Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
29 results
cpanel_xss_2023 preview

cpanel_xss_2023

GitHubmdaseem03/cpanel_xss_2023

Python-based scanner for detecting and assessing exploitability of CVE-2023-29489 XSS vulnerability in cPanel. Supports single URL, batch file input,…

exploitationinformation-gatheringpenetration-testing+3
4
2 years ago
XSSFire preview

XSSFire

GitHubseifelsallamy/xssfire

Blind XSS callback server that captures victim cookies, local storage, and page data, then sends encrypted reports via Telegram for session hijacking.

data-exfiltrationexploitationinformation-gathering+3
471 year ago
CVE-2017-7679 preview

CVE-2017-7679

GitHubal-lord0x/cve-2017-7679

Proof-of-concept exploit script for CVE-2017-7679, an Apache Struts remote code execution vulnerability, demonstrating exploitation for security…

exploitationpayload-generationpenetration-testing+2
110 months ago
CVE-2019-15514 preview

CVE-2019-15514

GitHubbibi1959/cve-2019-15514

telegram bug that discloses user's hidden phone number (still unpatched) (exploit included)

data-exfiltrationexploitationinformation-gathering+3
254 years ago
strutszeiro preview

strutszeiro

GitHubbtamburi/strutszeiro

Telegram Bot to manage botnets created with struts vulnerability(CVE-2017-5638)

command-and-controlexploitationremote-access-tool+2
9 years ago
CVE-2023-28121 preview

CVE-2023-28121

GitHub0axz-tools/cve-2023-28121

Automated vulnerability scanner for CVE-2023-28121 that checks a list of targets concurrently and delivers results via Telegram notifications.

exploitationinformation-gatheringreconnaissance+3
10 months ago
reconpal preview

reconpal

GitHubpentesteracademy/reconpal

NLP-driven reconnaissance tool integrating GPT-3 and Shodan to answer natural language queries about open services, vulnerabilities, and exploits via…

educationexploitationinformation-gathering+5
584 years ago
CVE-2023-26818 preview

CVE-2023-26818

GitHubzeyad-azima/cve-2023-26818

Exploit for CVE-2023-26818 that bypasses macOS TCC to access camera, microphone, and location via Telegram, with manual compilation instructions.

educationexploitationpapers-research+1
182 years ago
CVE-2026-70559-PoC preview

CVE-2026-70559-PoC

GitHubcodeb0ssx/cve-2026-70559-poc

Proof-of-concept exploit for CVE-2026-70559, shared via Telegram, demonstrating exploitation of the underlying vulnerability.

exploitationpenetration-testingvulnerability-analysis
118 days ago
CVE-2024-4956 preview

CVE-2024-4956

GitHubcappricio-securities/cve-2024-4956

Scans for CVE-2024-4956, a local file inclusion vulnerability in Sonatype Nexus Repository Manager 3, with options for single URL, list input, and…

exploitationinformation-gatheringpenetration-testing+2
32 years ago
CVE-2024-24919 preview

CVE-2024-24919

GitHubcappricio-securities/cve-2024-24919

Scans for CVE-2024-24919 (Check Point Security Gateway LFI) in single or multiple URLs, with Telegram notifications and output saving for penetration…

exploitationinformation-gatheringpenetration-testing+3
22 years ago
CVE-2023-27524 preview

CVE-2023-27524

GitHubcappricio-securities/cve-2023-27524

Scanner for Apache Superset authentication bypass (CVE-2023-27524) with single URL, batch input, and Telegram notifications for security testing.

authenticationexploitationinformation-gathering+3
22 years ago
CVE-2024-9821 preview

CVE-2024-9821

GitHubrandomrobbiebf/cve-2024-9821

Bot for Telegram on WooCommerce <= 1.2.4 - Authenticated (Subscriber+) Telegram Bot Token Disclosure to Authentication Bypass

authentication-authorizationexploitationinformation-gathering+3
11 year ago
CVE-2025-51396 preview

CVE-2025-51396

GitHubthewhiteevil/cve-2025-51396

LiveHelperChat <=4.61 - Stored Cross Site Scripting (XSS) via Telegram Bot Username

exploitationinformation-gatheringpenetration-testing+3
11 year ago
CVE-2015-7297 preview

CVE-2015-7297

GitHubcappricio-securities/cve-2015-7297

Scans for Joomla SQL injection vulnerability CVE-2015-7297, supporting single URLs, batch input, and Telegram notifications for bug bounty hunters.

exploitationinformation-gatheringpenetration-testing+2
12 years ago
CVE-2022-21371 preview

CVE-2022-21371

GitHubcappricio-securities/cve-2022-21371

Scans Oracle WebLogic Server for CVE-2022-21371 local file inclusion, detects and exploits LFI vulnerabilities, supports batch URL scanning and…

exploitationinformation-gatheringpenetration-testing+3
12 years ago
CVE-2018-11784 preview

CVE-2018-11784

GitHubcappricio-securities/cve-2018-11784

Scanner for Apache Tomcat open redirect vulnerability (CVE-2018-11784) with single URL and batch scanning, Telegram notifications, and output to file.

exploitationinformation-gatheringvulnerability-scanners+1
2 years ago
CVE-2023-29489 preview

CVE-2023-29489

GitHubmd-thalal/cve-2023-29489

Reflected XSS vulnerability scanner for cPanel CVE-2023-29489 with URL scanning, batch input, Telegram notifications, and output logging.

exploitationinformation-gatheringpenetration-testing+3
2 years ago
Previous12Next