Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
158 results
CVE-2024-51482 preview

CVE-2024-51482

GitHubbwithe/cve-2024-51482

CVE-2024-51482 ZoneMinder v1.37.* <= 1.37.64 poc

database-securityeducationexploitation+4
11 year ago
CVE-2023-39593 preview

CVE-2023-39593

GitHubant1sec-ops/cve-2023-39593

Database authenticated code execution

command-and-controldatabase-securityeducation+6
21 year ago
rails-cve-2012-5664-test preview

rails-cve-2012-5664-test

GitHubphusion/rails-cve-2012-5664-test

Demo app showing how the Rails CVE-2013-5664 vulnerability works.

code-analysisdatabase-securityeducation+2
213 years ago
CVE-2022-28346 preview

CVE-2022-28346

GitHubkamal-marouane/cve-2022-28346

A flaw was found in the Django package, which leads to a SQL injection. This flaw allows an attacker using a crafted dictionary containing malicious…

database-securityeducationexploitation+3
12 years ago
cve-2026-9082 preview

cve-2026-9082

GitHublysophavin18/cve-2026-9082

cve poc

database-securityeducationexploitation+3
4 months ago
RedTeamBrasil-CVE-2025-64459 preview

RedTeamBrasil-CVE-2025-64459

GitHubrafaelchriss/redteambrasil-cve-2025-64459

NEO-SQLi — exploit Django _connector SQL Injection (CVE-2025-64459) | canal RedTeam Brasil

database-securityeducationexploitation+3
3 months ago
CVE-2025-68400 preview

CVE-2025-68400

GitHublukasz-rybak/cve-2025-68400

Technical disclosure of a critical time-based blind SQL injection vulnerability (CVE-2025-68400) in ChurchCRM, including vulnerable code analysis,…

database-securityeducationexploitation+3
5 months ago
CVE-2026-24417 preview

CVE-2026-24417

GitHublukasz-rybak/cve-2026-24417

CVE-2026-24417 - OpenSTAManager has a Time-Based Blind SQL Injection with Amplified Denial of Service

database-securityeducationexploitation+3
5 months ago
CVE-2025-69214 preview

CVE-2025-69214

GitHublukasz-rybak/cve-2025-69214

Proof-of-concept for CVE-2025-69214: SQL injection in OpenSTAManager's ajax_select.php componenti endpoint. Includes vulnerable code analysis,…

database-securityeducationexploitation+3
5 months ago
CVE-2025-69215 preview

CVE-2025-69215

GitHublukasz-rybak/cve-2025-69215

CVE-2025-69215 - OpenSTAManager has an SQL Injection in the Stampe Module

database-securityeducationexploitation+3
5 months ago
CVE-2025-69216 preview

CVE-2025-69216

GitHublukasz-rybak/cve-2025-69216

Proof-of-concept repository for CVE-2025-69216, an authenticated SQL injection in OpenSTAManager's Scadenzario print template, enabling extraction of…

database-securityeducationexploitation+3
5 months ago
CVE-2025-65950 preview

CVE-2025-65950

GitHublukasz-rybak/cve-2025-65950

Proof-of-concept exploit for a critical time-based blind SQL injection vulnerability in WBCE CMS, enabling low-privileged users to execute arbitrary…

database-securityeducationexploitation+3
5 months ago
CVE-2026-22243 preview

CVE-2026-22243

GitHublukasz-rybak/cve-2026-22243

CVE-2026-22243 - EGroupware has SQL Injection in Nextmatch Filter Processing

database-securityeducationexploitation+3
5 months ago
CVE-2026-42569 preview

CVE-2026-42569

GitHub0xblackash/cve-2026-42569

CVE-2026-42569

database-securityeducationexploitation+3
4 months ago
CVE-2025-8714-POC preview

CVE-2025-8714-POC

GitHuborderby99/cve-2025-8714-poc

PoC de RCE en PostgreSQL — CVE-2025-8714

database-securityeducationexploitation+3
21 year ago
bouncer-overflow preview

bouncer-overflow

GitHubnicolasjulian/bouncer-overflow

Working POC of CVE-2026-6664 written by Sonnet 4.6

binary-exploitationdatabase-securityeducation+3
4 months ago
CVE-2026-25514 preview

CVE-2026-25514

GitHublukasz-rybak/cve-2026-25514

CVE-2026-25514 - FacturaScripts has SQL Injection in Autocomplete Actions

database-securityeducationexploitation+3
5 months ago
CVE-2026-10290-SQLI preview

CVE-2026-10290-SQLI

GitHubxmyronn/cve-2026-10290-sqli

Proof-of-concept for unauthenticated SQL injection in Hotel and Tourism Reservation System 1.0, demonstrating database extraction via the tour…

database-securityeducationexploitation+3
4 months ago
Previous1…456…9Next