Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
12 results
carina preview

carina

GitHubcodelatteid/carina

Webshell, Virtual Private Server (VPS) and cPanel Database

command-and-controldatabase-securitypenetration-testing+1
39
4 years ago
DarkReplica preview

DarkReplica

GitHubyoyosh/darkreplica

CVE-2026-23631 (DarkReplica) Redis Exploit

database-securityexploitationpenetration-testing+3
323 months ago
CVE-2022-24706-CouchDB-Exploit preview

CVE-2022-24706-CouchDB-Exploit

GitHubsadshade/cve-2022-24706-couchdb-exploit

Apache CouchDB 3.2.1 - Remote Code Execution (RCE)

database-securityexploitationpenetration-testing+2
294 years ago
CVE-2025-24799 preview

CVE-2025-24799

GitHubgalisko/cve-2025-24799

Unauthenticated SQL injection exploit for GLPI versions before 10.0.18, enabling database enumeration, credential extraction, and API token…

database-securityexploitationpenetration-testing+3
6 days ago
MongoDeepDive preview

MongoDeepDive

GitHubtunahantekeoglu/mongodeepdive

Context-Aware Memory Leak Scanner & Exploit for CVE-2025-14847.

database-securityexploitationinformation-gathering+3
8 months ago
xtrace-sdk preview

xtrace-sdk

GitHubxtraceai/xtrace-sdk

open source version xtrace sdk

ai-securityapi-securitycloud-security+5
9225 months ago
agentsh preview

agentsh

GitHubcanyonroad/agentsh

Execution-Layer Security (ELS) for AI agents — policy-enforced shell with audit.

ai-securityauthentication-authorizationcloud-security+7
3831 month ago
database-sentinel preview

database-sentinel

GitHubfarenhytee/database-sentinel

Claude Skill that audits your projects for RLS misconfigurations, exposed keys, auth bypasses, and storage vulnerabilities. 27 anti-patterns sourced…

ai-securityauthentication-authorizationcloud-security+8
434 months ago
vibe-coding-security preview

vibe-coding-security

GitHubboxed-dev/vibe-coding-security

Pre-launch security checklist for AI-generated apps (Lovable, v0, Bolt, Cursor). 69 checks covering Supabase RLS, exposed keys, and prompt injection.…

ai-securityapi-securityauthentication+9
151 month ago
pgadmin-ai-assistant-sql-injection-cve-2026-17351-lexer-differential-bypass preview

pgadmin-ai-assistant-sql-injection-cve-2026-17351-lexer-differential-bypass

GitHubhunt-benito/pgadmin-ai-assistant-sql-injection-cve-2026-17351-lexer-differential-bypass

Proof-of-concept demonstrating CVE-2026-17351 SQL injection bypass in pgAdmin 4's AI Assistant via sqlparse/PostgreSQL lexer differential, including…

ai-securitydatabase-securityeducation+4
1 month ago
CVE-2024-8309 preview

CVE-2024-8309

GitHubliadlevy/cve-2024-8309

Proof-of-concept demonstrating prompt injection in Langchain's GraphCypherQAChain leading to SQL injection in Neo4j databases. Includes Docker-based…

ai-securitydatabase-securityeducation+3
31 year ago
CVE-2026-42208 preview

CVE-2026-42208

GitHub0xblackash/cve-2026-42208

CVE-2026-40487

ai-securityapi-securitydatabase-security+3
4 months ago