Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
60 results
CVE-2026-63030-POC preview

CVE-2026-63030-POC

GitHubmrx-arafat/cve-2026-63030-poc

Proof-of-concept exploit for CVE-2026-63030 (WordPress pre-auth RCE) with SQL injection detection, credential extraction, and webshell deployment.…

exploitationpayload-developmentpenetration-testing+3
1 month ago
CVE-2024-22120-RCE preview

CVE-2024-22120-RCE

GitHubw01fh4cker/cve-2024-22120-rce

Time Based SQL Injection in Zabbix Server Audit Log --> RCE

exploitationpenetration-testingred-teaming+2
1392 years ago
CVE-2025-57819-FreePBX-RCE2Root preview

CVE-2025-57819-FreePBX-RCE2Root

GitHubozcanpng/cve-2025-57819-freepbx-rce2root

Full-chain CVE-2025-57819 PoC for FreePBX 15, 16, and 17: unauthenticated SQLi to RCE and root takeover.

exploitationpayload-developmentpenetration-testing+4
12 months ago
CVE-2025-25257 preview

CVE-2025-25257

GitHub0xgh057r3c0n/cve-2025-25257

Automated proof-of-concept exploit for unauthenticated SQL injection in FortiWeb; abuses the Authorization header to write a webshell and execute…

exploitationpayload-generationpenetration-testing+3
11 year ago
NetExec preview

NetExec

GitHubpennyw0rth/netexec

Post-exploitation framework for automated network authentication testing, credential harvesting, and lateral movement across Windows/AD environments…

command-and-controldatabase-securityexploitation+14
5.8k21h 47m ago
PySQLRecon preview

PySQLRecon

GitHubtw1sm/pysqlrecon

Offensive MSSQL toolkit written in Python, based off SQLRecon

command-and-controldatabase-securityexploitation+3
2123 months ago
supahunter preview

supahunter

GitHubproxydom/supahunter

Automated reconnaissance and exploitation framework for misconfigured Supabase instances. Features schema enumeration, Selenium-based key extraction,…

cloud-securitydatabase-securitydata-exfiltration+8
27 months ago
CVE-2022-24706-CouchDB-Exploit preview

CVE-2022-24706-CouchDB-Exploit

GitHubsadshade/cve-2022-24706-couchdb-exploit

Python exploit for CVE-2022-24706 targeting Apache CouchDB 3.2.1 and below, achieving remote code execution via Erlang cookie authentication bypass.

database-securityexploitationpenetration-testing+2
294 years ago
CVE-2026-14762-PoC-Exploit preview

CVE-2026-14762-PoC-Exploit

GitHubtc4dy/cve-2026-14762-poc-exploit

Multi-threaded time-based blind SQL injection exploit for CVE-2026-14762 targeting Hotel & Tourism Reservation 1.0. Enumerates databases, tables,…

command-and-controldatabase-securityexploitation+7
21 month ago
CVE-2026-57588-Nessus-XML-Import-SQL-Injection-PoC preview

CVE-2026-57588-Nessus-XML-Import-SQL-Injection-PoC

GitHubcerberusmrxi/cve-2026-57588-nessus-xml-import-sql-injection-poc

Proof-of-concept exploit framework for CVE-2026-57588, a SQL injection in Nessus XML import. Generates malicious .nessus files for database…

command-and-controldatabase-securitydata-exfiltration+7
11 month ago
CVE-2026-24418 preview

CVE-2026-24418

GitHubbridgeralderson/cve-2026-24418

OpenSTAManager v2.9.8 and earlier contain a critical Error-Based SQL Injection vulnerability in the bulk operations handler for the Scadenzario…

database-securityeducationexploitation+5
21 month ago
WP2Shell preview

WP2Shell

GitHubnull200ok/wp2shell

Automated exploit tool for WordPress REST API SQL injection (CVE-2026-63030/CVE-2026-60137) with time-based blind detection, credential extraction,…

exploitationpenetration-testingred-teaming+2
151 month ago
CVE-2024-29824 preview

CVE-2024-29824

GitHubhorizon3ai/cve-2024-29824

Ivanti EPM SQL Injection Remote Code Execution Vulnerability

educationexploitationpenetration-testing+3
242 years ago
FreePBX-CVE-2025-57819-RCE preview

FreePBX-CVE-2025-57819-RCE

GitHub0xehab/freepbx-cve-2025-57819-rce

Unauthenticated SQL injection and arbitrary file upload exploit chain for FreePBX 16, achieving remote code execution via admin creation and webshell…

exploitationpenetration-testingred-teaming+2
132 months ago
CVE-2026-6433 preview

CVE-2026-6433

GitHubmurrez/cve-2026-6433

Proof-of-concept exploit for CVE-2026-6433: unauthenticated SQL injection to remote code execution in WordPress FlipperCode plugin. Python 3 script…

educationexploitationpayload-development+4
21 month ago
CVE-2024-43468_mTLS_go preview

CVE-2024-43468_mTLS_go

GitHubnikallass/cve-2024-43468_mtls_go

CVE-2024-43468 SCCM SQL Injection Exploit (mTLS unextractable client cert from MacOS keychain version)

authenticationexploitationpenetration-testing+3
31 year ago
CVE-2026-57517 preview

CVE-2026-57517

GitHubshinthink/cve-2026-57517

💉 Blind SQL Injection → RCE exploit for Control Web Panel (CWP) ≤ 0.9.8.1224 — userRes POST → INTO DUMPFILE → cwpsvc shell

exploitationpayload-developmentpenetration-testing+4
11 month ago
FreePBX-CVE-2025-57819 preview

FreePBX-CVE-2025-57819

GitHubyuvrajshad/freepbx-cve-2025-57819

Unauthenticated SQL injection to root RCE exploit for FreePBX CVE-2025-57819, chaining SQLi, cron webshell, and incron fwconsole hook for full…

command-and-controlexploitationpayload-development+5
12 months ago
Previous1234Next