Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

33 results

joern

joernio/joern

Open-source code analysis platform for C/C++/Java/Binary/Javascript/Python/Kotlin based on code property graphs. Discord https://discord.gg/vv4MH284Hc

binary-analysiscode-analysisreverse-engineering+2

3.3k

22h 15m ago

Archived

DevAudit

sonatype-nexus-community/devaudit

Open-source, cross-platform, multi-purpose security auditing tool

cloud-securitycode-analysisconfiguration-auditing+7

3593 years ago

rustsec

rustsec/rustsec

RustSec API & Tooling

code-analysisdevsecopsstatic-analysis+3

1.9k3 days ago

CVE-2026-51992

theliimbo/cve-2026-51992

Proof-of-concept and detailed writeup for CVE-2026-51992, an SQL injection vulnerability in ClickHouse PostgreSQL dictionaries allowing arbitrary…

code-analysisdatabase-securityeducation+3

3 months ago

CVE-2026-39113

20000419/cve-2026-39113

Advisory and AddressSanitizer reproducer for a SQLite SQLAR heap-buffer-overflow triggered by a crafted SZ value causing truncated allocation and…

binary-exploitationcode-analysisdatabase-security+2

2 months ago

CVE-2026-57821-PoC-Exploit

tc4dy/cve-2026-57821-poc-exploit

🔐 CVE-2026-57821 - Apache Fineract SQL Injection Toolkit 📚 Two Python scripts for authorized security testing: verifier.py (safe detection, no…

code-analysisdatabase-securityeducation+5

312 days ago

CVE-2025-1094-PoC-Postgre-SQLi

ishwardeepp/cve-2025-1094-poc-postgre-sqli

Proof-of-concept emulation and analysis of CVE-2025-1094, a critical PostgreSQL SQL injection vulnerability. Includes Docker-based lab setup, exploit…

code-analysisdatabase-securityeducation+5

61 year ago

CVE-2026-33980

romain-deperne/cve-2026-33980

Proof-of-concept exploit for KQL injection in adx-mcp-server via the table_name parameter, enabling data exfiltration and destructive commands in…

cloud-securitycode-analysisdatabase-security+3

1 month ago

CVE-2026-52887-NocoBase-SQLi-RCE

biitts/cve-2026-52887-nocobase-sqli-rce

CVE-2026-52887 — NocoBase SQL injection -> PostgreSQL-superuser RCE (myInAppChannels:list filter, CVSS 10.0). Author PoC + source analysis + docker…

code-analysisdatabase-securityexploitation+4

3 months ago

IDAChef

exporx/idachef

CyberChef-style recipe toolkit for IDA Pro: chain 289 encoding, cipher, compression, and hashing operations on database bytes, then patch results…

binary-analysiscode-analysiscryptography+6

185 days ago

CVE-2023-43144

pegasus0xx/cve-2023-43144

Assets Management System 1.0 is vulnerable to SQL injection via the id parameter in delete.php

code-analysisdatabase-securityexploitation+2

3 years ago

CVE-2026-30951

eqstlab/cve-2026-30951

Sequelize JSON Cast SQL Injection

code-analysisdatabase-securityeducation+3

12 months ago

mongobleed-exploit-CVE-2025-14847

security-phoenix-demo/mongobleed-exploit-cve-2025-14847

Exploit lab, docker and code scanner for mongobleed Vulnerability CVE-2025-14847 plus Phoenix Security Sync tools

code-analysisdatabase-securityeducation+3

1310 months ago

cve-2024-48325

osvaldotenorio/cve-2024-48325

Proof-of-concept for SQL injection in Portabilis i-Educar 2.8.0, demonstrating unauthenticated database access via the getDocuments endpoint with…

code-analysisdatabase-securityexploitation+3

1 year ago

Django-faille-CVE-2025-57833_test

loic-houchi/django-faille-cve-2025-57833_test

Educational proof-of-concept demonstrating SQL injection via dynamic aliases in Django's annotate() and alias() methods (CVE-2025-57833). Includes…

code-analysisdatabase-securityeducation+3

21 year ago

Reproduce-CVE-2024-21513

savagesanta11/reproduce-cve-2024-21513

Demonstrates CVE-2024-21513 in langchain-experimental, showing arbitrary code execution via VectorSQLDatabaseChain's eval() on retrieved values.…

code-analysisdatabase-securityeducation+3

1 year ago

raven

cycodelabs/raven

Scans GitHub Actions CI/CD workflows for security vulnerabilities, indexes findings into a Neo4j graph database, and provides a query library for…

code-analysisdevsecopseducation+3

7461 year ago

CVE-2026-76564

toanln-cov/cve-2026-76564

Stored XSS via User-Agent in Admin Order View in PhocaCart

code-analysisexploitationpapers-research+3

2 months ago

Previous12 Next