Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
14 results
CVE-2023-36845 preview

CVE-2023-36845

GitHubsimrotion13/cve-2023-36845

Mass-check script for CVE-2023-36845 that scans IP lists and tests for remote file inclusion via PHP configuration injection.

exploitationinformation-gatheringreconnaissance+2
1
2 years ago
CVE-2017-12615 preview

CVE-2017-12615

GitHubfa1c0n35/cve-2017-12615

Tomcat - PUT Method

exploitationinformation-gatheringpenetration-testing+2
9 months ago
blackjump preview

blackjump

GitHubtarihub/blackjump

JumpServer 堡垒机未授权综合漏洞利用, Exploit for CVE-2023-42442 / CVE-2023-42820 / RCE 2021

command-and-controlexploitationinformation-gathering+3
2761 year ago
POC-CVE-2022-28117 preview

POC-CVE-2022-28117

GitHubkimstars/poc-cve-2022-28117

Proof-of-concept exploit for CVE-2022-28117 enabling arbitrary file read via file:/// URI scheme in Navigate CMS, with authentication support.

exploitationinformation-gatheringpenetration-testing+2
2 years ago
-CVE-2023-30845 preview

-CVE-2023-30845

GitHubhimori123/-cve-2023-30845

Explore CVE 2023-30845 automatically across multiple subdomains

exploitationreconnaissancesubdomain-enumeration+2
162 years ago
cve-2023-2745 preview

cve-2023-2745

GitHubfofovicfof-ai/cve-2023-2745

Python script to check for CVE-2023-2745 vulnerability by sending crafted HTTP requests to a target URL and analyzing responses.

exploitationinformation-gatheringpenetration-testing+2
10 months ago
CVE-2024-33676 preview

CVE-2024-33676

GitHubdersecure/cve-2024-33676

Technical disclosure of CVE-2024-33676: weak authentication on Enel X JuiceBox EV chargers enabling PII extraction, settings manipulation, and OS…

authentication-authorizationeducationembedded-systems-security+9
1 year ago
scan-dirtycow preview

scan-dirtycow

GitHubaishee/scan-dirtycow

Scan vuls kernel CVE-2016-5195 - DirtyCow

educationexploitationinformation-gathering+3
169 years ago
CVE-2026-32488 preview

CVE-2026-32488

GitHubizxci/cve-2026-32488

Proof-of-concept exploit for CVE-2026-32488 targeting WordPress user registration via crafted POST requests to admin-ajax.php, enabling…

exploitationinformation-gatheringpenetration-testing+2
2 months ago
wpx preview

wpx

GitHubgreg-randall/wpx

Asynchronous WordPress security scanner with WAF bypass via headless browser. Enumerates plugins, themes, users, and multisite installations with…

api-security-testingcrawlerinformation-gathering+6
105 months ago
kernelpop preview

kernelpop

GitHubspencerdodd/kernelpop

kernel privilege escalation enumeration and exploitation framework

exploitationpenetration-testingprivilege-escalation+1
7028 years ago
GPOHound preview

GPOHound

GitHubcogiceo/gpohound

Offensive GPO dumping and analysis tool that leverages and enriches BloodHound data

configuration-auditinginformation-gatheringmisconfiguration+4
4171 month ago
KisMac2 preview
Archived

KisMac2

GitHubigrsoft/kismac2

KisMAC is a free, open source wireless stumbling and security tool for Mac OS X.

information-gatheringnetwork-mappingpacket-sniffing-analysis+6
9188 years ago
LeakLooker preview
Archived

LeakLooker

GitHubwoj-ciech/leaklooker

Find open databases - Powered by Binaryedge.io

cloud-securitydatabase-securityinformation-gathering+5
1.5k6 years ago