Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
18 results
nuclei-CiscoRV320Dump-CVE-2019-1653 preview

nuclei-CiscoRV320Dump-CVE-2019-1653

GitHubelzerjp/nuclei-ciscorv320dump-cve-2019-1653

Automated Nuclei template and Shodan workflow to detect and exploit Cisco router configuration exposure (CVE-2019-1653) for security auditing.

exploitationinformation-gatheringosint+3
1 year ago
CVE-2019-19781 preview

CVE-2019-19781

GitHubyukar1z0e/cve-2019-19781

Exploit module for CVE-2019-19781 targeting Citrix ADC, integrated with Router Scan for automated vulnerability scanning and exploitation.

exploitationpenetration-testingreconnaissance+2
6 years ago
CVE-2017-15944 preview

CVE-2017-15944

GitHubyukar1z0e/cve-2017-15944

Python-based exploit module for CVE-2017-15944 targeting routers, with automated scanning and API integration for Router Scan Project.

exploitationinformation-gatheringreconnaissance+2
6 years ago
MikroTik-Winbox-Scanner preview

MikroTik-Winbox-Scanner

GitHubk3ystr0k3r/mikrotik-winbox-scanner

Winbox Protocol Scanner (MikroTik RouterOS)

iot-securitynetwork-mappingnetwork-security+3
2 months ago
Windows-ZTE-Loader preview

Windows-ZTE-Loader

GitHubinjectionmethod/windows-zte-loader

Windows ZTE Loader CVE-2014-2321 Requires ZMAP For Windows Or BigEar

exploitationnetwork-mappingport-scanning+2
3 years ago
misfortune-cookie preview

misfortune-cookie

GitHubluel-4013/misfortune-cookie

Interactive PoC suite for CVE-2014-9222 (Misfortune Cookie) and related router exploits, featuring detection, auth bypass, DoS, and RCE modules with…

binary-exploitationembedded-systems-securityexploitation+6
19 days ago
nec_aterm_tools preview

nec_aterm_tools

GitHubinfobyte/nec_aterm_tools

Extracts hardware random keys from NEC Aterm router firmware images and QR codes to generate valid passwords for gaining shell access.

embedded-systems-securityexploitationfirmware-analysis+4
34 years ago
CVE-2024-42657 preview

CVE-2024-42657

GitHubbaroi-ai/cve-2024-42657

CVE-2024-42657 An issue in wishnet Nepstech Wifi Router NTPL-XPON1GFEVN v1.0 allows a remote attacker to obtain sensitive information via the lack of…

exploitationinformation-gatheringnetwork-security+3
12 years ago
RSC-Infra-Scanner preview

RSC-Infra-Scanner

GitHubvyvivekyadav04/rsc-infra-scanner

This is a fast, asynchronous Python tool that fingerprints domains for likely Next.js App Router / React Server Components (RSC) infrastructure. (I…

educationinformation-gatheringreconnaissance+2
9 months ago
CVE-2024-54772 preview

CVE-2024-54772

GitHubseven11eleven/cve-2024-54772

Rust-based tool that enumerates valid MikroTik router usernames by exploiting CVE-2024-54772, aiding in security assessments and penetration testing.

exploitationinformation-gatheringnetwork-security+2
1 year ago
RSC_Detector preview

RSC_Detector

GitHubmrknow001/rsc_detector

Supports RSC fingerprinting and exploitation of the React component vulnerability CVE-2025-55182.

educationexploitationreconnaissance+2
5919 months ago
CVE-2025-66478-POC preview

CVE-2025-66478-POC

GitHubwangxso/cve-2025-66478-poc

CVE-2025-66478 Proof of Concept

educationexploitationlabs-practice+6
59 months ago
CVE-2025-55182-Exploit-extension preview

CVE-2025-55182-Exploit-extension

GitHubanuththara2007-w/cve-2025-55182-exploit-extension

A Chrome extension for detecting React2Shell vulnerabilities (CVE-2025-55182 & CVE-2025-66478) in web applications

educationinformation-gatheringreconnaissance+2
33 months ago
CVE-2025-55182-Exploiter preview

CVE-2025-55182-Exploiter

GitHubalfazhossain/cve-2025-55182-exploiter

CVE-2025-55182-Exploiter Google Chrome Extension. nextjs vulnerability #nextjscve

exploitationinformation-gatheringpenetration-testing+3
49 months ago
tenda-hg10-rce preview

tenda-hg10-rce

GitHube76f01z/tenda-hg10-rce

CVE-2026-1689 Unauthenticated RCE for the Tenda HG10

exploitationpenetration-testingreconnaissance+2
6 months ago
CVE-2025-55182-POC-SCANNER preview

CVE-2025-55182-POC-SCANNER

GitHubim-hanzou/cve-2025-55182-poc-scanner

Unified Security Research Tool

educationexploitationpapers-research+6
9 months ago
Extracting-User-credentials-For-Web-portal-and-WiFi-AP-For-Hathway-Router-CVE-2024-44815- preview

Extracting-User-credentials-For-Web-portal-and-WiFi-AP-For-Hathway-Router-CVE-2024-44815-

GitHubnitinronge91/extracting-user-credentials-for-web-portal-and-wifi-ap-for-hathway-router-cve-2024-44815-

CVE-2024-44815

embedded-systems-securityexploitationfirmware-analysis+5
2 years ago
Sensitive-Information-disclosure-via-SPI-flash-firmware-for-Hathway-router-CVE-2024-46383 preview

Sensitive-Information-disclosure-via-SPI-flash-firmware-for-Hathway-router-CVE-2024-46383

GitHubnitinronge91/sensitive-information-disclosure-via-spi-flash-firmware-for-hathway-router-cve-2024-46383

CVE-2024-46383

embedded-systems-securityexploitationfirmware-analysis+6
1 year ago