Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
26 results
vuls preview

vuls

GitHubfuture-architect/vuls

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

cloud-securityconfiguration-auditingcontainer-security+5
12.3k6 days ago
cloudsploit preview

cloudsploit

GitHubaquasecurity/cloudsploit

Multi-cloud security posture scanner that audits AWS, Azure, GCP, and OCI for misconfigurations, compliance violations (HIPAA, PCI, CIS), and…

cloud-securityconfiguration-auditingvulnerability-scanners
3.8k18 days ago
AegisJava preview

AegisJava

GitHubrashedhasan090/aegisjava

I have created AegisJava, a tool to fix (detect and mitigate) CVE-2025-30749.

code-analysisconfiguration-auditingdevsecops+3
1 month ago
POC-CVE-2026-60206 preview

POC-CVE-2026-60206

GitHubimbas007/poc-cve-2026-60206

cve cve-2026-60206 weblogic saml exploit poc vulnerability oracle scanner security

authentication-authorizationexploitationpenetration-testing+4
352 months ago
Cybersecurity-Capstone-Project preview

Cybersecurity-Capstone-Project

GitHubshahdawadfallah-sys/cybersecurity-capstone-project

Cybersecurity Capstone Project completed during the NCSC Nashama CyberCamp 11, delivered in collaboration with IT Security C&T. The project…

educationexploitationlabs-practice+5
3 months ago
rwsploit preview

rwsploit

GitHubabq0/rwsploit

Automated exploitation scanner for Oracle Reports Server (rwservlet) — CVE-2012-3152 / CVE-2012-3153. Detects, fingerprints, reads files via LFI,…

exploitationinformation-gatheringpayload-generation+6
64 months ago
odat preview

odat

GitHubquentinhardy/odat

Penetration testing tool for Oracle Databases that discovers valid SIDs, brute-forces credentials, escalates privileges to DBA, executes system…

command-and-controldatabase-securityexploitation+4
1.8k6 months ago
CVE-2026-21962 preview

CVE-2026-21962

GitHubsamael0x4/cve-2026-21962

Unauthenticated vulnerability that may allow remote attackers to compromise confidentiality and integrity, potentially leading to full system…

information-gatheringpenetration-testingvulnerability-scanners+1
68 months ago
Ashwesker-CVE-2026-21962 preview

Ashwesker-CVE-2026-21962

GitHubboroeurnprach/ashwesker-cve-2026-21962

Exploit PoC and Nuclei template for CVE-2026-21962, a critical unauthenticated remote code execution in Oracle HTTP Server and WebLogic Proxy…

exploitationpayload-developmentpenetration-testing+3
68 months ago
Nuclei-Templates-Collection preview

Nuclei-Templates-Collection

GitHubemadshanab/nuclei-templates-collection

Nuclei Templates Collection

api-securitycurated-resourcesfuzzing+6
1.2k9 months ago
CVE-2025-61882-CVE-2025-61884 preview

CVE-2025-61882-CVE-2025-61884

GitHubzhert-lab/cve-2025-61882-cve-2025-61884

Sorumluluk Reddi Kendi sorumluluğunuzda kullanın, size ait olmayan veya tarama izninizin olmadığı altyapılarda gerçekleştireceğiniz yasa dışı…

exploitationinformation-gatheringpenetration-testing+3
10 months ago
Oracle-Identity-Manager-CVE-2025-61757 preview

Oracle-Identity-Manager-CVE-2025-61757

GitHubjinxia62/oracle-identity-manager-cve-2025-61757

Oracle Identity Manager 远程代码执行漏洞CVE-2025-61757

authenticationcode-analysisexploitation+3
310 months ago
http-oracle-ebs-cve-2025-61882.nse preview

http-oracle-ebs-cve-2025-61882.nse

GitHubbattalionx/http-oracle-ebs-cve-2025-61882.nse

Nmap NSE script for detecting Oracle E-Business Suite CVE-2025-61882 with multi-tier checks including fingerprinting, version checks, SSRF tests, and…

exploitationinformation-gatheringpenetration-testing+2
211 months ago
CVE-2025-53072-CVE-2025-62481 preview

CVE-2025-53072-CVE-2025-62481

GitHubrxerium/cve-2025-53072-cve-2025-62481

Detection for CVE-2025-53072 + CVE-2025-62481

reconnaissancevulnerability-scannersweb-security+1
311 months ago
CVE-2025-61882-CVE-2025-61884 preview

CVE-2025-61882-CVE-2025-61884

GitHubrxerium/cve-2025-61882-cve-2025-61884

Detection for CVE-2025-61882 & CVE-2025-61884

misconfigurationpenetration-testingvulnerability-scanners+2
350 years ago
Blackash-CVE-2025-61884 preview

Blackash-CVE-2025-61884

GitHubjrexploit/blackash-cve-2025-61884

Provides a detailed summary and detection guidance for CVE-2025-61884, an unauthenticated data disclosure vulnerability in Oracle E-Business Suite…

exploitationinformation-gatheringvulnerability-analysis+2
0 years ago
CVE-2025-61882 preview

CVE-2025-61882

GitHubsachinart/cve-2025-61882

Multi-threaded scanner for CVE-2025-61882 in Oracle E-Business Suite, exploiting HTTP request smuggling to achieve unauthenticated remote code…

exploitationpenetration-testingreconnaissance+3
111 year ago
CVE-2022-21500 preview

CVE-2022-21500

GitHubcappricio-securities/cve-2022-21500

Oracle E-Business Suite <=12.2 - Authentication Bypass

authenticationexploitationinformation-gathering+3
12 years ago
Previous12Next