Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
606 results
cve-2025-24514 preview

cve-2025-24514

GitHubkimjuhyeong95/cve-2025-24514

Remote vulnerability scanner for CVE-2025-24514, an ingress-nginx auth-url injection leading to NGINX config manipulation and potential RCE.…

cloud-securitycontainer-securityexploitation+3
1 year ago
apache__dolphinscheduler_CVE-2023-49109_3-2-0 preview

apache__dolphinscheduler_CVE-2023-49109_3-2-0

GitHubshoucheng3/apache__dolphinscheduler_cve-2023-49109_3-2-0

Exploit for CVE-2023-49109 targeting Apache DolphinScheduler, a cloud-native data orchestration platform. Enables security testing of workflow…

cloud-securitycontainer-securitydevsecops+3
1 year ago
CVE-2023-34233_Proof_OF_Concept preview

CVE-2023-34233_Proof_OF_Concept

GitHubnayankadamm/cve-2023-34233_proof_of_concept

Proof-of-concept demonstrating CVE-2025-24793 SQL injection vulnerability in Snowflake Connector for Python, with auto-detection of patched/unpatched…

cloud-securitydatabase-securityeducation+3
1 year ago
git-secrets-scan preview

git-secrets-scan

Bitbucketatlassian/git-secrets-scan

Scans Git repositories for hardcoded secrets, keys, and passwords using Gitleaks, integrating security into Bitbucket Pipelines with Code Insights…

cloud-securityconfiguration-auditingdevsecops+3
1 year ago
alibaba__nacos_CVE-2021-44667_2-0-3 preview

alibaba__nacos_CVE-2021-44667_2-0-3

GitHubshoucheng3/alibaba__nacos_cve-2021-44667_2-0-3

Exploit for CVE-2021-44667 targeting Alibaba Nacos 2.0.3, enabling unauthenticated remote code execution via a crafted request to the Derby database…

cloud-securityexploitationmisconfiguration+3
1 year ago
OpsGuard-simulation preview

OpsGuard-simulation

GitHubshubham-01-star/opsguard-simulation

OpsGuard eliminates the "3 AM PagerDuty" nightmare, specifically protecting against threats like the recent CVE-2025-55184 (Next.js DoS)

cloud-securitydevsecopseducation+2
19 months ago
ctf-cve-2019-11043 preview

ctf-cve-2019-11043

GitHuba1ex-var1amov/ctf-cve-2019-11043

Intentionally vulnerable PHP app with Nginx/PHP-FPM setup for reproducing CVE-2019-11043, including Docker and Kubernetes deployment,…

cloud-securitycontainer-securityctf+8
1 year ago
Cluster-Chaos-Exploiting-CVE-2025-59359-for-Kubernetes-Takeover preview

Cluster-Chaos-Exploiting-CVE-2025-59359-for-Kubernetes-Takeover

GitHubmrk336/cluster-chaos-exploiting-cve-2025-59359-for-kubernetes-takeover

A hands-on forensic walkthrough of CVE-2025-59359, a critical OS command injection flaw in Chaos-Mesh. Learn how attackers hijack Kubernetes clusters…

cloud-securitycommand-and-controlcontainer-security+8
1 year ago
chart-down preview

chart-down

GitHubrandomrobbiebf/chart-down

Extracts all the chart lists from ChartMuseum

cloud-securitycontainer-securitydevsecops+2
7 months ago
CVE-2023-5043 preview

CVE-2023-5043

GitHubr0binak/cve-2023-5043

Proof-of-concept exploit for CVE-2023-5043, demonstrating arbitrary command execution via Ingress NGINX annotation injection in Kubernetes, with a…

cloud-securitycontainer-securityexploitation+3
2 years ago
keycloak__keycloak_CVE-2022-4361_21-1-1 preview

keycloak__keycloak_CVE-2022-4361_21-1-1

GitHubshoucheng3/keycloak__keycloak_cve-2022-4361_21-1-1

Open source identity and access management solution providing single sign-on, user federation, and centralized authentication for modern applications…

api-securityauthentication-authorizationcloud-security+2
8 months ago
Blackash-CVE-2025-41115 preview

Blackash-CVE-2025-41115

GitHubrockmelodies/blackash-cve-2025-41115

CVE-2025-41115

authenticationcloud-securityexploitation+5
10 months ago
harbor-give-me-admin preview

harbor-give-me-admin

GitHubthelsa/harbor-give-me-admin

harbor(<1.7.6/1.8.3) privilege escalation (CVE-2019-16097)

cloud-securityexploitationpenetration-testing+3
7 years ago
keycloak__keycloak_CVE-2014-3656_1-0-5-Final preview

keycloak__keycloak_CVE-2014-3656_1-0-5-Final

GitHubshoucheng3/keycloak__keycloak_cve-2014-3656_1-0-5-final

Open-source identity and access management solution providing authentication, user federation, single sign-on, and fine-grained authorization for…

api-securityauthentication-authorizationcloud-security+3
8 months ago
centos-dirty-cow-ansible preview

centos-dirty-cow-ansible

GitHubistenrot/centos-dirty-cow-ansible

Ansible playbook automating CVE-2016-5195 (Dirty COW) mitigation on CentOS/Scientific Linux using SystemTap kernel module generation.

cloud-securityconfiguration-auditingdevsecops+3
9 years ago
eclipse__hawkbit_CVE-2020-27219_0-3-0M6 preview

eclipse__hawkbit_CVE-2020-27219_0-3-0M6

GitHubshoucheng3/eclipse__hawkbit_cve-2020-27219_0-3-0m6

Domain-independent back end for rolling out software updates to constrained edge devices, controllers, and gateways over IP-based infrastructure,…

cloud-securitycontainer-securitydevsecops+3
1 year ago
apache__incubator-dubbo_CVE-2021-30181_2-6-8 preview

apache__incubator-dubbo_CVE-2021-30181_2-6-8

GitHubshoucheng3/apache__incubator-dubbo_cve-2021-30181_2-6-8

High-performance Java RPC and microservices framework with service discovery, traffic management, observability, and built-in security for building…

api-securityauthentication-authorizationcloud-security+4
11 months ago
keycloak__keycloak_CVE-2022-3782_20-0-1 preview

keycloak__keycloak_CVE-2022-3782_20-0-1

GitHubshoucheng3/keycloak__keycloak_cve-2022-3782_20-0-1

Open source identity and access management platform providing single sign-on, user federation, and centralized authentication for modern applications…

api-securityauthentication-authorizationcloud-security+3
8 months ago
Previous1…303132…34Next