Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

344 results

POC_SQL_injection_in_Parse_Server_prior_6.5.7_-_7.1.0

heavyghost-le/poc_sql_injection_in_parse_server_prior_6.5.7_-_7.1.0

Advanced PostgreSQL database enumeration tool exploiting CVE-2024-39309 in Parse Server - Comprehensive SQL injection exploitation for security…

database-securityexploitationinformation-gathering+3

8 days ago

CVE-2026-60137

adarshthakur14777-cyber/cve-2026-60137

wpsqli full SQLi extractor + dumper for CVE-2026-60137

database-securityexploitationinformation-gathering+5

3 months ago

cve-2021-29442-Nacos-Derby-rce-exp

nanaao/cve-2021-29442-nacos-derby-rce-exp

Nacos Derby命令执行漏洞利用脚本

command-and-controldatabase-securityexploitation+3

1 year ago

CVE-2023-45657

randomrobbiebf/cve-2023-45657

Nexter <= 2.0.3 - Authenticated (Subscriber+) SQL Injection via 'to' and 'from'

database-securityexploitationpenetration-testing+3

3 years ago

CVE-2025-11391

moritakaaz/cve-2025-11391

WordPress PPOM for WooCommerce Plugin <= 33.0.15 is vulnerable to SQL Injection

database-securityeducationexploitation+4

1 year ago

CVE-2024-7854

randomrobbiebf/cve-2024-7854

Woo Inquiry <= 0.1 - Unauthenticated SQL Injection

database-securityexploitationinformation-gathering+3

12 years ago

CVE-2023-41652

randomrobbiebf/cve-2023-41652

RSVPMarker <= 10.6.6 - Unauthenticated SQL Injection

database-securityexploitationpenetration-testing+3

1 year ago

CVE-2024-32640-SQLI-MuraCMS

0xyumeko/cve-2024-32640-sqli-muracms

Exploit script for CVE-2024-32640, an SQL injection vulnerability in Mura/Masa CMS, using ghauri to enumerate and dump database contents.

database-securityexploitationpenetration-testing+3

12 years ago

CVE-2021-43650

openxp-research/cve-2021-43650

Webrun <= 3.6.0.42 SQLi

database-securityexploitationpenetration-testing+3

2 years ago

sqlmap

sqlmapproject/sqlmap

Automatic SQL injection and database takeover tool

api-securityapi-security-testingcrawler+12

38.2k2 days ago

CVE-2024-43468

synacktiv/cve-2024-43468

Exploit for CVE-2024-43468: unauthenticated SQL injection in Microsoft Configuration Manager Management Points, enabling arbitrary SQL execution and…

database-securityexploitationpenetration-testing+2

966 months ago

CVE-2010-3600-PythonHackOracle11gR2

laitrungminhduc/cve-2010-3600-pythonhackoracle11gr2

This Python 3 script is for uploading shell (and other files) to Windows Server / Linux via Oracle 11g R2 (CVE-2010-3600).

database-securityexploitationpenetration-testing+1

28 years ago

CVE-2024-10140

holypryx/cve-2024-10140

SQL injection exploit script targeting CVE-2024-10140 in the /php/manage_supplier.php endpoint, enabling arbitrary SQL command injection via the id…

database-securityexploitationpenetration-testing+2

22 years ago

CVE-2023-38890

akshadjoshi/cve-2023-38890

poc

database-securityexploitationpenetration-testing+3

3 years ago

Archived

CVE-2025-46171

oiyl/cve-2025-46171

Writeup of a Denial of Service vulnerability in the vBulletin 3.8.7 friends list.

database-securitymisconfigurationpenetration-testing+2

41 year ago

CVE-2026-69083_exploit

0xdak/cve-2026-69083_exploit

Python PoC for CVE-2026-69083, an unauthenticated SQL injection in SiYuan's asset-content search endpoint. Supports REGEXP breakout and raw SQL…

database-securitydata-exfiltrationexploitation+2

2 months ago

CVE-2024-46636-SQLi-MODAPS

nu1l0/cve-2024-46636-sqli-modaps

SQL Injection vulnerability in NASA EOSDIS MODAPS due to improper input validation in the `category` parameter. This flaw allows attackers to…

database-securityinformation-gatheringpenetration-testing+2

26 months ago

CVE-2025-45809-PoC

learner202649/cve-2025-45809-poc

Time-based blind SQL injection proof-of-concept for LiteLLM v1.65.4. Exploits the `/key/block` endpoint to extract database contents and read server…

api-security-testingdatabase-securityeducation+3

5 months ago

Previous 123…20 Next