Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
567 results
backup_dc_registry preview

backup_dc_registry

GitHubhorizon3ai/backup_dc_registry

A simple POC that abuses Backup Operator privileges to remote dump SAM, SYSTEM, and SECURITY

exploitationlateral-movementmisconfiguration+3
96
4 years ago
CVE-2026-55584 preview

CVE-2026-55584

GitHubmirackayikci/cve-2026-55584

CVE-2026-55584 — phpSysInfo IP Allowlist Bypass

authentication-authorizationexploitationmisconfiguration+3
1 month ago
pyrocms-ssti-fix preview

pyrocms-ssti-fix

GitHubysaxon/pyrocms-ssti-fix

A drop-in fix for CVE-2023-29689 - SSTI in PyroCMS, via a custom Twig Sandbox implementation

code-analysisdefensive-toolsmisconfiguration+3
7 months ago
CVE-2025-5815-Nuclei-Template preview

CVE-2025-5815-Nuclei-Template

GitHubrootharpy/cve-2025-5815-nuclei-template

CVE-2025-5815: An unauthenticated vulnerability in the WordPress Traffic Monitor plugin (≤ 3.2.2) allowing remote attackers to disable bot logging…

exploitationmisconfigurationpenetration-testing+3
1 year ago
CVE-2018-12596 preview

CVE-2018-12596

GitHubalt3kx/cve-2018-12596

Ektron Content Management System (CMS) 9.20 SP2, remote re-enabling users (CVE-2018–12596)

exploitationmisconfigurationpenetration-testing+2
7 years ago
Drag-and-Drop-Multiple-File-Uploader-PRO-Path-Traversal preview

Drag-and-Drop-Multiple-File-Uploader-PRO-Path-Traversal

GitHubnickguitar/drag-and-drop-multiple-file-uploader-pro-path-traversal

Drag and Drop Multiple File Uploader PRO - Contact Form 7 v5.0.6.1 Path Traversal (CVE-2023-1112)

exploitationmisconfigurationpenetration-testing+3
233 years ago
CVE-2020-25747 preview

CVE-2020-25747

GitHubjet-pentest/cve-2020-25747

CVE-2020-25747

exploitationinformation-gatheringiot-security+2
15 years ago
HAProxy-CVE-2023-45539-PoC preview

HAProxy-CVE-2023-45539-PoC

GitHubslicingmelon/haproxy-cve-2023-45539-poc

HAProxy-CVE-2023-45539-PoC

exploitationmisconfigurationpenetration-testing+3
11 months ago
CVE-2020-23590 preview

CVE-2020-23590

GitHubhuzaifahussain98/cve-2020-23590

CSRF leads to change the password for "WLAN SSID"

embedded-systems-securityexploitationiot-security+3
3 years ago
jdwp-shellifier preview

jdwp-shellifier

GitHubioactive/jdwp-shellifier
debuggersexploitationmisconfiguration+1
9172 years ago
CVE-2022-43959 preview

CVE-2022-43959

GitHubsecware-ru/cve-2022-43959

Bitrix Vulnerability CVE-2022-43959

authenticationconfiguration-auditingmisconfiguration+3
43 years ago
CVE-2024-33453 preview

CVE-2024-33453

GitHubant1sec-ops/cve-2024-33453

Sensitive Data exposure

educationinformation-gatheringmisconfiguration+3
11 year ago
CVE-2023-31704 preview

CVE-2023-31704

GitHubd34dun1c02n/cve-2023-31704
authentication-authorizationmisconfigurationpenetration-testing+3
3 years ago
CVE-2024-23733 preview

CVE-2024-23733

GitHubekcrsm/cve-2024-23733
information-gatheringmisconfigurationpenetration-testing+2
1 year ago
CVE-2020-36287 preview

CVE-2020-36287

GitHubf4rber/cve-2020-36287

The dashboard gadgets preference resource of the Atlassian gadgets plugin used in Jira Server and Jira Data Center before version 8.13.5, and from…

exploitationinformation-gatheringmisconfiguration+3
35 years ago
CVE-2024-12252 preview

CVE-2024-12252

GitHubrandomrobbiebf/cve-2024-12252

SEO LAT Auto Post <= 2.2.1 - Missing Authorization to File Overwrite/Upload (Remote Code Execution)

authentication-authorizationexploitationmisconfiguration+5
1 year ago
CVE-2024-28987-POC preview

CVE-2024-28987-POC

GitHubgh-ost00/cve-2024-28987-poc

Web Help Desk Hardcoded Credential Vulnerability (CVE-2024-28987)

authenticationexploitationmisconfiguration+3
121 year ago
SuperMicro-Password-Scanner preview

SuperMicro-Password-Scanner

GitHub1n3/supermicro-password-scanner

Supermicro IPMI/BMC Cleartext Password Scanner

hardware-iot-securityinformation-gatheringmisconfiguration+3
4210 years ago
Previous12…32Next