Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
88 results
CVE-2021-43650 preview

CVE-2021-43650

GitHubopenxp-research/cve-2021-43650

Webrun <= 3.6.0.42 SQLi

database-securityexploitationpenetration-testing+3
2 years ago
reversemap preview

reversemap

GitHubz00nx/reversemap

Analyse SQL injection attempts in web server logs

log-analysisvulnerability-analysisweb-security
829 years ago
testenv preview

testenv

GitHubsqlmapproject/testenv

A collection of web pages vulnerable to SQL injection flaws

database-securityeducationlabs-practice+3
3544 years ago
CVE-2023-25157 preview

CVE-2023-25157

GitHubivanesk315/cve-2023-25157

Local GeoServer/PostGIS lab reproducing OGC Filter SQL injection (CVE-2023-25157/25158) with vulnerable, patched, and mitigated A/B test modes.

database-securityeducationexploitation+6
25 days ago
CVE-2021-24750 preview

CVE-2021-24750

GitHubfimtow/cve-2021-24750

Demonstration of the WP Visitor Statistics plugin exploit

exploitationpenetration-testingvulnerability-analysis+2
14 years ago
CVE-2026-37068 preview

CVE-2026-37068

GitHubjfs-jfs/cve-2026-37068

Proof-of-concept exploit for CVE-2026-37068: arbitrary file write in Veno File Manager 4.4.9 via authenticated POST request to /vfm-admin/index.php.

exploitationpenetration-testingvulnerability-analysis+2
3 months ago
CVE-2023-44813 preview

CVE-2023-44813

GitHubahrixia/cve-2023-44813

mooSocial v3.1.8 is vulnerable to cross-site scripting on Invite Friend function.

exploitationpenetration-testingvulnerability-analysis+2
2 years ago
CVE-2025-59057-PoC preview

CVE-2025-59057-PoC

GitHubboroeurnprach/cve-2025-59057-poc

A XSS vulnerability exists in in React Router's meta()/<Meta> APIs in Framework Mode when generating script:ld+json tags which could allow arbitrary…

exploitationpenetration-testingvulnerability-analysis+2
8 months ago
CVE-2024-27914 preview

CVE-2024-27914

GitHubshellkraft/cve-2024-27914

Reflected XSS exploit PoC for GLPI (CVE-2024-27914) targeting unauthenticated debug mode. Provides a malicious link to trigger XSS in administrator's…

exploitationpenetration-testingvulnerability-analysis+2
2 years ago
CRLFsuite preview

CRLFsuite

GitHubraghavd3v/crlfsuite

The most powerful CRLF injection (HTTP Response Splitting) scanner.

penetration-testingvulnerability-scannerswaf-bypass+2
6002 years ago
burp-ai-agent preview

burp-ai-agent

GitHubsix2dez/burp-ai-agent

Burp Suite extension that adds built-in MCP tooling, AI-assisted analysis, privacy controls, passive and active scanning and more

ai-securityapi-security-testingexploit-frameworks+4
1.5k1 month ago
Web-App-PenTesting preview

Web-App-PenTesting

GitHubsarthak4126/web-app-pentesting

Web application penetration testing lab — vulnerable Flask app, automated scanner, and professional pentest report. Covers OWASP Top 10, SQLi, XSS,…

educationlabs-practicepenetration-testing+4
213 days ago
cai preview

cai

GitHubaliasrobotics/cai

Cybersecurity AI (CAI), the framework for AI Security

ai-securityctfeducation+8
9.8k1 month ago
BoxPwnr preview

BoxPwnr

GitHub0ca/boxpwnr

A modular framework for benchmarking LLMs and agentic strategies on security challenges across HackTheBox, TryHackMe, PortSwigger Labs, Cybench,…

ai-securityctfeducation+8
4582 months ago
offensive-docker preview

offensive-docker

GitHubaaaguirrep/offensive-docker

Offensive Docker is an image with the more used offensive tools to create an environment easily and quickly to launch assessment to the targets.

container-securityexploit-frameworkspassword-cracking+5
7714 years ago
forbidden preview

forbidden

GitHubivan-sincek/forbidden

Bypass 4xx HTTP response status codes and more. The tool is based on Python Requests, PycURL, and HTTP Client.

fuzzingids-ips-evasioninformation-gathering+5
2571 year ago
CVE-2026-15989 preview

CVE-2026-15989

GitHubfl0ydsec/cve-2026-15989

Mass scanner and exploit for CVE-2026-15989, the unauthenticated privilege escalation in Super Forms <= 6.3.316 that creates administrator accounts…

exploitationpayload-generationpenetration-testing+6
2 days ago
CVE-2022-22965-Spring4Shell-Security-Operations-Analysis preview

CVE-2022-22965-Spring4Shell-Security-Operations-Analysis

GitHubshakur1314/cve-2022-22965-spring4shell-security-operations-analysis

A comprehensive Security Operations Centre (SOC) incident response simulation demonstrating threat detection, triage, analysis, and mitigation of the…

educationincident-responselog-analysis+3
7 months ago
Previous12345Next