Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
564 results
solarflare preview

solarflare

GitHubmubix/solarflare

SolarWinds Orion Account Audit / Password Dumping Utility

database-securityencryption-decryption-toolspassword-cracking+1
3522 years ago
pgedge-anonymizer preview

pgedge-anonymizer

GitHubpgedge/pgedge-anonymizer

An anonymizer tool for replacing PII and similar data in dev/test databases copied from production

database-securitydata-exfiltrationdevsecops+3
3221 days ago
sqlwinds preview

sqlwinds

GitHubblue0x1/sqlwinds

SQLWinds - SQL Server Security Assessment & Post-Exploitation Toolkit

configuration-auditingdatabase-securitydata-exfiltration+7
1 year ago
Blisqy preview

Blisqy

GitHubjohntroony/blisqy

Version 0.2 - Exploit Time-based blind-SQL injection in HTTP-Headers (MySQL/MariaDB).

database-securityexploitationfuzzing+2
4157 years ago
sqlancer preview

sqlancer

GitHubsqlancer/sqlancer

Automated testing to find logic and performance bugs in database systems

database-securityeducationfuzzing+2
1.8k15 days ago
dbeaver preview

dbeaver

GitHubdbeaver/dbeaver

Free universal database tool and SQL client

authentication-authorizationcloud-securitydatabase-security+3
52.0k14h 13m ago
slowql preview

slowql

GitHubslowql/slowql

Next-generation SQL static analyzer written in Rust. 282+ rules. Zero false positives. Security, performance, reliability, cost, compliance, quality.…

code-analysisconfiguration-auditingdatabase-security+6
2263 months ago
CVE-2021-27928-POC preview

CVE-2021-27928-POC

GitHubshamo0/cve-2021-27928-poc

CVE-2021-27928-POC

database-securityexploitationpayload-generation+3
14 years ago
jsql-injection preview

jsql-injection

GitHubron190/jsql-injection

Automated SQL injection detection and exploitation tool for extracting database information from web applications, supporting multiple injection…

database-securitypenetration-testingvulnerability-scanners+1
1.8k2 months ago
ghauri preview

ghauri

GitHubr0oth3x49/ghauri

An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws

database-securitypenetration-testingvulnerability-scanners+2
4.1k1 year ago
msdat preview

msdat

GitHubquentinhardy/msdat

MSDAT: Microsoft SQL Database Attacking Tool

database-securityexploitationinformation-gathering+3
1.0k3 years ago
SQLRecon preview

SQLRecon

GitHubskahwah/sqlrecon

A C# MS SQL toolkit designed for offensive reconnaissance and post-exploitation.

authenticationdatabase-securityexploitation+5
8173 months ago
mssqlproxy preview

mssqlproxy

GitHubblackarrowsec/mssqlproxy

mssqlproxy is a toolkit aimed to perform lateral movement in restricted environments through a compromised Microsoft SQL Server via socket reuse

database-securitylateral-movementpenetration-testing+1
7736 years ago
testenv preview

testenv

GitHubsqlmapproject/testenv

A collection of web pages vulnerable to SQL injection flaws

database-securityeducationlabs-practice+3
3544 years ago
SQLRecon preview

SQLRecon

GitHubxforcered/sqlrecon

A C# MS SQL toolkit designed for offensive reconnaissance and post-exploitation.

database-securityexploitationlateral-movement+6
4001 year ago
pysqli preview

pysqli

GitHubsysdream/pysqli

Python SQL injection framework

database-securityexploit-frameworkspenetration-testing+3
13213 years ago
CVE-2020-7471 preview

CVE-2020-7471

GitHubsaferman/cve-2020-7471

django 漏洞:CVE-2020-7471 Potential SQL injection via StringAgg(delimiter) 的漏洞环境和 POC

database-securityeducationlabs-practice+2
1036 years ago
andor preview

andor

GitHubsadicann/andor

Blind SQL Injection Tool with Golang

database-securitypenetration-testingvulnerability-analysis+1
884 years ago
Previous12…32Next