Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
42 results
DevAudit preview
Archived

DevAudit

GitHubsonatype-nexus-community/devaudit

Open-source, cross-platform, multi-purpose security auditing tool

cloud-securitycode-analysisconfiguration-auditing+7
359
3 years ago
slowql preview

slowql

GitHubslowql/slowql

Next-generation SQL static analyzer written in Rust. 282+ rules. Zero false positives. Security, performance, reliability, cost, compliance, quality.…

code-analysisconfiguration-auditingdatabase-security+6
2241 month ago
JAW preview

JAW

GitHubsoheilkhodayari/jaw

JAW: A Graph-based Security Analysis Framework for Client-side JavaScript

code-analysiscrawlerdatabase-security+5
1186 months ago
sqlsure preview

sqlsure

GitHubsqlsure/sqlsure

Semantic inspector for SQL — catches fan-out double-counting, additivity violations, wrong join keys, and policy breaches before the query runs.…

code-analysiscurated-resourcesdatabase-security+5
981 month ago
jdbc-sqlxml-xxe preview

jdbc-sqlxml-xxe

GitHubseccoder-security-lab/jdbc-sqlxml-xxe

h2-jdbc(https://github.com/h2database/h2database/issues/3195) & mysql-jdbc(CVE-2021-2471) SQLXML XXE vulnerability reproduction.

code-analysisdatabase-securityeducation+3
544 years ago
mongobleed-exploit-CVE-2025-14847 preview

mongobleed-exploit-CVE-2025-14847

GitHubsecurity-phoenix-demo/mongobleed-exploit-cve-2025-14847

Exploit lab, docker and code scanner for mongobleed Vulnerability CVE-2025-14847 plus Phoenix Security Sync tools

code-analysisdatabase-securityeducation+3
137 months ago
CVE-2025-1094-PoC-Postgre-SQLi preview

CVE-2025-1094-PoC-Postgre-SQLi

GitHubishwardeepp/cve-2025-1094-poc-postgre-sqli
code-analysisdatabase-securityeducation+5
61 year ago
CVE-2022-22980 preview

CVE-2022-22980

GitHubmurataydemir/cve-2022-22980

[CVE-2022-22980] Spring Data MongoDB SpEL Expression Injection

code-analysisdatabase-securityeducation+3
54 years ago
CVE-2017-16082 preview

CVE-2017-16082

GitHubnulldreams/cve-2017-16082

NodeJS + Postgres (Remote Code Execution) 🛰

code-analysisdatabase-securityexploitation+3
57 years ago
CVE-2022-34265 preview

CVE-2022-34265

GitHubzhaoqi99/cve-2022-34265

PoC for CVE-2022-34265

code-analysisdatabase-securityexploitation+3
43 years ago
CVE-2026-57821-PoC-Exploit preview

CVE-2026-57821-PoC-Exploit

GitHubtc4dy/cve-2026-57821-poc-exploit

🔐 CVE-2026-57821 - Apache Fineract SQL Injection Toolkit 📚 Two Python scripts for authorized security testing: verifier.py (safe detection, no…

code-analysisdatabase-securityeducation+5
31 month ago
CVE-2021-2471 preview

CVE-2021-2471

GitHubdrunkenshells/cve-2021-2471

PoC for CVE-2021-2471 - XXE in MySQL Connector/J

code-analysisdatabase-securityexploitation+3
34 years ago
CorruptQueryAccessWorkaround preview

CorruptQueryAccessWorkaround

GitHublauxjpn/corruptqueryaccessworkaround

The latest workaround for the "Query is corrupt" error introduced with CVE-2019-1402

code-analysisdatabase-securitygeneral-purpose-utilities+2
36 years ago
CVE-2023-50071 preview

CVE-2023-50071

GitHubgeraldoalcantara/cve-2023-50071

Multiple SQL injection vulnerabilities in /customer_support/ajax.php?action=save_department in Customer Support System 1.0 allow authenticated…

code-analysisdatabase-securityexploitation+3
32 years ago
DjVul_StringAgg preview

DjVul_StringAgg

GitHubsecoba/djvul_stringagg

Django StringAgg SQL Injection (CVE-2020-7471)

code-analysisdatabase-securityeducation+2
24 years ago
rails-cve-2012-5664-test preview

rails-cve-2012-5664-test

GitHubphusion/rails-cve-2012-5664-test

Demo app showing how the Rails CVE-2013-5664 vulnerability works.

code-analysisdatabase-securityeducation+2
213 years ago
Django-faille-CVE-2025-57833_test preview

Django-faille-CVE-2025-57833_test

GitHubloic-houchi/django-faille-cve-2025-57833_test
code-analysisdatabase-securityeducation+3
211 months ago
CVE-2022-37210 preview

CVE-2022-37210

GitHubagainstthelight/cve-2022-37210

CVE-2022-37210 POC

code-analysisdatabase-securityexploitation+3
13 years ago
Previous123Next