Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
39 results
ash-authentication-oauth2-oidc-account-takeover-cve-2026-49757-email-based-user-matching preview

ash-authentication-oauth2-oidc-account-takeover-cve-2026-49757-email-based-user-matching

GitHubhunt-benito/ash-authentication-oauth2-oidc-account-takeover-cve-2026-49757-email-based-user-matching
authenticationauthentication-authorizationctf+5
2 months ago
CVE-2026-11102-OAuth2-Implicit-Grant-Fragment-Hijacking preview

CVE-2026-11102-OAuth2-Implicit-Grant-Fragment-Hijacking

GitHubgeorge0papasotiriou/cve-2026-11102-oauth2-implicit-grant-fragment-hijacking
api-securityauthentication-authorizationexploitation+3
16 days ago
CVE-2026-54121-PoC-Exploit preview

CVE-2026-54121-PoC-Exploit

GitHubtc4dy/cve-2026-54121-poc-exploit

👻 CVE-2026-54121 - Best CertiGhost AD CS Multi-Exploit Framework | Advanced toolkit with rogue DC/LDAP servers, certificate abuse, PKINIT hash…

authentication-authorizationexploitationexploit-frameworks+5
2725 days ago
CVE-2026-8732 preview

CVE-2026-8732

GitHubjenderal92/cve-2026-8732

WP Maps Pro <= 6.1.0 - Unauthenticated Privilege Escalation via Administrator Account Creation to wpgmp_temp_access_ajax AJAX Action

authentication-authorizationexploitationpenetration-testing+4
32 months ago
CVE-2026-41452-PoC preview

CVE-2026-41452-PoC

GitHubboreas37/cve-2026-41452-poc

CVE-2026-41452 — Krayin CRM unauth installer bypass (X-Requested-With) → admin takeover. Verified: overwrite + login on 2.2.4, blocked on 2.2.5

authentication-authorizationexploitationpenetration-testing+3
37 days ago
siyuan-mcp-admin-takeover-cve-2026-66012-missing-authorization preview

siyuan-mcp-admin-takeover-cve-2026-66012-missing-authorization

GitHubhunt-benito/siyuan-mcp-admin-takeover-cve-2026-66012-missing-authorization

Unauthenticated administrator takeover exploit for CVE-2026-66012 using MCP missing authorization to exfiltrate credentials and achieve remote code…

authentication-authorizationexploitationpayload-development+5
125 days ago
CVE-2026-8206 preview

CVE-2026-8206

GitHubizxci/cve-2026-8206

CVE-2026-8206 Kirki Plugin Unauthenticated Account Takeover Exploit

authentication-authorizationexploitationpenetration-testing+2
2 months ago
CVE-2026-7459 preview

CVE-2026-7459

GitHubizxci/cve-2026-7459

CVE-2026-7459 Simple History Missing Authorization Account Takeover Exploit

authentication-authorizationexploitationpenetration-testing+2
2 months ago
CVE-2026-10580 preview

CVE-2026-10580

GitHub0xgh057r3c0n/cve-2026-10580

PoC exploit for CVE-2026-10580 - Authentication Bypass in Hippoo Mobile App for WooCommerce <= 1.9.4 leading to Admin Account Takeover

authentication-authorizationeducationexploitation+4
1 month ago
CVE-2026-2991 preview

CVE-2026-2991

GitHubjoshuavanderpoll/cve-2026-2991

PoC exploit for CVE-2026-2991 — authentication bypass in KiviCare WordPress plugin (≤4.1.2) allowing unauthenticated patient account takeover and…

authentication-authorizationexploitationpenetration-testing+3
25 months ago
CVE-2025-58434-Unauthenticated-Password-Reset-Flowwise preview

CVE-2025-58434-Unauthenticated-Password-Reset-Flowwise

GitHubsteampunk424/cve-2025-58434-unauthenticated-password-reset-flowwise

The forgot-password endpoint in Flowise returns sensitive information including a valid password reset tempToken without authentication or…

authentication-authorizationexploitationpenetration-testing+3
14 months ago
CVE-2025-3604 preview

CVE-2025-3604

GitHubnxploited/cve-2025-3604

Flynax Bridge <= 2.2.0 - Unauthenticated Privilege Escalation via Account Takeover

authentication-authorizationeducationexploitation+5
11 year ago
CVE-2025-4796 preview

CVE-2025-4796

GitHubnxploited/cve-2025-4796

Eventin <= 4.0.34 - Authenticated (Contributor+) Privilege Escalation via User Email Change/Account Takeover

authentication-authorizationeducationexploitation+3
9 months ago
CVE-2024-50477 preview

CVE-2024-50477

GitHubrandomrobbiebf/cve-2024-50477

Stacks Mobile App Builder <= 5.2.3 - Authentication Bypass via Account Takeover

authentication-authorizationexploitationinformation-gathering+3
1 year ago
CVE-2023-43154-PoC preview

CVE-2023-43154-PoC

GitHubally-petitt/cve-2023-43154-poc

PoC for the type confusion vulnerability in Mac's CMS that results in authentication bypass and administrator account takeover.

authentication-authorizationexploitationpassword-attacks+3
2 years ago
CVE-2024-50478 preview

CVE-2024-50478

GitHubrandomrobbiebf/cve-2024-50478

1-Click Login: Passwordless Authentication 1.4.5 - Authentication Bypass via Account Takeover

authentication-authorizationexploitationpenetration-testing+3
1 year ago
cve-2026-71362-magento-lab preview

cve-2026-71362-magento-lab

GitHubdinosn/cve-2026-71362-magento-lab

Docker lab reproducing CVE-2026-71362 Magento/Adobe Commerce account takeover via customer-session identity switch, with PoC and official-patch A/B/A…

authentication-authorizationeducationexploitation+4
15 days ago
CVE-2023-7028 preview

CVE-2023-7028

GitHubrandomrobbiebf/cve-2023-7028

CVE-2023-7028

authentication-authorizationexploitationpenetration-testing+3
582 years ago
Previous123Next