Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
196 results
pedrocruz2202.github.io preview

pedrocruz2202.github.io

GitHubpedrocruz2202/pedrocruz2202.github.io

🛡️ Detect vulnerable MongoDB instances with the high-performance MongoBleed scanner for CVE-2025-14847, ensuring network security and data…

database-securityexploitationnetwork-security+2
7 months ago
nosqlpot preview

nosqlpot

GitHubtorque59/nosqlpot

The NoSQL Honeypot Framework

database-securitydefensive-toolsnetwork-security
1049 years ago
CVE-2012-1675 preview

CVE-2012-1675

GitHubbongbongco/cve-2012-1675

Oracle Database TNS Listener Poison Attack Vulnerability

database-securityexploitationnetwork-security+2
128 years ago
CVE-2026-61511-PoC-Exploit preview

CVE-2026-61511-PoC-Exploit

GitHubtc4dy/cve-2026-61511-poc-exploit

CVE-2026-61511 – vBulletin Pre-Auth RCE (CVSS 9.8). Vuln 5.x/6.x (unpatched). Multi-exploit via Endpoint Pool, AJAX, PHPFuck WAF bypass. Full…

database-securityexploitationnetwork-mapping+7
514 days ago
mysslstrip preview
Archived

mysslstrip

GitHubduo-labs/mysslstrip

CVE-2015-3152 PoC

database-securityexploitationids-ips-evasion+3
4311 years ago
awesome-security-hardening preview

awesome-security-hardening

GitHubdecalage2/awesome-security-hardening

A collection of awesome security hardening guides, tools and other resources

cloud-securityconfiguration-auditingcontainer-security+6
6.5k3 months ago
MongoBleed preview

MongoBleed

GitHubsho-luv/mongobleed

CVE-2025-14847 (MongoBleed) scanner and exploit tool. Unauthenticated MongoDB heap memory leak via zlib decompression. Detection, memory extraction,…

ctfdatabase-securityeducation+6
26 months ago
MongoBleed-exploit preview

MongoBleed-exploit

GitHubeljoamy/mongobleed-exploit

MongoBleed (CVE-2025-14847) Lab & PoC : A complete educational environment to reproduce the critical unauthenticated memory leak in MongoDB. Includes…

ctfdatabase-securityeducation+5
7 months ago
SQLC2 preview

SQLC2

GitHubnetspi/sqlc2

SQLC2 is a PowerShell script for deploying and managing a command and control system that uses SQL Server as both the control server and the agent.

cloud-securitycommand-and-controldatabase-security+3
753 years ago
CVE-2024-43468 preview

CVE-2024-43468

GitHubsynacktiv/cve-2024-43468
database-securityexploitationpenetration-testing+2
964 months ago
react2shell-toolkit preview

react2shell-toolkit

GitHubolezhaku/react2shell-toolkit

Toolkit for CVE-2025-55182, also known as React2Shell.

cloud-securitydatabase-securityexploitation+8
42 months ago
CVE-2025-59213 preview

CVE-2025-59213

GitHubsynacktiv/cve-2025-59213
database-securityexploitationpenetration-testing+2
33 months ago
redis-stack-CVE-2024-55656 preview

redis-stack-CVE-2024-55656

GitHubrick2600/redis-stack-cve-2024-55656
binary-exploitationdatabase-securityexploitation+3
1 year ago
wodat preview

wodat

GitHubinitroot/wodat

Windows Oracle Database Attack Toolkit

database-securitypassword-attackspenetration-testing+1
804 years ago
CVE-2026-54350-Budibase-NoSQL-Injection preview

CVE-2026-54350-Budibase-NoSQL-Injection

GitHubbiitts/cve-2026-54350-budibase-nosql-injection

PoC for CVE-2026-54350 — Budibase unauthenticated NoSQL operator injection (CVSS 10.0). Read/mass-write any document collection via a PUBLIC query.

database-securityexploitationpayload-development+4
1 month ago
MongoBLEED---CVE-2025-14847-POC- preview

MongoBLEED---CVE-2025-14847-POC-

GitHubnonameerror/mongobleed---cve-2025-14847-poc-

This repo contains my python script version of CVE-2025-14847 (MongoBleed)

database-securityexploitationfuzzing+3
17 months ago
MultiExploit preview

MultiExploit

GitHubvesu-nights/multiexploit

CVE-2023-21173 Exploit - Remote Code Execution in SQL Server 2022

authenticationdatabase-securityexploitation+3
1 year ago
jumpserver preview

jumpserver

GitHubjumpserver/jumpserver

JumpServer is an open-source Privileged Access Management (PAM) platform that provides DevOps and IT teams with on-demand and secure access to SSH,…

authentication-authorizationcloud-securityconfiguration-auditing+5
31.4k11h 5m ago
Previous12…11Next