Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
46 results
jwt-cracker preview

jwt-cracker

GitHublmammino/jwt-cracker

Simple HS256, HS384 & HS512 JWT token brute force cracker.

authenticationpassword-crackingweb-security
1.2k2 years ago
Wordlister preview

Wordlister

GitHub4n4nk3/wordlister

A simple wordlists generator and mangler written in Python 3.10.1.

information-gatheringpassword-attackspassword-cracking+1
1233 years ago
WordListGen preview

WordListGen

GitHubfrizb/wordlistgen

Super Simple Python Word List Generator for Fuzzing and Brute Forcing in Python

fuzzingpassword-crackingpenetration-testing
567 years ago
sharker preview

sharker

GitHubsynacktiv/sharker

A simple, reliable and reasonably fast network capture analyzer.

digital-forensicsinformation-gatheringnetwork-security+3
334 months ago
CacheData_decrypt preview

CacheData_decrypt

GitHubsynacktiv/cachedata_decrypt

A simple Toolkit to BF and decrypt Windows EntraId CacheData

authenticationcryptographydigital-forensics+4
212 years ago
PDFPasswordUnlocker preview

PDFPasswordUnlocker

GitHubajuremesh/pdfpasswordunlocker

This project offers a straightforward solution for retrieving forgotten PDF passwords using Google Colab. With just five simple steps, it efficiently…

cryptographyeducationpassword-attacks+1
192 years ago
CVE-2019-9053 preview

CVE-2019-9053

GitHub4nner/cve-2019-9053

Python 3 exploit for CVE-2019-9053, a CMS Made Simple SQL injection vulnerability, enabling credential extraction via time-based blind SQLi and…

exploitationpassword-crackingpenetration-testing+3
113 years ago
CVE-2019-9053-CMS-Made-Simple-2.2.10---SQL-Injection-Exploit preview

CVE-2019-9053-CMS-Made-Simple-2.2.10---SQL-Injection-Exploit

GitHubelizeuopain/cve-2019-9053-cms-made-simple-2.2.10---sql-injection-exploit

Python exploit for CVE-2019-9053 SQL injection in CMS Made Simple 2.2.10 with password hash cracking and user enumeration capabilities.

exploitationpassword-crackingpenetration-testing+2
55 months ago
SimpleCTF-UpdatedExploit preview

SimpleCTF-UpdatedExploit

GitHubdh4nuj4/simplectf-updatedexploit

This script is a modified version of the original exploit by Daniele Scanu which exploits an unauthenticated SQL injection vulnerability in CMS Made…

exploitationpassword-crackingpenetration-testing+2
62 years ago
IkeAbuser preview

IkeAbuser

GitHubrandomuser1983/ikeabuser

A simple tool wrapper to automate the enumeration, fingerprinting, and PSK extraction of an IPSec VPN gateway.

ctfeducationinformation-gathering+5
33 months ago
CMS-Made-Simple-2.2.9-CVE-2019-9053 preview

CMS-Made-Simple-2.2.9-CVE-2019-9053

GitHubazrenom/cms-made-simple-2.2.9-cve-2019-9053

Exploit for CVE-2019-9053, an unauthenticated SQL injection in CMS Made Simple 2.2.9, that extracts admin credentials and optionally cracks the…

exploitationpassword-crackingpenetration-testing+2
32 years ago
cms-made-simple-python3 preview

cms-made-simple-python3

GitHubjagdeepsinghceh/cms-made-simple-python3

Python3-converted exploit and research notes for CMS Made Simple (CVE-2019-9053) — Unauthenticated SQL Injection vulnerability. Includes original…

educationexploitationpassword-cracking+3
210 months ago
shirocrack preview

shirocrack

GitHuban00brektn/shirocrack

Simple hash cracker for Apache Shiro hashes written in Golang. Useful for exploiting CVE-2024-4956.

exploitationhash-analysispassword-cracking+2
21 year ago
cve-2019-9053-py3 preview

cve-2019-9053-py3

GitHubvedantrana73/cve-2019-9053-py3

Unauthenticated time-based blind SQL injection exploit for CMS Made Simple ≤ 2.2.9 (CVE-2019-9053), ported to Python 3.

educationexploitationpassword-cracking+3
3 months ago
CVE-2019-9053-exploit preview

CVE-2019-9053-exploit

GitHubjeanback1/cve-2019-9053-exploit

Automated exploit for CVE-2019-9053, a time-based blind SQL injection in CMS Made Simple ≤2.2.9. Extracts admin credentials (username, email,…

exploitationinformation-gatheringpassword-cracking+3
4 months ago
CVE-2019-9053 preview

CVE-2019-9053

GitHubitzr1g/cve-2019-9053

Python exploit for CVE-2019-9053 targeting CMS Made Simple with SQL injection detection and password hash cracking via wordlist, featuring argparse…

educationexploitationpassword-cracking+3
5 months ago
CVE-2020-1472-Easy preview

CVE-2020-1472-Easy

GitHubmidpipps/cve-2020-1472-easy

A simple implementation/code smash of a bunch of other repos

exploitationpassword-crackingpenetration-testing+3
16 years ago
Simple-CTF-Writeup preview

Simple-CTF-Writeup

GitHubimperialx1104/simple-ctf-writeup

Professional TryHackMe Simple CTF walkthrough covering enumeration, CMS Made Simple SQL Injection (CVE-2019-9053), credential recovery, SSH access,…

ctfeducationexploitation+6
4 months ago
Previous123Next