHScan preview

OAUTHScan

GitHubakabe1/oauthscan

Burp Suite Extension useful to verify OAUTHv2 and OpenID security

api-securityapi-security-testingauthentication-authorization+6
1782 years ago
CVE-2022-36537 preview

CVE-2022-36537

GitHubethan-repo-lab4b6/cve-2022-36537

Python exploit for CVE-2022-36537, an authentication bypass in ZK Framework affecting R1Soft Server Backup Manager, allowing retrieval of web context…

authentication-authorizationexploitationinformation-gathering+3
1 year ago
DahuaConsole preview

DahuaConsole

GitHubmcw0/dahuaconsole

Dahua Console, access internal debug console and/or other researched functions in Dahua devices. Feel free to contribute in this project.

authentication-authorizationembedded-systems-securityexploitation+5
3161 year ago
oauth-scan preview

oauth-scan

GitHubportswigger/oauth-scan

Burp Suite Extension useful to verify OAUTHv2 and OpenID security

authentication-authorizationconfiguration-auditinginformation-gathering+3
1921 year ago
gimmepatz preview

gimmepatz

GitHub6mile/gimmepatz

Personal Access Token (PAT) recon tool for bug bounty hunters, pentesters & red teams

api-securityauthentication-authorizationcloud-security+7
431 year ago
caos-os preview

caos-os

GitHubdigicred-oss/caos-os

Customer Assurance Operating System. Answer the security questionnaires your customers send you, once.

authentication-authorizationdefensive-toolsinformation-gathering+2
12 months ago
jataayu preview

jataayu

GitHubgmh5225/jataayu

LLM-backed AI agent security — inbound injection detection + outbound privacy protection

ai-securityauthentication-authorizationdata-exfiltration+6
3 months ago
CVE-2023-42793 preview

CVE-2023-42793

GitHubh454nsec/cve-2023-42793

JetBrains TeamCity Authentication Bypass CVE-2023-42793 Exploit

authentication-authorizationexploitationpenetration-testing+3
462 years ago
CVE-2022-36537 preview

CVE-2022-36537

GitHubmalwareman007/cve-2022-36537

POC of CVE-2022-36537

authentication-authorizationexploitationinformation-gathering+3
361 year ago
Previous12345Next