Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
14 results
parameth preview
Archived

parameth

GitHubmak-/parameth

This tool can be used to brute discover GET and POST parameters

information-gatheringpenetration-testingreconnaissance+3
1.4k
7 years ago
FDsploit preview
Archived

FDsploit

GitHubchrispetrou/fdsploit

File Inclusion & Directory Traversal fuzzing, enumeration & exploitation tool.

exploitationfuzzinginformation-gathering+3
2735 years ago
CVE-2024-55591-POC preview

CVE-2024-55591-POC

GitHubexfil0/cve-2024-55591-poc

A comprehensive all-in-one Python-based Proof of Concept script to discover and exploit a critical authentication bypass vulnerability…

authentication-authorizationexploitationnetwork-security+6
121 year ago
forbiddenpass preview

forbiddenpass

GitHubgotr00t0day/forbiddenpass

Multi-domain HTTP 403 bypass scanner that tests header manipulation techniques to discover hidden access paths on web servers, supporting bulk domain…

penetration-testingwaf-bypassweb-application-exploitation+1
2003 years ago
geoexplorer preview

geoexplorer

GitHubjustin-p/geoexplorer

Mass vulnerability scanner targeting CVE-2024-36401 in GeoServer, using WFS requests to discover feature types and deliver payloads for automated…

exploitationinformation-gatheringpenetration-testing+3
42 years ago
CVE-2020-5902-fofa-scan preview

CVE-2020-5902-fofa-scan

GitHubfreefv/cve-2020-5902-fofa-scan

Automated scanner for CVE-2020-5902 (F5 BIG-IP RCE) using FOFA search engine to discover and exploit vulnerable targets.

exploitationinformation-gatheringreconnaissance+2
6 years ago
admin-panel-finder preview

admin-panel-finder

GitHubbdblackhat/admin-panel-finder

Python script to discover admin panel URLs of websites, aiding in security reconnaissance and penetration testing.

information-gatheringpenetration-testingreconnaissance+2
1914 years ago
dotdotpwn preview

dotdotpwn

GitHubwireghoul/dotdotpwn

DotDotPwn - The Directory Traversal Fuzzer

fuzzinginformation-gatheringnetwork-security+3
1.1k3 years ago
CVE-2018-4416-exploit preview

CVE-2018-4416-exploit

GitHuberupmi/cve-2018-4416-exploit

Educational walkthrough of CVE-2018-4416, a WebKit JavaScriptCore type confusion vulnerability, with PoC, debugging setup, and analysis of common…

binary-exploitationeducationexploitation+4
102 years ago
gahoole77.github.io preview

gahoole77.github.io

GitHubgahoole77/gahoole77.github.io

🔍 Discover and scan vulnerable Next.js instances to protect your infrastructure from critical RCE vulnerabilities like CVE-2025-55182.

information-gatheringreconnaissancevulnerability-scanners+2
7 months ago
CVE-2021-44228 preview

CVE-2021-44228

GitHublucaspdiniz/cve-2021-44228

Log4j Vulnerability RCE - CVE-2021-44228

educationexploitationpayload-development+4
2 years ago
aimap preview

aimap

GitHubbishopfox/aimap

Discover Exposed AI Services

ai-securityinformation-gatheringosint+6
4134 months ago
CVE-2025-1974-poc preview

CVE-2025-1974-poc

GitHubhi-unc1e/cve-2025-1974-poc

PoC of CVE-2025-1974, modified from the world-first PoC~

cloud-securitycontainer-securityexploitation+3
41 year ago
CVE-2019-17240_Bludit-BF-Bypass preview

CVE-2019-17240_Bludit-BF-Bypass

GitHubcoldfusionx/cve-2019-17240_bludit-bf-bypass

Bludit <= 3.9.2 - Authentication Bruteforce Mitigation Bypass Exploit/PoC

educationexploitationpassword-attacks+3
25 years ago