Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
22 results
nuclei-CiscoRV320Dump-CVE-2019-1653 preview

nuclei-CiscoRV320Dump-CVE-2019-1653

GitHubelzerjp/nuclei-ciscorv320dump-cve-2019-1653

Automated Nuclei template and Shodan workflow to detect and exploit Cisco router configuration exposure (CVE-2019-1653) for security auditing.

exploitationinformation-gatheringosint+3
1 year ago
RemotePasswordWiFi preview

RemotePasswordWiFi

GitHubs0c5/remotepasswordwifi

Script in Ruby. Break Remote router wifi passwords.

exploitationinformation-gatheringpassword-attacks+2
149 years ago
misfortune-cookie preview

misfortune-cookie

GitHubluel-4013/misfortune-cookie

Interactive PoC suite for CVE-2014-9222 (Misfortune Cookie) and related router exploits, featuring detection, auth bypass, DoS, and RCE modules with…

binary-exploitationembedded-systems-securityexploitation+6
19 days ago
Sensitive-Information-disclosure-via-SPI-flash-firmware-for-Hathway-router-CVE-2024-46383 preview

Sensitive-Information-disclosure-via-SPI-flash-firmware-for-Hathway-router-CVE-2024-46383

GitHubnitinronge91/sensitive-information-disclosure-via-spi-flash-firmware-for-hathway-router-cve-2024-46383

CVE-2024-46383

embedded-systems-securityexploitationfirmware-analysis+6
1 year ago
RomBuster preview

RomBuster

GitHubentysec/rombuster

RomBuster is a router exploitation tool that allows to disclosure network router admin password.

exploitationinformation-gatheringiot-security+1
5632 years ago
CVE-2026-30081 preview

CVE-2026-30081

GitHubrakeshelamaran98/cve-2026-30081

Documentation of CVE-2026-30081, a high-severity cleartext transmission vulnerability in Quantum Networks QN-I-470 router firmware 6.1.1.B1, allowing…

exploitationinformation-gatheringnetwork-security+2
5 months ago
Tenda-F3-V4 preview

Tenda-F3-V4

GitHub4d000/tenda-f3-v4

Python script to exploit CVE-2020-35391 on Tenda F3 V3/V4 routers, enabling unauthorized download of configuration, flash, and syslog files.

embedded-systems-securityexploitationfirmware-analysis+4
31 year ago
CVE-2024-42657 preview

CVE-2024-42657

GitHubbaroi-ai/cve-2024-42657

CVE-2024-42657 An issue in wishnet Nepstech Wifi Router NTPL-XPON1GFEVN v1.0 allows a remote attacker to obtain sensitive information via the lack of…

exploitationinformation-gatheringnetwork-security+3
12 years ago
CVE-2020-29669 preview

CVE-2020-29669

GitHubs1lkys/cve-2020-29669

Macally WIFISD2

authentication-authorizationembedded-systems-securityexploitation+5
5 years ago
CVE-2024-42658 preview

CVE-2024-42658

GitHubbaroi-ai/cve-2024-42658

CVE-2024-42658 An issue in wishnet Nepstech Wifi Router NTPL-XPON1GFEVN v1.0 allows a remote attacker to obtain sensitive information via the cookies…

exploitationinformation-gatheringiot-security+3
12 years ago
cve-2026-34472-auth-bypass-zte-h188a-router preview

cve-2026-34472-auth-bypass-zte-h188a-router

GitHubminanagehsalalma/cve-2026-34472-auth-bypass-zte-h188a-router

Technical breakdown of CVE-2026-34472, an auth bypass via leaked credentials affecting ZTE H188A routers.

authenticationexploitationinformation-gathering+3
14 months ago
React2Shell preview

React2Shell

GitHubmuhammaduwais/react2shell

A Firefox extension for detecting React2Shell vulnerabilities (CVE-2025-55182 & CVE-2025-66478) in web applications.

educationinformation-gatheringpenetration-testing+2
27 months ago
RSC-Infra-Scanner preview

RSC-Infra-Scanner

GitHubvyvivekyadav04/rsc-infra-scanner

This is a fast, asynchronous Python tool that fingerprints domains for likely Next.js App Router / React Server Components (RSC) infrastructure. (I…

educationinformation-gatheringreconnaissance+2
9 months ago
CVE-2025-55182-Exploiter preview

CVE-2025-55182-Exploiter

GitHubalfazhossain/cve-2025-55182-exploiter

CVE-2025-55182-Exploiter Google Chrome Extension. nextjs vulnerability #nextjscve

exploitationinformation-gatheringpenetration-testing+3
49 months ago
CVE-2025-55182-Exploit-extension preview

CVE-2025-55182-Exploit-extension

GitHubanuththara2007-w/cve-2025-55182-exploit-extension

A Chrome extension for detecting React2Shell vulnerabilities (CVE-2025-55182 & CVE-2025-66478) in web applications

educationinformation-gatheringreconnaissance+2
33 months ago
CVE-2025-26202-Details preview

CVE-2025-26202-Details

GitHuba17-ba/cve-2025-26202-details

CVE-2025-26202

exploitationinformation-gatheringpenetration-testing+3
21 year ago
dlsw_exploit preview

dlsw_exploit

GitHubtt5555/dlsw_exploit

cisco dlsw exploit

exploitationinformation-gatheringnetwork-security+1
911 years ago
CVE-2024-54772 preview

CVE-2024-54772

GitHubseven11eleven/cve-2024-54772

Rust-based tool that enumerates valid MikroTik router usernames by exploiting CVE-2024-54772, aiding in security assessments and penetration testing.

exploitationinformation-gatheringnetwork-security+2
1 year ago
Previous12Next