Skip to content

Tools Exploits Blog

Tools Exploits Blog

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Feeds Contact Privacy© 2026 Kitploit

Tool Directory

Categories

View all categories

Loading categories

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

544 results

CVE-2024-22198_Checker preview

CVE-2024-22198_Checker

xiw1ll/cve-2024-22198_checker

Identify Nginx-ui version and check if it's vulnerable to CVE-2024-22198

exploitationinformation-gatheringpenetration-testing+3

2 years ago

CVE-Scanner preview

CVE-Scanner

chrisync/cve-scanner

CVE-2021-42287/CVE-2021-42278/OTHER Scanner & Exploiter.

exploitationinformation-gatheringpenetration-testing+3

7 months ago

nextjs-CVE-2025-29927-hunter preview

nextjs-CVE-2025-29927-hunter

darklotuskdb/nextjs-cve-2025-29927-hunter

Next.js CVE-2025-29927 Hunter

exploitationinformation-gatheringpenetration-testing+3

1 year ago

CVE-2025-2294 preview

CVE-2025-2294

mrrivaldo/cve-2025-2294

Unauthenticated Local File Inclusion (LFI) exploit for Kubio Page Builder WordPress plugin (CVE-2025-2294). Supports single target, bulk scanning,…

exploitationinformation-gatheringpenetration-testing+3

1 year ago

CVE-2020-17519 preview

CVE-2020-17519

gazettel/cve-2020-17519

Python-based directory traversal exploit for CVE-2020-17519 (Apache Flink) with multi-threading, proxy support, and configurable depth for retrieving…

exploitationinformation-gatheringpenetration-testing+3

1 year ago

CVE-2024-6387_Check preview

CVE-2024-6387_Check

edsonjt81/cve-2024-6387_check

Lightweight Python scanner that identifies servers vulnerable to OpenSSH regreSSHion (CVE-2024-6387) via rapid banner retrieval across IPs, domains,…

information-gatheringnetwork-securitypenetration-testing+3

2 years ago

CVE-2024-6387-Checker preview

CVE-2024-6387-Checker

cognisysgroup/cve-2024-6387-checker

Network scanner that identifies hosts running OpenSSH versions vulnerable to CVE-2024-6387. Supports single IPs, CIDR ranges, CSV input, and…

exploitationinformation-gatheringnetwork-security+3

2 years ago

CVE-2019-12102-Scanner preview

CVE-2019-12102-Scanner

egi08/cve-2019-12102-scanner

Automated scanner for CVE-2019-12102 unauthenticated file upload vulnerability in Kentico CMS. Checks domains, verifies with hash parameter, and…

exploitationinformation-gatheringpenetration-testing+2

1 year ago

cantina preview

cantina

wattocyber/cantina

OSCP-legal network recon orchestrator for port discovery, service classification, and enum-only plugin dispatch across HTTP, SMB, FTP, SNMP, SSH, and…

information-gatheringnetwork-mappingpenetration-testing+2

1 month ago

gitoops preview

gitoops

ovotech/gitoops

all paths lead to clouds

cloud-securitydevsecopsinformation-gathering+6

6402 years ago

Injectus preview

Injectus

dubs3c/injectus

CRLF and open redirect fuzzer

fuzzinginformation-gatheringpenetration-testing+3

1135 years ago

cloud-buster preview

cloud-buster

sagehack/cloud-buster

A Cloudflare resolver that works

dns-analysisinformation-gatheringmisconfiguration+5

1457 years ago

envizon preview

envizon

evait-security/envizon

network visualization & pentest reporting

information-gatheringnetwork-mappingpenetration-testing+2

5293 years ago

portia preview

portia

spiderlabs/portia

Portia aims to automate a number of techniques commonly performed on internal network penetration tests after a low privileged account has been…

exploitationinformation-gatheringlateral-movement+5

5016 years ago

h2buster preview

h2buster

00xc/h2buster

A threaded, recursive, web directory brute-force scanner over HTTP/2.

information-gatheringpenetration-testingreconnaissance+3

376 years ago

Cloudmare preview

Cloudmare

mrh0wl/cloudmare

Cloudflare, Sucuri, Incapsula real IP tracker.

dns-analysisinformation-gatheringpenetration-testing+3

1.8k3 years ago

gitls preview

gitls

hahwul/gitls

🖇 Enumerate git repository URL from list of URL / User / Org. Friendly to pipeline

information-gatheringosintpenetration-testing+2

561 year ago

servicenow preview

servicenow

bsysop/servicenow

Scans ServiceNow instances for widget-simple-list plugin misconfigurations that expose data via the API, supporting single URLs, URL lists,…

data-exfiltrationinformation-gatheringmisconfiguration+4

662 years ago

Previous 1…272829…31 Next