Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
207 results
CVE-2026-50229 preview

CVE-2026-50229

GitHubzero-trace7/cve-2026-50229
educationexploitationpenetration-testing+3
1 month ago
XSS-Scanner preview

XSS-Scanner

GitHubmariagarber/xss-scanner

XSS scanner that detects Cross-Site Scripting vulnerabilities in website by injecting malicious scripts

vulnerability-scannersweb-application-exploitationweb-security+1
1286 years ago
skipfish preview

skipfish

GitHubspinkham/skipfish

Web application security scanner created by lcamtuf for google - Unofficial Mirror

crawlerdynamic-analysis-sandboxingfuzzing+7
87613 years ago
Sitadel preview

Sitadel

GitHubshenril/sitadel

Web Application Security Scanner

information-gatheringpenetration-testingvulnerability-scanners+3
6132 days ago
w3af preview

w3af

GitHubandresriancho/w3af

w3af: web application attack and audit framework, the open source web vulnerability scanner.

exploitationpenetration-testingvulnerability-scanners+3
4.9k6 years ago
forbiddenpass preview

forbiddenpass

GitHubgotr00t0day/forbiddenpass

Multi-domain HTTP 403 bypass scanner that tests header manipulation techniques to discover hidden access paths on web servers, supporting bulk domain…

penetration-testingwaf-bypassweb-application-exploitation+1
2003 years ago
CVE-2026-41472-POC preview

CVE-2026-41472-POC

GitHubwhiteov3rflow/cve-2026-41472-poc

CyberPanel v2.4.3 XSS Chain to RCE-CVE-2026-41472

exploitationpenetration-testingvulnerability-analysis+1
1 month ago
WebPort-v1.19.1-Reflected-XSS preview

WebPort-v1.19.1-Reflected-XSS

GitHubemreovunc/webport-v1.19.1-reflected-xss

CVE-2019-12460|Reflected XSS in WebPort-v1.19.1 impacts users who open a maliciously crafted link or third-party web page.

exploitationpenetration-testingvulnerability-analysis+2
37 years ago
Vehicle-Service-Management-System-Service-List-Stored-Cross-Site-Scripting-XSS preview

Vehicle-Service-Management-System-Service-List-Stored-Cross-Site-Scripting-XSS

GitHubsanupl/vehicle-service-management-system-service-list-stored-cross-site-scripting-xss

CVE-2021-46072 - A Stored Cross Site Scripting (XSS) vulnerability exists in Vehicle Service Management System 1.0 via the Service List Section in…

exploitationpenetration-testingvulnerability-analysis+3
13 months ago
aem-xss preview

aem-xss

GitHubcappricio-securities/aem-xss

Adobe Experience Manager Childlist Selector - Cross-Site Scripting

penetration-testingweb-application-exploitationweb-vulnerability-scanners
12 years ago
Vehicle-Service-Management-System-Settings-Stored-Cross-Site-Scripting-XSS preview

Vehicle-Service-Management-System-Settings-Stored-Cross-Site-Scripting-XSS

GitHubsanupl/vehicle-service-management-system-settings-stored-cross-site-scripting-xss

CVE-2021-46074 - A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Vehicle Service Management System 1.0 via the Settings…

exploitationpenetration-testingvulnerability-analysis+2
3 months ago
Vehicle-Service-Management-System-Mechanic-List-Stored-Cross-Site-Scripting-XSS preview

Vehicle-Service-Management-System-Mechanic-List-Stored-Cross-Site-Scripting-XSS

GitHubsanupl/vehicle-service-management-system-mechanic-list-stored-cross-site-scripting-xss

CVE-2021-46069 - A Stored Cross Site Scripting (XSS) vulnerability exists in Vehicle Service Management System 1.0 via the Mechanic List Section in…

exploitationpenetration-testingvulnerability-analysis+3
3 months ago
cve-2025-29927 preview

cve-2025-29927

GitHubbalajih4kr/cve-2025-29927

CVE-2025-29927 is a critical vulnerability in Next.js, a popular React-based web framework. The flaw exists in how the middleware feature handles…

exploitationmisconfigurationvulnerability-analysis+2
1 year ago
CVE-2026-60137-With-Skip-SSL preview

CVE-2026-60137-With-Skip-SSL

GitHubnorthsia/cve-2026-60137-with-skip-ssl

Adding --insecure to skip ssl

exploitationvulnerability-analysisweb-application-exploitation+1
28 days ago
SQLi_Sleeps preview

SQLi_Sleeps

GitHubhernanrodriguez1/sqli_sleeps
penetration-testingweb-application-exploitationweb-security+1
1270 years ago
PoC preview

PoC

GitHubnickstadb/poc

Repo for proof of concept exploits and tools.

exploitationpenetration-testingvulnerability-analysis+1
545 years ago
SqlMap_BurpSuite preview

SqlMap_BurpSuite

GitHubjas502n/sqlmap_burpsuite

SqlMap_BurpSuite

database-securitypenetration-testingweb-application-exploitation+2
507 years ago
JDSer-ngng preview

JDSer-ngng

GitHubnccgroup/jdser-ngng

A Burp Extender plugin, that will deserialized java objects and encode them in XML using the Xtream library.

penetration-testingvulnerability-analysisweb-application-exploitation+1
2611 years ago
Previous12…12Next