Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
103 results
CVE-2019-9053-port-py3 preview

CVE-2019-9053-port-py3

GitHubdel0x3/cve-2019-9053-port-py3

CVE-2019-9053.

educationexploitationpassword-cracking+3
1 year ago
CVE-2019-9053-exploit preview

CVE-2019-9053-exploit

GitHubdavcwikla/cve-2019-9053-exploit

Working Python exploit for CVE-2019-9053 with optional password cracking via wordlist. Targets web applications via HTTP URI for automated…

exploitationpassword-crackingpenetration-testing+2
2 years ago
CMS-Made-Simple-2.2.9-Unauthenticated-SQL-Injection-Exploit-CVE-2019-9053- preview

CMS-Made-Simple-2.2.9-Unauthenticated-SQL-Injection-Exploit-CVE-2019-9053-

GitHubhf3cyber/cms-made-simple-2.2.9-unauthenticated-sql-injection-exploit-cve-2019-9053-

Time-based blind SQL injection exploit for CMS Made Simple <= 2.2.9 (CVE-2019-9053) that extracts username, email, password hash, and salt, with…

exploitationinformation-gatheringpassword-cracking+3
1 year ago
CVE-2020-13941 preview

CVE-2020-13941

GitHubmbadanoiu/cve-2020-13941

CVE-2020-13941: Abusing UNC Paths in Windows Environments in Apache Solr

authenticationexploitationlateral-movement+3
1 year ago
CVE-2024-38793-PoC preview

CVE-2024-38793-PoC

GitHubret2desync/cve-2024-38793-poc

Proof of Concept code for exploitation of CVE-2024-38793 (Best Restaurant Menu by PriceListo <= 1.4.1 - Authenticated (Contributor+) SQL Injection)

exploitationpassword-crackingpenetration-testing+2
2 years ago
CVE-2024-44541 preview

CVE-2024-44541

GitHubpointedsec/cve-2024-44541

This repository details a SQL Injection vulnerability in Inventio Lite v4's, including exploitation steps and a Python script to automate the attack.…

educationexploitationpassword-cracking+3
1 year ago
-exploit-lab preview

-exploit-lab

GitHubhackheart-tech/-exploit-lab

Exploits Python cve-2019-9053– by HackHeart

exploitationpassword-crackingpenetration-testing+2
1 year ago
CTF-CVE-2019-9053-GTFOBins preview

CTF-CVE-2019-9053-GTFOBins

GitHubjtoalu/ctf-cve-2019-9053-gtfobins

Step-by-step CTF walkthrough demonstrating CVE-2019-9053 SQL injection exploitation and GTFOBins-based privilege escalation on a CMS Made Simple…

ctfeducationexploitation+6
2 years ago
sqlmate preview
Archived

sqlmate

GitHubs0md3v/sqlmate

A friend of SQLmap which will do what you always expected from SQLmap.

crawlerhash-analysisinformation-gathering+5
4547 years ago
leviathan preview
Archived

leviathan

GitHubutkusen/leviathan

wide range mass audit toolkit

exploitationinformation-gatheringnetwork-mapping+6
1.0k8 years ago
Radium preview
Archived

Radium

GitHubmehulj94/radium

Python logger with multiple features.

command-and-controldata-exfiltrationinformation-gathering+7
5255 years ago
joomla-bruteforce preview

joomla-bruteforce

GitHubajnik/joomla-bruteforce

Python script that brute-forces Joomla administrator login credentials using wordlists, with proxy and verbose options for penetration testing.

authenticationpassword-attackspassword-cracking+4
1382 years ago
blackbox-pentesting-infsecos preview

blackbox-pentesting-infsecos

GitHubsaqibnet/blackbox-pentesting-infsecos

Full black-box penetration test against SecOS:1 (VulnHub) — CSRF exploitation, privilege escalation via CVE-2015-1328 (OverlayFS), post-exploitation

ctfeducationexploitation+9
5 months ago
Previous123456Next