Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
46 results
SQLiDetector preview

SQLiDetector

GitHubeslam3kl/sqlidetector

Simple python script supported with BurpBouty profile that helps you to detect SQL injection "Error based" by sending multiple requests with 14…

penetration-testingvulnerability-scannersweb-security+1
644
1 day ago
CVE-2026-72898-safe-detection preview

CVE-2026-72898-safe-detection

GitHubfranc-zar/cve-2026-72898-safe-detection

Simple script to achieve safe and non-desruptive active detection of CVE-2026-72898 (SQLi in Metabase)

penetration-testingvulnerability-analysisvulnerability-scanners+2
1 month ago
livewire-vuln-scanner preview

livewire-vuln-scanner

GitHubjenderal92/livewire-vuln-scanner

Simple scanner to detect vulnerable Livewire installations.

information-gatheringreconnaissancevulnerability-analysis+3
4 months ago
CVE-2025-66470 preview

CVE-2025-66470

GitHubjmehta10/cve-2025-66470

A fast, simple scanner for detecting CVE-2025-66470 - XSS vulnerability in NiceGUI's ui.interactive_image component.

exploitationinformation-gatheringpenetration-testing+4
29 months ago
POC-CVE-2025-55182 preview

POC-CVE-2025-55182

GitHubiamblacksolo2-bugbounty/poc-cve-2025-55182

Bash-based scanner for detecting and exploiting CVE-2025-55182 (React Server Components RCE) in Next.js applications. Supports custom command…

educationexploitationpenetration-testing+3
9 months ago
CVE-2025-55182-mass preview

CVE-2025-55182-mass

GitHubhunter24x24/cve-2025-55182-mass

Command-line scanner for detecting and exploiting CVE-2025-55182 (RCE) in Next.js React Server Components. Supports batch scanning from domain lists…

educationexploitationpenetration-testing+2
9 months ago
CVE-2025-55182-advanced-scanner- preview

CVE-2025-55182-advanced-scanner-

GitHubzack0x01/cve-2025-55182-advanced-scanner-

Command-line scanner for detecting and exploiting CVE-2025-55182 (React Server Components RCE) in Next.js applications. Supports custom command…

educationexploitationpenetration-testing+3
2829 months ago
CVE-2025-64446 preview

CVE-2025-64446

GitHubsensepost/cve-2025-64446

A scanner for the FortiNet vulnerability CVE-2025-64446

authenticationexploitationpenetration-testing+3
3210 months ago
rengine preview

rengine

GitHubyogeshojha/rengine

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines,…

crawlerdns-subdomain-enumerationinformation-gathering+9
8.9k10 months ago
CVE-2025-12101-checker preview

CVE-2025-12101-checker

GitHub6h4ack/cve-2025-12101-checker

Simple Python PoC to check Citrix NetScaler ADC/Gateway for CVE-2025-12101 reflected XSS on /cgi/logout using a crafted SAMLResponse + RelayState…

exploitationinformation-gatheringpenetration-testing+3
510 months ago
CVE-2025-49844 preview

CVE-2025-49844

GitHubangelusrivera/cve-2025-49844

Scanner and educational guide for CVE-2025-49844 (RediShell), a Redis Lua scripting use-after-free vulnerability. Checks Redis servers for exposure,…

database-securityeducationexploitation+4
111 months ago
CVE-2023-6000 preview

CVE-2023-6000

GitHubrxerium/cve-2023-6000

The Popup Builder WordPress plugin before 4.2.3 does not prevent simple visitors from updating existing popups, and injecting raw JavaScript in them,…

educationpenetration-testingvulnerability-scanners+2
211 months ago
middleforce preview

middleforce

GitHubdiogolourencodev/middleforce

Simple script to attempt a Bypass on a server possibly vulnerable to CVE-2025-29927 (Next.js Middleware)

exploitationpenetration-testingvulnerability-scanners+2
111 months ago
nuclei-plugin preview

nuclei-plugin

GitHubjenkinsci/nuclei-plugin

Nuclei is a fast tool for configurable targeted vulnerability scanning based on templates offering massive extensibility and ease of use.

configuration-auditingdevsecopsvulnerability-scanners+1
161 year ago
CVE-2020-15778-SCP-Command-Injection-Check preview

CVE-2020-15778-SCP-Command-Injection-Check

GitHubdrackyjr/cve-2020-15778-scp-command-injection-check

This script is a safe and simple tool that helps system users, students, and administrators check if their SCP (Secure Copy) client is vulnerable to…

educationexploitationpenetration-testing+3
21 year ago
CVE-2025-34085 preview

CVE-2025-34085

GitHubyukinime/cve-2025-34085

Automated scanner and exploit for CVE-2025-34085, an unauthenticated RCE in the WordPress Simple File List plugin. Supports multi-target scanning,…

exploitationpayload-generationpenetration-testing+3
71 year ago
CVE-2025-34085-Multi-target preview

CVE-2025-34085-Multi-target

GitHubill-deed/cve-2025-34085-multi-target

Multi-target unauthenticated RCE scanner for CVE-2025-34085 affecting WordPress Simple File List plugin. Uploads, renames, and triggers PHP webshells…

command-and-controlexploitationpayload-generation+5
341 year ago
CVE-2019-9053 preview

CVE-2019-9053

GitHubh3x0v3rl0rd/cve-2019-9053

Python exploit for CVE-2019-9053 targeting a SQL injection vulnerability in CMS Made Simple. Automates time-based blind SQLi to extract admin…

exploitationpenetration-testing-frameworksvulnerability-scanners+1
31 year ago
Previous123Next