Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems Security
General Purpose Utilities
Indicator of Compromise (IOC) Management
OSINT (Open Source Intelligence)
Packet Sniffing & Analysis
Password Cracking
Penetration Testing Frameworks
Phishing Tools
Privilege Escalation
Reconnaissance
Static Analysis
Vulnerability Scanners
Web Vulnerability Scanners
Wi-Fi Auditing
Bluetooth Security
Container Security
Dynamic Analysis (Sandboxing)
Encryption/Decryption Tools
Exploit Frameworks
Identity Management
iOS Security
IoT Security
Memory Forensics
Network Mapping
OSINT for Social Engineering
Password Attacks
Payload Generation
Persistence Mechanisms
Port Scanning
Static Code Analysis (SAST)
Threat Feeds & Aggregators
Vulnerability Analysis
Web Proxies & Interception
Code Analysis
DNS & Subdomain Enumeration
Dynamic Code Analysis (DAST)
Exploitation
Hash Analysis
IDS/IPS Evasion
Impersonation Tools
Lateral Movement
Mobile App Pentesting
Network Forensics
Reverse Engineering
RFID/NFC Tools
SCADA/ICS Security
Scripting & Automation
Serverless Security
Shellcode
Web Application Exploitation
API Security Testing
Configuration Auditing
Data Exfiltration
Debuggers
Forensics
Information Gathering
Mobile Forensics
Network Access Control
Post-Exploitation
Security Virtualization
Phishing
WAF Bypass
Web Security
Fuzzing
Network Security
Steganography
Wireless Security
Data Recovery
Malware Analysis
Digital Forensics
Hardware Hacking
Cryptography
CTF
Penetration Testing
Cloud Security
DevSecOps
Mobile Security
Privacy
Command and Control
Social Engineering
Hardware Security
Utilities & Frameworks
Hardware & IoT Security
Secret Detection
Binary Analysis
Threat Intelligence
Identity & Access Management (IAM)
Supply Chain Security
Authentication
Machine Learning
Intrusion Detection
Papers & Research
Misconfiguration
Subdomain Enumeration
Email Harvesting
Learning & Education
AI-Assisted Reversing
DNS Fuzzing
Red Teaming
Incident Response
Crawler
Curated Resources
Remote Access Tool
Shellcode Generation
Payload Development
Remote Access Trojan
API Security
Anti-Bot
Fingerprint Spoofing
CAPTCHA Bypass
Email Security
DNS Analysis
Chaos Engineering
Learning Paths & Courses
Container Escape
AI Security
Database Security
Firmware Analysis
Anomaly Detection
Log Analysis
Adversarial Attack
Binary Exploitation
Labs & Practice
NewestRelevanceMost popularRecently updated
47 results
CVE-2025-57819-FreePBX-RCE2Root preview

CVE-2025-57819-FreePBX-RCE2Root

GitHubozcanpng/cve-2025-57819-freepbx-rce2root

Full-chain CVE-2025-57819 PoC for FreePBX 15, 16, and 17: unauthenticated SQLi to RCE and root takeover.

exploitationpayload-developmentpenetration-testing+4
12 months ago
NetExec preview

NetExec

GitHubpennyw0rth/netexec

Post-exploitation framework for automated network authentication testing, credential harvesting, and lateral movement across Windows/AD environments…

command-and-controldatabase-securityexploitation+14
5.8k21h 47m ago
MySQL-Fu.rb preview

MySQL-Fu.rb

GitHubhood3drob1n/mysql-fu.rb

Ruby-based MySQL client for penetration testing with SQL shell, database management, file read/write, PHP command/reverse shells, and a Linux MySQL…

database-securityexploitationpayload-generation+3
313 years ago
supahunter preview

supahunter

GitHubproxydom/supahunter

Automated reconnaissance and exploitation framework for misconfigured Supabase instances. Features schema enumeration, Selenium-based key extraction,…

cloud-securitydatabase-securitydata-exfiltration+8
27 months ago
CVE-2026-2005 preview

CVE-2026-2005

GitHubvar77/cve-2026-2005

Proof-of-concept exploit for CVE-2026-2005, a heap-based buffer overflow in PostgreSQL pgcrypto enabling arbitrary memory read/write and privilege…

binary-exploitationdatabase-securityeducation+4
273 months ago
CVE-2024-48245 preview

CVE-2024-48245

GitHubshadowbyte1/cve-2024-48245

SQL Injection Vulnerability in Vehicle Management System 1.0 - 1.3

database-securityexploitationpenetration-testing+3
11 year ago
CVE-2016-6662 preview

