Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
32 results
metasploit-framework preview

metasploit-framework

GitHubrapid7/metasploit-framework

Open-source exploitation framework with modular payload, encoder, and auxiliary system for penetration testing, vulnerability validation, and…

command-and-controldatabase-securitydata-exfiltration+20
38.9k
12h 18m ago
N1QLMap preview

N1QLMap

GitHubfsecurelabs/n1qlmap

The tool exfiltrates data from Couchbase database by exploiting N1QL injection vulnerabilities.

database-securitydata-exfiltrationpenetration-testing+1
755 years ago
impacket preview

impacket

GitHubfortra/impacket

Python library for low-level network protocol manipulation, featuring SMB, MSRPC, Kerberos, and WMI implementations with tools for authentication…

authenticationcommand-and-controldatabase-security+17
16.0k8h 30m ago
nmap preview

nmap

GitHubnmap/nmap

High-performance network discovery and security auditing tool with advanced port scanning, OS detection, service version detection, and scriptable…

bluetooth-securitydatabase-securitydata-exfiltration+18
13.4k1 day ago
Collabfiltrator preview

Collabfiltrator

GitHub0xc01df00d/collabfiltrator

Exfiltrate blind Remote Code Execution and SQL injection output over DNS via Burp Collaborator.

data-exfiltrationdns-analysisexploitation+3
2811 year ago
ODBParser preview

ODBParser

GitHubcitcheese/odbparser

OSINT tool to search, parse and dump only the open Elasticsearch and MongoDB directories that have the data you care about exposing

database-securitydata-exfiltrationinformation-gathering+2
476 years ago
MAD-CAT preview

MAD-CAT

GitHubkarlvbiron/mad-cat

Simulate data corruption attacks against multiple database systems (MongoDB, Elasticsearch, Cassandra, Redis, CouchDB, Hadoop HDFS) with…

database-securitydata-exfiltrationeducation+3
3810 months ago
CVE-2025-14847_Expolit preview

CVE-2025-14847_Expolit

GitHubcybertechajju/cve-2025-14847_expolit

a critical memory disclosure vulnerability in MongoDB's zlib compression handling. This tool allows security researchers to extract sensitive data…

database-securitydata-exfiltrationeducation+6
348 months ago
pgedge-anonymizer preview

pgedge-anonymizer

GitHubpgedge/pgedge-anonymizer

An anonymizer tool for replacing PII and similar data in dev/test databases copied from production

database-securitydata-exfiltrationdevsecops+3
3027 days ago
CVE-2020-11579 preview

CVE-2020-11579

GitHubshieldersec/cve-2020-11579

Exploit for CVE-2020-11579, an unauthenticated arbitrary file disclosure in PHPKB via a rogue MySQL server, allowing remote file exfiltration with…

database-securitydata-exfiltrationexploitation+3
252 years ago
CVE-2024-34693 preview

CVE-2024-34693

GitHubmbadanoiu/cve-2024-34693

Proof-of-concept exploit for CVE-2024-34693: authenticated arbitrary file read in Apache Superset via rogue MySQL server and LOAD DATA LOCAL INFILE…

database-securitydata-exfiltrationexploitation+3
102 years ago
CVE-2026-26980 preview

CVE-2026-26980

GitHubvognik/cve-2026-26980

Unauthenticated SQL injection exploit for Ghost CMS Content API (CVE-2026-26980); dumps database tables from SQLite/MySQL with active/passive checks…

database-securitydata-exfiltrationexploitation+4
108 days ago
Rogue-MySql-Server preview

Rogue-MySql-Server

GitHubal1ex/rogue-mysql-server

Rogue MySQL server that captures and reads arbitrary files from connecting MySQL clients; ideal for red-team engagements and penetration testing to…

database-securitydata-exfiltrationexploitation+3
56 years ago
supahunter preview

supahunter

GitHubproxydom/supahunter

Automated reconnaissance and exploitation framework for misconfigured Supabase instances. Features schema enumeration, Selenium-based key extraction,…

cloud-securitydatabase-securitydata-exfiltration+8
27 months ago
CVE-2025-14847_Expolit preview

CVE-2025-14847_Expolit

GitHubalexcyberx/cve-2025-14847_expolit

Exploit tool for CVE-2025-14847, a MongoDB memory disclosure vulnerability, enabling multi-threaded extraction of sensitive data and secrets from…

database-securitydata-exfiltrationexploitation+4
27 months ago
drupal-jsonapi-sqli-scanner preview

drupal-jsonapi-sqli-scanner

GitHubridhinva/drupal-jsonapi-sqli-scanner

Scanner: CVE-2026-9082 Drupal PostgreSQL SQLi via JSON:API — Python scanner for unauthenticated SQLi leading to RCE (CISA KEV)

database-securitydata-exfiltrationexploitation+5
217 days ago
CVE-2025-58443 preview

CVE-2025-58443

GitHubcasp3r0x0/cve-2025-58443

Exploit POC for FOGProject authentication bypass (CVE-2025-58443) enabling full MySQL database dump, SSRF exploitation, and server file listing.

database-securitydata-exfiltrationexploitation+3
211 months ago
CVE-2026-57588-Nessus-XML-Import-SQL-Injection-PoC preview

CVE-2026-57588-Nessus-XML-Import-SQL-Injection-PoC

GitHubcerberusmrxi/cve-2026-57588-nessus-xml-import-sql-injection-poc

Proof-of-concept exploit framework for CVE-2026-57588, a SQL injection in Nessus XML import. Generates malicious .nessus files for database…

command-and-controldatabase-securitydata-exfiltration+7
11 month ago
Previous12Next