Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
59 results
cve-2020-6864 preview

cve-2020-6864

GitHubgigachadusers/cve-2020-6864

Lightweight C++ scanner to detect ZTE devices vulnerable to CVE-2020-6864, enabling rapid identification of exploitable network targets.

exploitationinformation-gatheringnetwork-security+2
2
6 months ago
CVE-2019-9511_Priority-Churn-Data-Dribble preview

CVE-2019-9511_Priority-Churn-Data-Dribble

GitHubharley-ghostie/cve-2019-9511_priority-churn-data-dribble

Lightweight HTTP/2 probes for controlled validation of CVE-2019-9511 (Data Dribble) and CVE-2019-9513 (Priority Churn) DoS vectors in authorized…

exploitationnetwork-securitypenetration-testing+2
5 months ago
acropalypse-reconstructor preview

acropalypse-reconstructor

GitHubiqbaalilmii/acropalypse-reconstructor

A lightweight CLI tool to detect and reconstruct cropped images vulnerable to Acropalypse (CVE-2023-21036 and CVE-2023-28303) written in Python.

data-recoverydigital-forensicsexploitation+2
14 months ago
SSH-Terrapin-Prefix-Truncation-Weakness-CVE-2023-48795-Checker preview

SSH-Terrapin-Prefix-Truncation-Weakness-CVE-2023-48795-Checker

GitHubmr-whiskerss/ssh-terrapin-prefix-truncation-weakness-cve-2023-48795-checker

Lightweight Python scanner for CVE-2023-48795 (SSH Terrapin prefix truncation). Performs passive banner grab and KEXINIT parse to detect vulnerable…

exploitationinformation-gatheringnetwork-security+3
14 months ago
CVE-2010-4476-check preview

CVE-2010-4476-check

GitHubgrzegorzblaszczyk/cve-2010-4476-check

Lightweight Java-based checker for CVE-2010-4476 (Oracle Java Web Start vulnerability). Compiles and runs to verify system exposure.

exploitationvulnerability-analysisweb-security
115 years ago
CVE-2025-55182 preview

CVE-2025-55182

GitHubr4j3sh-com/cve-2025-55182

Lightweight Go toolkit plus a Dockerized Next.js lab to explore and triage CVE-2025-55182.

educationexploitationintrusion-detection+3
10 months ago
CVE-2024-46506 preview

CVE-2024-46506

GitHubfufu-byte/cve-2024-46506

Standalone Python exploit for CVE-2024-46506, providing a lightweight, portable remote code execution module without requiring the Metasploit…

educationexploitationpenetration-testing+2
9 months ago
local-mcp preview

local-mcp

GitHubfan-67/local-mcp

A lightweight stdio-based MCP server for local file system operations — read, write, edit, search, exec for AI assistants. Specially optimized for…

exploitationgeneral-purpose-utilitiesscripting-automation+2
4 months ago
MassScanning-CVE-2025-55182 preview

MassScanning-CVE-2025-55182

GitHubmrmahile/massscanning-cve-2025-55182

A lightweight orchestrator and worker scanner setup for running large/continuous scans across split input files. This repository contains…

container-securitydevsecopsexploitation+2
7 months ago
CVE-2021-2109 preview

CVE-2021-2109

GitHubdinosn/cve-2021-2109

Lightweight Python scanner for CVE-2021-2109 that checks target URLs for the specific vulnerability with minimal dependencies.

exploitationpenetration-testingreconnaissance+2
5 years ago
shellshock preview

shellshock

GitHubajansha/shellshock

Shelly is a lightweight and efficient vulnerability scanner designed to identify and mitigate Shellshock (CVE-2014-6271 & CVE-2014-7169)…

exploitationinformation-gatheringpenetration-testing+3
2 years ago
CVE-2017-9798 preview

CVE-2017-9798

GitHubl0n3rs/cve-2017-9798

Lightweight Python script to detect CVE-2017-9798 in shared hosting environments by scanning for vulnerable .htaccess files, exiting with code 1 if…

exploitationmisconfigurationpenetration-testing+2
9 years ago
CVE-2024-9474 preview

CVE-2024-9474

GitHubdeathvu/cve-2024-9474

Proof-of-concept exploit for CVE-2024-9474 targeting Palo Alto PAN-OS. Lightweight Python script for testing vulnerability against specified URLs.

exploitationpenetration-testingreconnaissance+2
1 year ago
CVE-2023-22515-Scan. preview

CVE-2023-22515-Scan.

GitHubedsonjt81/cve-2023-22515-scan.

Lightweight scanner for CVE-2023-22515 that detects vulnerable Atlassian Confluence instances by probing the /server-info.action endpoint and…

exploitationinformation-gatheringpenetration-testing+3
2 years ago
CVE-2025-24813-checker preview

CVE-2025-24813-checker

GitHubhorsehacks/cve-2025-24813-checker

Lightweight Python-based checker for CVE-2025-24813, designed to detect and validate the vulnerability in target systems for rapid security…

exploitationinformation-gatheringpenetration-testing+3
1 year ago
CVE-2020-0618_DETECTION preview

CVE-2020-0618_DETECTION

GitHubn3xtgenh4cker/cve-2020-0618_detection

Lightweight Python PoC to detect CVE-2020-0618 Remote Code Execution vulnerability in Microsoft SQL Server Reporting Services via SOAP API path…

educationexploitationpenetration-testing+3
1 year ago
Detect-CVE-2021-21972 preview

Detect-CVE-2021-21972

GitHubjmousqueton/detect-cve-2021-21972

Lightweight Python scanner to detect CVE-2021-21972 VMware vCenter vulnerability with automated exploitation checks for penetration testing.

exploitationinformation-gatheringpenetration-testing+2
5 years ago
CVE-2024-6387-checkher preview

CVE-2024-6387-checkher

GitHubmufti22/cve-2024-6387-checkher

Lightweight Python script to check systems for CVE-2024-6387 vulnerability, enabling rapid identification of affected hosts for remediation.

exploitationinformation-gatheringpenetration-testing+2
2 years ago
Previous1234Next