CVE-2016-6662

GitHubmayaseven/cve-2016-6662

Proof-of-concept exploit for CVE-2016-6662 demonstrating SQL injection to remote root shell on MySQL servers. Includes video demonstration and…

exploitationpenetration-testingprivilege-escalation+2
299 years ago
Simple-CTF-Writeup preview

Simple-CTF-Writeup

GitHubimperialx1104/simple-ctf-writeup

Professional TryHackMe Simple CTF walkthrough covering enumeration, CMS Made Simple SQL Injection (CVE-2019-9053), credential recovery, SSH access,…

ctfeducationexploitation+6
2 months ago
MASS-CVE-2024-27956 preview

MASS-CVE-2024-27956

GitHubitzheartzz/mass-cve-2024-27956

Proof-of-concept exploit for CVE-2024-27956 SQL injection in ValvePress Automatic plugin. Creates admin users in WordPress to achieve remote code…

exploitationpayload-developmentpenetration-testing+3
32 years ago
FreePBX-CVE-2025-57819 preview

FreePBX-CVE-2025-57819

GitHubyuvrajshad/freepbx-cve-2025-57819

Unauthenticated SQL injection to root RCE exploit for FreePBX CVE-2025-57819, chaining SQLi, cron webshell, and incron fwconsole hook for full…

command-and-controlexploitationpayload-development+5
12 months ago
CVE-2023-6654 preview

CVE-2023-6654

GitHubqfmy1024/cve-2023-6654

Exploit for CVE-2023-6654 targeting PHPEMS cookie deserialization to perform SQL injection, enabling password modification and privilege escalation…

exploitationpassword-attacksprivilege-escalation+2
21 year ago
Audit-BlackBox-Web-to-Root preview

Audit-BlackBox-Web-to-Root

GitHubfbm31/audit-blackbox-web-to-root

Black-box penetration test of a Drupal 7 server demonstrating a full kill chain: SQL injection (CVE-2014-3704) to RCE, reverse shell, and privilege…

command-and-controleducationexploitation+8
7 months ago
CVE-2021-32099 preview

CVE-2021-32099

GitHubmagicrc/cve-2021-32099

Proof-of-concept exploit for CVE-2021-32099 targeting Pandora FMS 742. Demonstrates SQL injection to escalate privileges and achieve remote code…

educationexploitationpenetration-testing+3
1 year ago
CVE-2024-42327 preview

CVE-2024-42327

GitHubigorbf495/cve-2024-42327

Step-by-step walkthrough of CVE-2024-42327 exploitation targeting Zabbix, demonstrating SQL injection, privilege escalation via API, and remote code…

ctfeducationexploitation+7
1 year ago
wordpress-CVE-2024-27956 preview

wordpress-CVE-2024-27956

GitHubm4ninth3middle/wordpress-cve-2024-27956

Automates SQL injection in WordPress wp-automatic plugin to create a new administrator user, exploiting CVE-2024-27956 for direct database…

exploitationpenetration-testingpost-exploitation+3
1 year ago
CTF-CVE-2019-9053-GTFOBins preview

CTF-CVE-2019-9053-GTFOBins

GitHubjtoalu/ctf-cve-2019-9053-gtfobins

Step-by-step CTF walkthrough demonstrating CVE-2019-9053 SQL injection exploitation and GTFOBins-based privilege escalation on a CMS Made Simple…

ctfeducationexploitation+6
2 years ago
POC-CVE-2026-63030-CVE-2026-60137- preview

POC-CVE-2026-63030-CVE-2026-60137-

GitHubtrandonga3/poc-cve-2026-63030-cve-2026-60137-

Exploit chain for WordPress Core using REST API route-confusion and SQL injection for unauthenticated RCE, privilege escalation, and full server…

api-securityeducationexploitation+6
5 days ago
e-is-for-exploit-cve-2026-17543-php-pgsql-sql-injection-backslash-breakout preview

e-is-for-exploit-cve-2026-17543-php-pgsql-sql-injection-backslash-breakout

GitHubhunt-benito/e-is-for-exploit-cve-2026-17543-php-pgsql-sql-injection-backslash-breakout

PoC exploit for CVE-2026-17543: SQL injection in PHP ext/pgsql via backslash breakout, with data exfiltration and admin privilege-escalation payloads…

database-securityeducationexploitation+4
218 days ago
Previous123Next