Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
19 results
CVE-2025-32429-Checker preview

CVE-2025-32429-Checker

GitHubimbas007/cve-2025-32429-checker

Python-based vulnerability scanner for detecting CVE-2025-32429 SQL injection in XWiki platforms. Supports single/bulk scanning, WAF detection,…

penetration-testingvulnerability-scannerswaf-bypass+2
1 year ago
Atlas preview

Atlas

GitHubm4ll0k/atlas

Automated SQLMap tamper suggester that tests payloads against WAF/IDS/IPS and recommends bypass techniques based on HTTP status codes, supporting…

penetration-testingvulnerability-scannerswaf-bypass+1
1.4k5 years ago
WP-Contest-Gallery-28.1.4-Exploit preview

WP-Contest-Gallery-28.1.4-Exploit

GitHubcerberusmrxi/wp-contest-gallery-28.1.4-exploit

Automated SQL injection exploitation toolkit for WordPress Contest Gallery CVE-2026-3180, featuring blind data extraction, WAF bypass, reverse shell,…

exploitationpassword-crackingpayload-development+4
11 month ago
mssqli-duet preview

mssqli-duet

GitHubkeramas/mssqli-duet

SQL injection script for MSSQL that extracts domain users from an Active Directory environment based on RID bruteforcing

information-gatheringpenetration-testingwaf-bypass
906 years ago
AutoSQLi preview
Archived

AutoSQLi

GitHubclouedoc/autosqli

An automatic SQL Injection tool which takes advantage of ~DorkNet~ Googler, Ddgr, WhatWaf and sqlmap.

dns-subdomain-enumerationosintpenetration-testing+3
2715 years ago
SafeLine preview

SafeLine

GitHubchaitin/safeline

Self-hosted WAF and reverse proxy that filters malicious HTTP traffic, blocks SQL injection, XSS, and bot attacks, with rate limiting and dynamic…

anti-botapi-securityapi-security-testing+8
22.4k6 days ago
pythia-sql-clairvoyance preview

pythia-sql-clairvoyance

GitHubrodhnin/pythia-sql-clairvoyance

Advanced SQL Injection Scanner with AI-powered analysis, ethical compliance framework, and professional reporting.

ai-securitycrawlerdevsecops+5
23 months ago
Magnohost-Vulnerabilities-pentest preview

Magnohost-Vulnerabilities-pentest

GitHubwyllowsec/magnohost-vulnerabilities-pentest

Manual black-box penetration test of hosting provider infrastructure using curl_cffi and Python. Identifies exposed databases, default credentials,…

cloud-securitydatabase-securitydns-analysis+8
13 months ago
Advanced-SQL-Injection-Cheatsheet preview

Advanced-SQL-Injection-Cheatsheet

GitHubkleiton0x00/advanced-sql-injection-cheatsheet

A cheat sheet that contains advanced queries for SQL Injection of all types.

curated-resourceseducationpenetration-testing+4
3.2k3 years ago
HackBar preview

HackBar

GitHubd3vilbug/hackbar

Burp Suite plugin providing a quick-access toolbar for SQL injection, XSS payloads, and WAF bypass testing, with built-in encoder/decoder for web…

penetration-testingwaf-bypassweb-application-exploitation+1
1.6k5 years ago
sqlmap preview

sqlmap

GitHubsqlmapproject/sqlmap

Automatic SQL injection and database takeover tool

api-securityapi-security-testingcrawler+12
38.3k1 day ago
sqlmap-ai preview

sqlmap-ai

GitHubatiilla/sqlmap-ai

This script automates SQL injection testing using SQLMap with AI-powered decision making.

payload-generationpenetration-testingvulnerability-scanners+3
4456 months ago
WP2Shell preview

WP2Shell

GitHubg0d150ne/wp2shell

Modular WordPress pre-auth exploit framework chaining SQL injection and authentication bypass to deliver remote code execution, interactive shells,…

exploitationexploit-frameworkspayload-development+7
14 days ago
CVE-2025-41373 preview
Archived

CVE-2025-41373

GitHubbytereaper77/cve-2025-41373

Proof-of-concept exploit for authenticated SQL injection in Gandia Integra Total, demonstrating boolean-based and time-based injection techniques…

exploitationpenetration-testingvulnerability-analysis+2
21 year ago
naxsi preview
Archived

naxsi

GitHubnbs-system/naxsi

High-performance, low-maintenance Nginx module acting as a DROP-by-default WAF, blocking XSS, SQL injection, and other web attacks using simple…

api-securityids-ips-evasionvulnerability-scanners+3
4.8k2 years ago
Imperva_gzip_WAF_Bypass preview

Imperva_gzip_WAF_Bypass

GitHubbishopfox/imperva_gzip_waf_bypass

Exploit for Imperva Cloud WAF bypass using gzip Content-Encoding header to evade WAF rules on HTTP POST requests. Includes detection script and…

ids-ips-evasionpenetration-testingvulnerability-analysis+2
1684 years ago
Imperva_gzip_bypass preview

Imperva_gzip_bypass

GitHub0xhaggis/imperva_gzip_bypass

Exploit for CVE-2021-45468, an Imperva WAF bypass.

exploitationids-ips-evasionpenetration-testing+3
64 years ago
forbiddenpass preview

forbiddenpass

GitHubgotr00t0day/forbiddenpass

Multi-domain HTTP 403 bypass scanner that tests header manipulation techniques to discover hidden access paths on web servers, supporting bulk domain…

penetration-testingwaf-bypassweb-application-exploitation+1
2003 years ago
Previous12Next