Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
124 results
CVE-2021-31630-HTB preview

CVE-2021-31630-HTB

GitHubhunt3r0x/cve-2021-31630-htb

proof of Concept (PoC) exploit for CVE-2021-31630, targeting the OpenPLC service running on the WifineticTwo box on the Hack The Box platform.

ctfeducationexploitation+3
9
2 years ago
Industrial Security Auditing Framework preview

Industrial Security Auditing Framework

GitLabd0ubl3g/industrial-security-auditing-framework

ISAF aims to be a framework that provides the necessary tools for the correct security audit of industrial (OT) environments.

exploit-frameworksnetwork-securitypenetration-testing+2
75 years ago
CVE-2026-21018-OPC-UA-Authentication-Bypass-via-None-Security-Policy preview

CVE-2026-21018-OPC-UA-Authentication-Bypass-via-None-Security-Policy

GitHubgeorge0papasotiriou/cve-2026-21018-opc-ua-authentication-bypass-via-none-security-policy

Proof-of-concept exploit for OPC UA authentication bypass using None security policy, including a simulated server to demonstrate unauthorized…

authenticationexploitationmisconfiguration+3
1 month ago
CVE-2026-9090-Modbus-TCP-Write-to-Read-Only-Coils-via-Function-Code-Spoofing preview

CVE-2026-9090-Modbus-TCP-Write-to-Read-Only-Coils-via-Function-Code-Spoofing

GitHubgeorge0papasotiriou/cve-2026-9090-modbus-tcp-write-to-read-only-coils-via-function-code-spoofing

PoC Modbus TCP exploit demonstrating spoofed writes to read-only coils in simulated PLCs, highlighting SCADA/ICS access control flaws.

exploitationhardware-iot-securitymisconfiguration+4
1 month ago
CVE-2021-31630-OpenPLC_RCE preview

CVE-2021-31630-OpenPLC_RCE

GitHubhev0x/cve-2021-31630-openplc_rce

Exploit for Authenticated Remote Code Execution on OpenPLC v3 Webserver

exploitationpenetration-testingscada-ics-security+2
25 years ago
CVE-2009-0473-check preview

CVE-2009-0473-check

GitHubakbarq/cve-2009-0473-check

Simple script to exploit open redirection vulnerability in Rockwell ControlLogix 1756-ENBT/A

exploitationpenetration-testingscada-ics-security+2
33 years ago
sparkplugFuzzer preview

sparkplugFuzzer

GitHubbishopfox/sparkplugfuzzer

Fuzzer for the Sparkplug B IIoT protocol

authenticationdynamic-analysis-sandboxingfuzzing+5
12 months ago
PanelShock preview

PanelShock

GitHub0xicf/panelshock

Schneider Electric Magelis HMI Resource Consumption Vulnerabilities [ICSA-16-308-02, CVE-2016-8367, CVE-2016-8374]

exploitationhardware-iot-securityscada-ics-security+1
29 years ago
CVE-2016-3962-Exploit preview

CVE-2016-3962-Exploit

GitHubsecurifera/cve-2016-3962-exploit

CVE-2016-3962-Exploit

embedded-systems-securityexploitationpenetration-testing+3
110 years ago
CVE-2025-48466 preview

CVE-2025-48466

GitHubshipcod3/cve-2025-48466

Modbus Packet Injection on Advantech WISE 4060LAN / IoT Gateway for door control

exploitationfuzzinghardware-iot-security+5
21 year ago
CVE-2026-22553-InSAT-MasterSCADA-BUK-TS-MMadmServ preview

CVE-2026-22553-InSAT-MasterSCADA-BUK-TS-MMadmServ

GitHubmbanyamer/cve-2026-22553-insat-masterscada-buk-ts-mmadmserv

Unauthenticated OS command injection exploit for InSAT MasterSCADA BUK-TS MMadmServ web interface. Delivers reverse shell with root privileges via…

command-and-controlexploitationpayload-generation+3
3 months ago
CVE-2026-36226 preview

CVE-2026-36226

GitHubnullbyte8080/cve-2026-36226

Benign proof-of-concept for CVE-2026-36226, a cross-site scripting vulnerability in Advantech WebAccess/SCADA 8.0-2015.08.16 Admin Dashboard Create…

educationexploitationpenetration-testing+3
3 months ago
CVE-2026-31156 preview

CVE-2026-31156

GitHubunicorn-hyh/cve-2026-31156

There is a path injection vulnerability in OpenPLC-v3, which arises from the program not performing any validity checks on the file path parameters…

code-analysisexploitationinformation-gathering+3
3 months ago
CVE-2018-7849 preview

CVE-2018-7849

GitHubyanissec/cve-2018-7849

CVE-2018-7849

embedded-systems-securityexploitationpenetration-testing+2
12 years ago
CVE-2018-7845 preview

CVE-2018-7845

GitHubyanissec/cve-2018-7845

CVE-2018-7845

embedded-systems-securityexploitationpenetration-testing+2
12 years ago
CVE-2025-32433 preview

CVE-2025-32433

GitHubiteride/cve-2025-32433

test

command-and-controlctfeducation+6
111 months ago
POC-CVE-2012-1831 preview

POC-CVE-2012-1831

GitHubastrowmist/poc-cve-2012-1831

Proof Of Concept for the CVE-2012-1831 (Kingview Touchview 6.53). This is a Industrial Control Systems Vulnerability

binary-exploitationexploitationpenetration-testing+2
11 year ago
CVE-2025-34226 preview

CVE-2025-34226

GitHubeyodav/cve-2025-34226

OpenPLC Runtime suffers from a persistent denial of service (DoS) vulnerability in the /upload-program-action endpoint.

database-securityexploitationmisconfiguration+3
11 months ago
Previous1234567Next