Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
257 results
WordPressMassExploiter preview

WordPressMassExploiter

GitHubdmonst3r/wordpressmassexploiter

[discontinued] Mass exploiter of CVE-2015-1579 for WordPress CMS

exploitationinformation-gatheringreconnaissance+3
31
8 years ago
training-application-security preview

training-application-security

GitHubransomleak/training-application-security

Interactive secure coding training with hands-on SCORM exercises covering OWASP Top 10 web and API vulnerabilities, Git/secrets exposure, and…

api-securitydevsecopseducation+7
1818 days ago
CVE-2024-38473-Nuclei-Template preview

CVE-2024-38473-Nuclei-Template

GitHubjuanschallibaum/cve-2024-38473-nuclei-template

Nuclei template to detect Apache servers vulnerable to CVE-2024-38473

exploitationfuzzingmisconfiguration+3
302 years ago
crlfmap preview

crlfmap

GitHubryandamour/crlfmap

CRLFMap is a tool to find HTTP Splitting vulnerabilities

fuzzingids-ips-evasionpenetration-testing+3
325 years ago
CVE-2023-35086-POC preview

CVE-2023-35086-POC

GitHubtin-z/cve-2023-35086-poc

POC of CVE-2023-35086 only DoS

embedded-systems-securityexploitationfuzzing+3
443 years ago
Burp_AES_Plugin preview

Burp_AES_Plugin

GitHubjas502n/burp_aes_plugin

Burpsuite Plugin For AES Crack

cryptographyencryption-decryption-toolsfuzzing+4
386 years ago
CVE-2025-2783 preview

CVE-2025-2783

GitHubalchemist3dot14/cve-2025-2783

Simulated PoC for CVE-2025-2783 — a sandbox escape vulnerability in Chrome's Mojo IPC. Includes phishing delivery, memory fuzzing, IPC simulation,…

binary-exploitationeducationexploitation+8
331 year ago
ApiHunter preview

ApiHunter

GitHubteycir/apihunter

Async API security scanner in Rust for CORS, CSP, GraphQL, JWT, OpenAPI, and active API posture checks.

api-securitydevsecopsdynamic-analysis-sandboxing+6
252 months ago
crlf-desyncs preview

crlf-desyncs

GitHubturtlesec-software/crlf-desyncs

Nuclei templates and exploit resources for CRLF based desync attacks

fuzzingpayload-developmentpenetration-testing+4
202 months ago
ShiroScan preview

ShiroScan

GitHubianxtianxt/shiroscan

shiro 1.2.47 反序列化

exploitationfuzzingpenetration-testing+3
206 years ago
CVE-2026-19478-PoC preview

CVE-2026-19478-PoC

GitHubdavkharrr/cve-2026-19478-poc

Proof-of-concept exploit for unauthenticated remote code injection in GitLab's GraphQL API, using crafted queries to modify or delete public projects…

api-securityexploitationinformation-gathering+3
111 month ago
Azure-APIM-Cross-Tenant-Signup-Bypass preview

Azure-APIM-Cross-Tenant-Signup-Bypass

GitHubbountyyfi/azure-apim-cross-tenant-signup-bypass

Security advisory: Azure APIM Developer Portal allows cross-tenant account registration by bypassing UI signup restrictions. Reported to MSRC twice -…

api-securitycloud-securityinformation-gathering+4
162 months ago
cve-2023-5217-poc preview

cve-2023-5217-poc

GitHubut-security/cve-2023-5217-poc

A PoC to trigger CVE-2023-5217 from the Browser WebCodecs or MediaRecorder interface.

binary-exploitationeducationexploitation+3
162 years ago
k8s-CVE-2021-43557-poc preview

k8s-CVE-2021-43557-poc

GitHubxvnpw/k8s-cve-2021-43557-poc

PoC for CVE-2021-43557

api-securitycloud-securitycontainer-security+3
234 years ago
CVE-2022-22274_CVE-2023-0656 preview

CVE-2022-22274_CVE-2023-0656

GitHubbishopfox/cve-2022-22274_cve-2023-0656

Proof-of-concept exploit for SonicWall SonicOS stack-based buffer overflows (CVE-2022-22274, CVE-2023-0656) that tests and triggers crashes via…

exploitationfuzzingpenetration-testing+3
192 years ago
Apache-APISIX-CVE-2022-24112 preview

Apache-APISIX-CVE-2022-24112

GitHubm4xsec/apache-apisix-cve-2022-24112

Apache APISIX Remote Code Execution (CVE-2022-24112) proof of concept exploit

api-securityapi-security-testingexploitation+3
154 years ago
CVE-2017-9096-iText-XXE preview

CVE-2017-9096-iText-XXE

GitHubjakabakos/cve-2017-9096-itext-xxe

Proof-of-concept exploit for CVE-2017-9096 demonstrating XML External Entity (XXE) injection in iText PDF library via malicious XMP metadata and form…

exploitationfuzzingpenetration-testing+2
134 years ago
CVE-2020-36109-POC preview

CVE-2020-36109-POC

GitHubsunn1day/cve-2020-36109-poc

CVE-2020-36109 PoC causing DoS

embedded-systems-securityexploitationfuzzing+3
174 years ago
Previous1…567…15Next