Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
148 results
CVEngine preview

CVEngine

GitHubhevnsnt/cvengine

AI-first external attack surface assessment with continuous discovery, evidence-based vulnerability validation, and developer-agent MCP integration.

ai-securityemail-securityinformation-gathering+8
372
5 days ago
C-A-S preview

C-A-S

GitHubaix567/c-a-s

C.A.S-Exploit — Python-based security research and proof-of-concept toolkit for CVE-2017-5689 (Intel AMT authentication bypass), featuring Shodan…

authenticationexploitationinformation-gathering+4
6 days ago
yowie preview

yowie

GitHubjoda32/yowie

Finds the SaaS services an organisation subscribes to, using only externally observable data. Built for shadow IT discovery.

defensive-toolsdns-analysisdns-subdomain-enumeration+9
211 days ago
forgejo-openid-discovery-ssrf preview

forgejo-openid-discovery-ssrf

GitHubabraxas/forgejo-openid-discovery-ssrf

Forgejo 16.0.5 - High - Remote - SSRF - OpenID discovery fetches attacker-controlled URLs

exploitationinformation-gatheringpenetration-testing+4
3 days ago
Review.CVE-2023-5612 preview

Review.CVE-2023-5612

GitHubconstantinefedorov/review.cve-2023-5612

Proof-of-concept and analysis for CVE-2023-5612, a GitLab CE/EE webhook SSRF. Includes curl PoC steps and custom NSE scripts to verify and…

exploitationnetwork-mappingpenetration-testing+4
1 year ago
RXScan preview

RXScan

GitHubdarkrx1/rxscan

Rust CLI for bounded network reconnaissance: TCP/UDP port discovery, service identification, DNS/TLS/HTTP evidence collection, and public-source…

defensive-toolsdns-analysisdns-subdomain-enumeration+8
211 days ago
unwaf preview

unwaf

GitHubmmarting/unwaf

Go tool that passively discovers the real origin IP behind a WAF/CDN using multiple OSINT sources, then verifies candidates via HTML similarity, SSL…

dns-subdomain-enumerationinformation-gatheringnetwork-mapping+7
1968 months ago
FUCK-CDN preview

FUCK-CDN

GitHub0xshe/fuck-cdn

Automated CDN origin-IP discovery skill for Claude Code that runs 40+ prioritized OSINT methods, cross-validates candidates via SSL and HTTP…

dns-analysisdns-subdomain-enumerationinformation-gathering+9
1693 months ago
CVE-2024-29269 preview

CVE-2024-29269

GitHubdkstar11q/cve-2024-29269

Exploit for CVE-2024-29269 enabling unauthenticated OS command execution on TLR-2005KSH routers, with ZoomEye and Leakix dork queries for target…

embedded-systems-securityexploitationinformation-gathering+5
2 years ago
CVE-2026-19658 preview

CVE-2026-19658

GitHubmurrez/cve-2026-19658

Python 3 checker and exploit helper for CVE-2026-19658, a WordPress Give Tributes PHP object injection flaw, with FOFA target discovery and legacy…

exploitationinformation-gatheringpayload-development+7
11 month ago
siem preview

siem

GitHubekitji/siem

Curated SIEM queries and techniques for offensive discovery of Windows privilege escalation, misconfigured ACLs, services, scheduled tasks, and…

curated-resourcesdefensive-toolseducation+7
599 days ago
CVE-2024-7593 preview

CVE-2024-7593

GitHubaerchy/cve-2024-7593

Exploit for CVE-2024-7593, a critical RCE in Pulse Secure VPN management interface, allowing authenticated attackers to execute arbitrary commands.…

exploitationpenetration-testingreconnaissance+2
2 years ago
mssharepoint-scanner preview

mssharepoint-scanner

GitHubvirologi-info/mssharepoint-scanner

A scanner for CVE-2026-55040 and CVE-2026-63520, designed to determine whether the server is affected by these two CVEs.

defensive-toolsinformation-gatheringnetwork-security+3
2 months ago
FuzzingBrain-Bench preview

FuzzingBrain-Bench

GitHubfuzzingbrain/fuzzingbrain-bench

A benchmark for LLM-driven bug discovery: 77 challenges across 43 open-source projects (C/C++/Java).

ai-securitydynamic-analysis-sandboxingeducation+3
94 days ago
CVE-2026-31431-PoC preview

CVE-2026-31431-PoC

GitHubsl4ck0th/cve-2026-31431-poc

Proof-of-concept exploit for CVE-2026-31431, a Linux kernel local privilege escalation via AF_ALG page cache write, achieving root on major…

binary-exploitationcontainer-escapeexploitation+4
46 months ago
CVE-2026-26744 preview

CVE-2026-26744

GitHublorenzobruno7/cve-2026-26744

Demonstrates user enumeration in FormaLMS via response discrepancy on the /lostpwd endpoint, enabling unauthenticated username discovery for targeted…

information-gatheringpenetration-testingreconnaissance+2
8 months ago
CVE-2023-51073 preview

CVE-2023-51073

GitHubchristopher-pace/cve-2023-51073

Firmware Update Server Verification Vulnerability on Buffalo LS210D Version 1.78-0.03

exploitationfirmware-analysishardware-iot-security+3
2 years ago
-nginxui_discover preview

-nginxui_discover

GitHubnull200ok/-nginxui_discover

Nginx UI Discovery Scanner - CVE-2026-27944 Version Detector

information-gatheringnetwork-securityreconnaissance+3
27 months ago
Previous12…9Next