Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

3924 results

CVE-2023-33246

0xkayala/cve-2023-33246

Exploits Apache RocketMQ brokers vulnerable to CVE-2023-33246 remote code execution and checks targets via IP, CIDR, or file input.

exploitationinformation-gatheringpenetration-testing+3

3 years ago

evilact

cypholab/evilact

Fast scanner for detecting and confirming Next.js RCE vulnerabilities (CVE-2025-55182 & CVE-2025-66478).

exploitationinformation-gatheringpenetration-testing+3

211 months ago

CVE-2024-22275

mbadanoiu/cve-2024-22275

CVE-2024-22275: Partial File Read in VMware vCenter Server

exploitationinformation-gatheringpenetration-testing+2

22 years ago

CVE-2024-10245

randomrobbiebf/cve-2024-10245

Relais 2FA <= 1.0 - Authentication Bypass

authenticationexploitationinformation-gathering+3

21 year ago

CVE-2022-41040

itpatjidr/cve-2022-41040

SSRF exploit payloads and reconnaissance dorks for CVE-2022-41040 targeting Microsoft Exchange Autodiscover endpoint with Burp Collaborator…

exploitationinformation-gatheringpenetration-testing+3

14 years ago

CVE-2020-9460

g-rubert/cve-2020-9460

Proof-of-concept for a stored cross-site scripting (XSS) vulnerability in Octech Oempro 4.7–4.11 via the CampaignName parameter in Campaign.Create.

exploitationinformation-gatheringpenetration-testing+2

16 years ago

CVE-2026-5513

87achrafg-stack/cve-2026-5513

CVE-2026-5513 — Bookly ≤ 27.2 Stored XSS via Cookie

exploitationinformation-gatheringpenetration-testing+3

4 months ago

CVE-2026-35616

keraattin/cve-2026-35616

Detection toolkit for CVE-2026-35616, a pre-authentication API bypass in FortiClient EMS. Includes Python scanner and Nmap NSE script for identifying…

authenticationexploitationinformation-gathering+5

16 months ago

freePW_tc7200Eploit

tihmstar/freepw_tc7200eploit

Technicolor TC7200 - Credentials Disclosure CVE : CVE-2014-1677

exploitationinformation-gatheringios-security+3

212 years ago

cve-2025-5054

daryllundy/cve-2025-5054

Python-based vulnerability detector for CVE-2025-5054 (Apport race condition) on Ubuntu. Checks Apport version, core dump configuration, and SUID…

exploitationinformation-gatheringpenetration-testing+2

21 year ago

CVE-2024-6387-Vulnerability-Checker

identity-threat-labs/cve-2024-6387-vulnerability-checker

This Python script checks for the CVE-2024-6387 vulnerability in OpenSSH servers. It supports multiple IP addresses, URLs, CIDR ranges, and ports.…

exploitationinformation-gatheringnetwork-security+3

22 years ago

CVE-2025-0282

adanikamal/cve-2025-0282

Ivanti Connect Secure, Policy Secure & ZTA Gateways - CVE-2025-0282

exploitationinformation-gatheringpenetration-testing+2

21 year ago

CVE-2015-5531-POC

moch3n/cve-2015-5531-poc

Proof-of-concept exploit for CVE-2015-5531, a directory traversal vulnerability in Elasticsearch 1.6.1 and earlier, allowing remote file read via…

exploitationinformation-gatheringpenetration-testing+2

24 years ago

CVE-2023-29489.py

ipk1/cve-2023-29489.py

a pyhton script to test all results from shodan for cPanel CVE-2023-29489, credits to @assetnote, I just automate

exploitationinformation-gatheringreconnaissance+2

23 years ago

CVE-2025-1868

itres-labs/cve-2025-1868

CVE-2025-1868: Advanced IP Scanner & Advanced Port Scanner NTLM Leakage HTTP Tester

authenticationexploitationinformation-gathering+3

29 months ago

f5scan

halencarjunior/f5scan

CVE-2020-5902 scanner for F5 BIG-IP with Shodan host discovery, LFI file reading, and remote command execution capabilities.

exploitationinformation-gatheringreconnaissance+2

16 years ago

rdpscan-BlueKeep

gh0st0ne/rdpscan-bluekeep

A quick scanner for the CVE-2019-0708 "BlueKeep" vulnerability.

exploitationinformation-gatheringnetwork-security+3

17 years ago

CVE-2024-8522

avento/cve-2024-8522

LearnPress – WordPress LMS Plugin <= 4.2.7 - Unauthenticated SQL Injection via 'c_only_fields'

exploitationinformation-gatheringpenetration-testing+2

22 years ago

Previous 1…9899100 Next