Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
14 results
enumdb preview

enumdb

GitHubm8sec/enumdb

Relational database brute force and post exploitation tool for MySQL and MSSQL

database-securityinformation-gatheringpassword-attacks+2
221
2 years ago
SQLRecon preview

SQLRecon

GitHubskahwah/sqlrecon

A C# MS SQL toolkit designed for offensive reconnaissance and post-exploitation.

authenticationdatabase-securityexploitation+5
8142 months ago
SQLRecon preview

SQLRecon

GitHubxforcered/sqlrecon

A C# MS SQL toolkit designed for offensive reconnaissance and post-exploitation.

database-securityexploitationlateral-movement+6
3991 year ago
sqlwinds preview

sqlwinds

GitHubblue0x1/sqlwinds

SQLWinds - SQL Server Security Assessment & Post-Exploitation Toolkit

configuration-auditingdatabase-securitydata-exfiltration+7
11 months ago
CVE-2025-50867 preview

CVE-2025-50867

GitHubsacx-7/cve-2025-50867

Proof-of-concept for a time-based blind SQL injection vulnerability in the takeassessment2.php endpoint of CloudClassroom-PHP-Project 1.0,…

database-securityexploitationpenetration-testing+2
1 year ago
CVE-2020-24913-PoC preview

CVE-2020-24913-PoC

GitHubagarma/cve-2020-24913-poc

A Poc for CVE-2020-24913, a SQL injection vulnerability in qcubed (all versions including 3.1.1) in profile.php via the strQuery parameter allows an…

database-securityexploitationpenetration-testing+2
2 years ago
DarkReplica preview

DarkReplica

GitHubyoyosh/darkreplica

CVE-2026-23631 (DarkReplica) Redis Exploit

database-securityexploitationpenetration-testing+3
332 months ago
CVE-2022-24707 preview

CVE-2022-24707

GitHubaltelus1/cve-2022-24707

PoC of CVE-2022-24707

database-securityexploitationinformation-gathering+3
134 years ago
CVE-2024-32136 preview

CVE-2024-32136

GitHubxbz0n/cve-2024-32136
database-securityexploitationpenetration-testing+3
32 years ago
CVE-2024-33911 preview

CVE-2024-33911

GitHubxbz0n/cve-2024-33911
database-securityexploitationpenetration-testing+3
22 years ago
CVE-2025-50383 preview

CVE-2025-50383

GitHubabdullah4eb/cve-2025-50383

A low-privileged user can exploit this via a crafted order_by parameter, causing time-based blind SQL injection.

database-securityexploitationpenetration-testing+3
11 months ago
CVE-2024-0399 preview

CVE-2024-0399

GitHubxbz0n/cve-2024-0399
database-securityexploitationpenetration-testing+3
12 years ago
CVE-2021-43650 preview

CVE-2021-43650

GitHubopenxp-research/cve-2021-43650

Webrun <= 3.6.0.42 SQLi

database-securityexploitationpenetration-testing+3
1 year ago
CVE-2023-31717 preview

CVE-2023-31717

GitHubmateustesser/cve-2023-31717
database-securityexploitationscada-ics-security+2
2 years ago