Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
42 results
NoSQLMap preview

NoSQLMap

GitHubcodingo/nosqlmap

Automated NoSQL database enumeration and web application exploitation tool.

database-securityexploitationinformation-gathering+3
3.3k
6 months ago
cve-search preview

cve-search

GitHubcve-search/cve-search

Local CVE/CPE vulnerability database with search, ranking, web interface, and API for offline vulnerability analysis and management.

database-securityinformation-gatheringioc-management+4
2.6k1 month ago
vulnerablecode preview

vulnerablecode

GitHubaboutcode-org/vulnerablecode

Open-source vulnerability database aggregating CVE data from multiple sources with a web UI and API. Maps vulnerabilities to specific software…

database-securityinformation-gatheringthreat-intelligence+2
6974 days ago
MSSQL-Pentest-Cheatsheet preview

MSSQL-Pentest-Cheatsheet

GitHubignitetechnologies/mssql-pentest-cheatsheet

Practical MSSQL penetration testing cheat sheet covering enumeration, linked-server pivoting, privilege escalation, persistence, and command…

curated-resourcesdatabase-securityexploitation+8
2705 months ago
HQLmap preview
Archived

HQLmap

GitHubpaulsec/hqlmap

Automated HQL injection exploitation tool for detecting, enumerating tables/columns, and dumping database contents via blind or error-based…

database-securityinformation-gatheringpenetration-testing+2
2286 years ago
enumdb preview

enumdb

GitHubm8sec/enumdb

Relational database brute force and post exploitation tool for MySQL and MSSQL

database-securityinformation-gatheringpassword-attacks+2
2212 years ago
stretcher preview

stretcher

GitHubjimywork/stretcher

Tool designed to help identify open Elasticsearch servers that are exposing sensitive information

database-securityinformation-gatheringosint+1
907 years ago
cygor preview

cygor

GitHubtjnull/cygor

An modular asset discovery framework written in python to automate the repeating manual work

database-securitydns-analysisinformation-gathering+7
882 months ago
mongoBuster preview

mongoBuster

GitHubyashpl/mongobuster

High-speed internet-wide scanner for discovering open MongoDB instances using Masscan and Go-routines, with configurable rate limiting and export of…

database-securityinformation-gatheringnetwork-security+1
787 years ago
mapXplore preview

mapXplore

GitHubdaniel2005d/mapxplore

Allow exporting the information downloaded with sqlmap to a relational Database like Postgres and sqlite

database-securityinformation-gatheringutilities-frameworks+1
431 year ago
cvedb preview

cvedb

GitHubtrailofbits/cvedb

CVE querying library and utility that uses a local store syncing directly to the National Vulnerability Database

database-securityinformation-gatheringthreat-intelligence+2
243 months ago
melee preview

melee

GitHubadityaks/melee

Python-based tool to detect ransomware infections and malicious code in MySQL instances. Performs reconnaissance, user enumeration, and deep scans…

database-securityincident-responsemalware-analysis+2
233 years ago
xolo preview

xolo

GitHubetlownoise/xolo

Tool to crawl, visualize and interact with SQL server links in a d3 graph to help in your red/blue/purple/.../risk assessments pentest hacking team…

database-securityinformation-gatheringpenetration-testing
195 years ago
Hscan preview

Hscan

GitHubjas502n/hscan

Multi-threaded Windows security scanner that performs port scanning, service banner grabbing, weak password detection, and vulnerability checks…

database-securityinformation-gatheringnetwork-mapping+5
168 years ago
isr-sqlget preview

isr-sqlget

GitHubinfobyte/isr-sqlget

Blind SQL injection tool for automated database schema enumeration and data extraction. Supports 20+ database engines with evasion techniques for WAF…

database-securitypenetration-testingvulnerability-analysis+1
1413 years ago
Solr-GRAB preview

Solr-GRAB

GitHubgnosticplayers/solr-grab

Steal Apache Solr instance Queries with or without a username and password.

database-securityinformation-gatheringosint+1
125 years ago
Complete-google-dorks preview

Complete-google-dorks

GitHubnu11secur1ty/complete-google-dorks

Curated collection of Google dork queries for advanced search engine reconnaissance, uncovering exposed databases, configuration files, admin panels,…

database-securitydns-subdomain-enumerationexploitation+7
121 year ago
OracleOTM preview

OracleOTM

GitHubofirhamam/oracleotm

Python tool for exploiting CVE-2021-35616

database-securityexploitationinformation-gathering+3
114 years ago
Previous123Next