Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
16 results
CVE-2025-10046 preview
Archived

CVE-2025-10046

GitHubbytereaper77/cve-2025-10046

exploit SQL injection ELEX WooCommerce Google Shopping

database-securityexploitationpenetration-testing+3
6
0 years ago
WordPress--CVE-2022-21661 preview

WordPress--CVE-2022-21661

GitHubcharondefalt/wordpress--cve-2022-21661

Proof-of-concept exploit for CVE-2022-21661, a SQL injection vulnerability in WordPress Core WP_Query, demonstrating the attack and providing…

database-securityexploitationpenetration-testing+3
2 years ago
wp2shell-compromise-scanner-plugin preview

wp2shell-compromise-scanner-plugin

GitHubeyesecurity/wp2shell-compromise-scanner-plugin

Read-only WordPress plugin that scans for artifacts of the wp2shell exploit chain (CVE-2026-63030 / CVE-2026-60137)

database-securitydigital-forensicsforensics+5
1 month ago
CVE-2025-11391 preview

CVE-2025-11391

GitHubmoritakaaz/cve-2025-11391

WordPress PPOM for WooCommerce Plugin <= 33.0.15 is vulnerable to SQL Injection

database-securityeducationexploitation+4
10 months ago
CVE-2025-2011-poc preview

CVE-2025-2011-poc

GitHubzsy107u/cve-2025-2011-poc

Proof-of-concept exploit for CVE-2025-2011, a SQL injection vulnerability in WordPress Depicter Plugin 3.6.1, enabling database enumeration and data…

database-securityexploitationpenetration-testing+2
8 months ago
CVE-2023-45657 preview

CVE-2023-45657

GitHubrandomrobbiebf/cve-2023-45657

Nexter <= 2.0.3 - Authenticated (Subscriber+) SQL Injection via 'to' and 'from'

database-securityexploitationpenetration-testing+3
2 years ago
CVE-2025-69295 preview

CVE-2025-69295

GitHubhexissam/cve-2025-69295

Blind SQL injection vulnerability detection tool for TeconceTheme Coven Core WordPress theme. Enables safe testing of input sanitization and…

database-securityeducationinformation-gathering+3
6 months ago
CVE-2024-7854 preview

CVE-2024-7854

GitHubrandomrobbiebf/cve-2024-7854

Woo Inquiry <= 0.1 - Unauthenticated SQL Injection

database-securityexploitationinformation-gathering+3
11 year ago
CVE-2023-41652 preview

CVE-2023-41652

GitHubrandomrobbiebf/cve-2023-41652

RSVPMarker <= 10.6.6 - Unauthenticated SQL Injection

database-securityexploitationpenetration-testing+3
1 year ago
CVE-2024-9796 preview

CVE-2024-9796

GitHubrandomrobbiebf/cve-2024-9796

WordPress WP-Advanced-Search <= 3.3.9 - Unauthenticated SQL Injection

database-securityexploitationinformation-gathering+3
41 year ago
CVE-2022-21661-Demo preview

CVE-2022-21661-Demo

GitHubdaniel616/cve-2022-21661-demo

Demonstration of the SQL injection vulnerability in wordpress 5.8.2

database-securityeducationlabs-practice+3
23 years ago
CVE-2024-8529 preview

CVE-2024-8529

GitHubrandomrobbiebf/cve-2024-8529

LearnPress – WordPress LMS Plugin <= 4.2.7 - Unauthenticated SQL Injection via 'c_fields'

database-securityexploitationinformation-gathering+3
21 year ago
CVE-2022-21661 preview

CVE-2022-21661

GitHubsafe3s/cve-2022-21661

The first poc video presenting the sql injection test from ( WordPress Core 5.8.2-'WP_Query' / CVE-2022-21661)

database-securityexploitationpenetration-testing+3
3 years ago
CVE-2024-33911 preview

CVE-2024-33911

GitHubxbz0n/cve-2024-33911

Proof-of-concept exploit for CVE-2024-33911, a post-authenticated SQL injection vulnerability in The School Management WordPress plugin v10.3.4,…

database-securityexploitationpenetration-testing+3
22 years ago
sudowp-adminer preview

sudowp-adminer

GitHubsudo-wp/sudowp-adminer

A secure, zero-trust database management tool for WordPress. Fixes critical SSRF vulnerabilities (CVE-2021-21311) by enforcing local connections only.

authentication-authorizationcloud-securitydatabase-security+3
15 months ago
CVE-2026-60137 preview

CVE-2026-60137

GitHubadarshthakur14777-cyber/cve-2026-60137

wpsqli full SQLi extractor + dumper for CVE-2026-60137

database-securityexploitationinformation-gathering+5
1 month ago