Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
11 results
Blisqy preview

Blisqy

GitHubjohntroony/blisqy

Version 0.2 - Exploit Time-based blind-SQL injection in HTTP-Headers (MySQL/MariaDB).

database-securityexploitationfuzzing+2
4167 years ago
SqliSniper preview

SqliSniper

GitHubdanialhalo/sqlisniper

Advanced Time-based Blind SQL Injection fuzzer for HTTP Headers

fuzzingvulnerability-scannersweb-security
3112 years ago
xsscrapy preview

xsscrapy

GitHubdanmcinerney/xsscrapy

Automated XSS and SQLi vulnerability scanner that crawls web applications, tests every link and form for cross-site scripting and SQL injection, with…

fuzzingvulnerability-analysisweb-security+1
1.7k4 years ago
Packer-Fuzzer preview

Packer-Fuzzer

GitHubrtcatc/packer-fuzzer

Automated security scanner for websites built with JavaScript module bundlers like Webpack. Extracts APIs from bundled JS and tests for SQL…

api-security-testingfuzzingvulnerability-scanners+1
3.2k2 years ago
jdam preview

jdam

GitLabmichenriksen/jdam

Structure-aware JSON fuzzer that generates valid mutated JSON objects with injection payloads for SQL, command, LDAP, NoSQL, and other…

fuzzingpenetration-testingvulnerability-analysis+1
555 years ago
sqlancer preview

sqlancer

GitHubsqlancer/sqlancer

Automated testing to find logic and performance bugs in database systems

database-securityeducationfuzzing+2
1.7k1 day ago
goWAPT preview

goWAPT

GitHubdzonerzy/gowapt

Go-based web application fuzzer and scanner with template-driven requests, custom encoder/decoder support, and a JavaScript extension API for…

fuzzingpenetration-testingscripting-automation+4
3471 year ago
ci_fuzz preview

ci_fuzz

GitHubmvdevnull/ci_fuzz

Command Injection Web Fuzzer Script for mitmproxy

fuzzingpenetration-testingvulnerability-analysis+1
48 years ago
crlfi-scanner preview

crlfi-scanner

GitHubcappricio-securities/crlfi-scanner

CRLFISCANNER is a lightweight and powerful CLI tool designed for bug bounty hunters and penetration testers to automatically detect CRLF injection…

fuzzingpenetration-testingweb-application-exploitation+2
45 months ago
CVE-2025-14847-MongoDB preview

CVE-2025-14847-MongoDB

GitHubinfosecantara/cve-2025-14847-mongodb

Educational research tool demonstrating CVE-2025-14847 memory disclosure in MongoDB's BSON decompression. Simulates bounds-checking failures and…

database-securityeducationexploitation+3
16 months ago
MongoBLEED---CVE-2025-14847-POC- preview

MongoBLEED---CVE-2025-14847-POC-

GitHubnonameerror/mongobleed---cve-2025-14847-poc-

This repo contains my python script version of CVE-2025-14847 (MongoBleed)

database-securityexploitationfuzzing+3
17 months ago