Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

242 results

f5-bigip-rce-cve-2020-5902

thelsa/f5-bigip-rce-cve-2020-5902

F5 BIG-IP RCE CVE-2020-5902 automatic check tool

command-and-controlexploitationinformation-gathering+3

6 years ago

SimplesApachePathTraversal

mrcl0wnlab/simplesapachepathtraversal

Tool check: CVE-2021-41773, CVE-2021-42013, CVE-2020-17519

educationexploitationpenetration-testing+3

614 years ago

Archived

kadimus

p0cl4bs/kadimus

kadimus is a tool to check and exploit lfi vulnerability.

code-analysisexploitationpenetration-testing+3

5756 years ago

MSAPer

im-hanzou/msaper

Automatic Mass Tool for check and exploiting vulnerability in CVE-2023-3076 - MStore API < 3.9.9 - Unauthenticated Privilege Escalation (Mass Add…

exploitationprivilege-escalationvulnerability-scanners+1

162 years ago

JBWPer

im-hanzou/jbwper

Automatic Mass Tool for check and exploiting vulnerability in CVE-2022-4061 - JobBoardWP < 1.2.2 - Unauthenticated Arbitrary File Upload

exploitationpayload-generationshellcode+2

52 years ago

CVE-2018-7600-Masschecker

sl4cky/cve-2018-7600-masschecker

Tool to check for CVE-2018-7600 vulnerability on several URLS

exploitationinformation-gatheringpenetration-testing+2

38 years ago

WooRefer

im-hanzou/woorefer

Automatic Mass Tool for check and exploiting vulnerability in CVE-2022-4047 - Return Refund and Exchange For WooCommerce < 4.0.9 - Unauthenticated…

exploitationvulnerability-scannersweb-application-exploitation

12 years ago

CVE-2026-41940-Exploit-PoC

defacto-ridgepole254/cve-2026-41940-exploit-poc

Test authentication bypass vulnerabilities in cPanel and WHM using this proof of concept exploit tool written in Go.

authenticationexploitationpenetration-testing+3

11 day ago

CVE-2025-32778

00xcanelo/cve-2025-32778

PoC exploit for CVE-2025-32778: command injection in Web-Check OSINT tool

command-and-controlexploitationpayload-generation+3

31 year ago

CVE-2023-22515-NSE

spareack/cve-2023-22515-nse

Vulnerability checking tool via Nmap Scripting Engine

exploitationinformation-gatheringpenetration-testing+3

41 year ago

emby_ssrf

btnz-k/emby_ssrf

exploitationnetwork-mappingreconnaissance+3

5 years ago

Invoke-CVE-2022-22965-SafeCheck

daniel0x00/invoke-cve-2022-22965-safecheck

PowerShell port of CVE-2022-22965 vulnerability check by colincowie.

exploitationinformation-gatheringpenetration-testing+2

14 years ago

dotnetpaddingoracle

nccgroup/dotnetpaddingoracle

Python Implementation of a .NET Padding Oracle Assessment Tool

cryptographyencryption-decryption-toolsexploitation+3

3110 years ago

CVE-2024-22198_Checker

xiw1ll/cve-2024-22198_checker

Identify Nginx-ui version and check if it's vulnerable to CVE-2024-22198

exploitationinformation-gatheringpenetration-testing+3

2 years ago

CVE-2020-15778-SCP-Command-Injection-Check

drackyjr/cve-2020-15778-scp-command-injection-check

This script is a safe and simple tool that helps system users, students, and administrators check if their SCP (Secure Copy) client is vulnerable to…

educationexploitationpenetration-testing+3

21 year ago

CVE-2024-24919

goatsecurity/cve-2024-24919

CVE-2024-24919 exploit

exploitationinformation-gatheringpenetration-testing+3

202 years ago

SSTImap

vladko312/sstimap

Automatic SSTI detection tool with interactive interface

code-analysiscommand-and-controldynamic-code-analysis+6

1.6k3 months ago

CVE-2021-3441-check

tcbutler320/cve-2021-3441-check

CVE-2021-3441 CVE Check is a python script to search targets for indicators of compromise to CVE-2021-3441

exploitationinformation-gatheringioc-management+3

25 years ago

Previous12…14 Next