Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
25 results
graphql-cop preview

graphql-cop

GitHubdolevf/graphql-cop

Lightweight Python utility for automated security auditing of GraphQL APIs. Detects misconfigurations, information leaks, and denial-of-service…

api-securityapi-security-testingdynamic-code-analysis+5
694
11 months ago
blindxss-lite preview

blindxss-lite

GitHubyuyudhn/blindxss-lite

A lightweight Blind XSS (Cross-Site Scripting) collector and payload server built with Flask

command-and-controldata-exfiltrationinformation-gathering+7
31 day ago
CVE-2026-23723-POC preview

CVE-2026-23723-POC

GitHubch35h1r3c47/cve-2026-23723-poc

This is a lightweight Python helper script designed to automate the generation of sqlmap-compatible PoC files for the authenticated error-based SQL…

exploitationpenetration-testingvulnerability-analysis+1
38 months ago
react2shell preview

react2shell

GitHubgrp-ops/react2shell

Lightweight scanner and Nuclei templates for identifying React and Next.js deserialization RCEs (CVE-2025-55182 / CVE-2025-66478).

exploitationfuzzingpayload-generation+3
410 months ago
crlfi-scanner preview

crlfi-scanner

GitHubcappricio-securities/crlfi-scanner

CRLFISCANNER is a lightweight and powerful CLI tool designed for bug bounty hunters and penetration testers to automatically detect CRLF injection…

fuzzingpenetration-testingweb-application-exploitation+2
47 months ago
Zimbra-Valid-Login-Checker preview

Zimbra-Valid-Login-Checker

GitHubjenderal92/zimbra-valid-login-checker

Lightweight Python script to test username/password combinations against Zimbra webmail login pages for security assessments and password auditing.

authenticationpassword-attackspenetration-testing+2
14 months ago
CVE-2024-48887-FortiSwitch-Exploit preview

CVE-2024-48887-FortiSwitch-Exploit

GitHubcybersecplayground/cve-2024-48887-fortiswitch-exploit

a lightweight JavaScript snippet showcasing how unauthorized password changes can be triggered on vulnerable Fortinet FortiSwitch GUI endpoints.

exploitationlateral-movementpenetration-testing+3
21 year ago
CVE-2025-55182 preview

CVE-2025-55182

GitHubr4j3sh-com/cve-2025-55182

Lightweight Go toolkit plus a Dockerized Next.js lab to explore and triage CVE-2025-55182.

educationexploitationintrusion-detection+3
10 months ago
CVE-2024-46506 preview

CVE-2024-46506

GitHubfufu-byte/cve-2024-46506

Standalone Python exploit for CVE-2024-46506, providing a lightweight, portable remote code execution module without requiring the Metasploit…

educationexploitationpenetration-testing+2
9 months ago
CVE-2021-2109 preview

CVE-2021-2109

GitHubdinosn/cve-2021-2109

Lightweight Python scanner for CVE-2021-2109 that checks target URLs for the specific vulnerability with minimal dependencies.

exploitationpenetration-testingreconnaissance+2
5 years ago
shellshock preview

shellshock

GitHubajansha/shellshock

Shelly is a lightweight and efficient vulnerability scanner designed to identify and mitigate Shellshock (CVE-2014-6271 & CVE-2014-7169)…

exploitationinformation-gatheringpenetration-testing+3
2 years ago
CVE-2024-9474 preview

CVE-2024-9474

GitHubdeathvu/cve-2024-9474

Proof-of-concept exploit for CVE-2024-9474 targeting Palo Alto PAN-OS. Lightweight Python script for testing vulnerability against specified URLs.

exploitationpenetration-testingreconnaissance+2
1 year ago
CVE-2023-22515-Scan. preview

CVE-2023-22515-Scan.

GitHubedsonjt81/cve-2023-22515-scan.

Lightweight scanner for CVE-2023-22515 that detects vulnerable Atlassian Confluence instances by probing the /server-info.action endpoint and…

exploitationinformation-gatheringpenetration-testing+3
2 years ago
CVE-2025-0054 preview

CVE-2025-0054

GitHubz3usx01/cve-2025-0054

Lightweight Python scanner for detecting stored XSS (CVE-2025-0054) in SAP NetWeaver Java. Submits customizable payloads and checks for script…

educationpenetration-testingvulnerability-analysis+2
1 year ago
Ratpack-1 preview

Ratpack-1

GitHubepicosy/ratpack-1

Lightweight Java toolkit for building high-performance web applications, with a focus on exploiting CVE-2019-17513 for security testing and…

exploitationpenetration-testingvulnerability-analysis+2
2 years ago
cve-2022-42889-check preview

cve-2022-42889-check

GitHubeunomie/cve-2022-42889-check

Lightweight Java-based checker for CVE-2022-42889 (Apache Commons Text RCE). Quickly validates if a target is vulnerable to the Text4Shell remote…

exploitationinformation-gatheringpenetration-testing+2
4 years ago
jsql-injection preview

jsql-injection

GitHubron190/jsql-injection

Automated SQL injection detection and exploitation tool for extracting database information from web applications, supporting multiple injection…

database-securitypenetration-testingvulnerability-scanners+1
1.8k3 months ago
bantam preview

bantam

GitHubgellin/bantam

A PHP backdoor management and generation tool/C2 featuring end to end encrypted payload streaming designed to bypass WAF, IDS, SIEM systems.

command-and-controlencryption-decryption-toolsids-ips-evasion+5
2824 years ago
Previous12Next