Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
344 results
nuclei preview

nuclei

GitHubprojectdiscovery/nuclei

Fast YAML-based vulnerability scanner with template-driven detection engine for automated security testing across web apps, APIs, networks, DNS, and…

anti-botapi-securityapi-security-testing+21
30.4k
2 days ago
sqlmap preview

sqlmap

GitHubsqlmapproject/sqlmap

Automatic SQL injection and database takeover tool

api-securityapi-security-testingcrawler+12
38.2k2 days ago
wapiti preview

wapiti

GitHubwapiti-scanner/wapiti

Web vulnerability scanner written in Python3

api-security-testingconfiguration-auditingcrawler+11
1.9k29 days ago
zaproxy preview

zaproxy

GitHubzaproxy/zaproxy

Open-source web application security scanner for automated vulnerability detection, manual penetration testing, and API security testing with a…

android-securityapi-securityapi-security-testing+15
15.6k2 days ago
cve-2021-29442-Nacos-Derby-rce-exp preview

cve-2021-29442-Nacos-Derby-rce-exp

GitHubnanaao/cve-2021-29442-nacos-derby-rce-exp

Nacos Derby命令执行漏洞利用脚本

command-and-controldatabase-securityexploitation+3
1 year ago
CVE-2025-26794 preview

CVE-2025-26794

GitHuboscarbataille/cve-2025-26794

CVE-2025-26794: Blind SQL injection in Exim 4.98 (SQLite DBM)- exploit writeup

database-securityeducationexploitation+4
151 year ago
CVE-2024-4879 preview

CVE-2024-4879

GitHub0xwhoami35/cve-2024-4879

Exploit script for ServiceNow CVE-2024-4879 that enables unauthenticated remote code execution, with mass target scanning and database dumping…

database-securityexploitationinformation-gathering+3
2 years ago
CVE-2024-34222 preview

CVE-2024-34222

GitHubdovankha/cve-2024-34222

Proof-of-concept for SQL injection vulnerability in SourceCodester Human Resource Management System 1.0, demonstrating arbitrary SQL command…

database-securityexploitationpenetration-testing+2
2 years ago
CVE-2024-50971 preview

CVE-2024-50971

GitHubakhlak2511/cve-2024-50971

Proof-of-concept for CVE-2024-50971, a SQL injection vulnerability in Itsourcecode Construction Management System 1.0, with exploitation steps and…

database-securityexploitationpenetration-testing+2
1 year ago
CVE-2024-48245 preview

CVE-2024-48245

GitHubshadowbyte1/cve-2024-48245

SQL Injection Vulnerability in Vehicle Management System 1.0 - 1.3

database-securityexploitationpenetration-testing+3
11 year ago
jsql-injection preview

jsql-injection

GitHubron190/jsql-injection

Automated SQL injection detection and exploitation tool for extracting database information from web applications, supporting multiple injection…

database-securitypenetration-testingvulnerability-scanners+1
1.8k3 months ago
CVE-2024-35584 preview

CVE-2024-35584

GitHubwhwhwh96/cve-2024-35584

OpenSIS SQLi Injection

database-securityeducationexploitation+3
12 years ago
CVE-2023-49970 preview

CVE-2023-49970

GitHubgeraldoalcantara/cve-2023-49970

Customer Support System 1.0 - SQL Injection Vulnerability in the "subject" Parameter During "save_ticket" Operation

database-securityexploitationpenetration-testing+2
2 years ago
CVE-2026-44706 preview

CVE-2026-44706

GitHubhakaioffsec/cve-2026-44706

Chatwoot SQL injection in FilterService

authenticationdatabase-securityeducation+4
64 months ago
CVE-2024-51482 preview

CVE-2024-51482

GitHubbridgeralderson/cve-2024-51482

ZenoMinder Blind SQL Injection PoC

database-securityeducationexploitation+4
87 months ago
CVE-2020-7471 preview

CVE-2020-7471

GitHubsaferman/cve-2020-7471

django 漏洞:CVE-2020-7471 Potential SQL injection via StringAgg(delimiter) 的漏洞环境和 POC

database-securityeducationlabs-practice+2
1036 years ago
CVE-2023-27524-Apache-Superset-Auth-Bypass-and-RCE preview

CVE-2023-27524-Apache-Superset-Auth-Bypass-and-RCE

GitHubjakabakos/cve-2023-27524-apache-superset-auth-bypass-and-rce

Exploit for CVE-2023-27524 targeting Apache Superset auth bypass and RCE. Forges session cookies, enumerates databases/users, executes OS commands,…

authentication-authorizationcommand-and-controldatabase-security+5
283 years ago
CVE-2023-25157-and-CVE-2023-25158 preview

CVE-2023-25157-and-CVE-2023-25158

GitHubmurataydemir/cve-2023-25157-and-cve-2023-25158

GeoServer & GeoTools SQL Injection (CVE-2023-25157 & CVE-2023-25158)

database-securityeducationexploitation+3
143 years ago
Previous12…20Next