Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
99 results
CVE-2021-31589 preview

CVE-2021-31589

GitHubkarthi-the-hacker/cve-2021-31589

CVE-2021-31589 is a powerful scanner for bug bounty hunters and penetration testers to discover vulnerabilities in their web applications.

information-gatheringpenetration-testingreconnaissance+3
1
3 years ago
CVE-2024-24919 preview

CVE-2024-24919

GitHub0xans/cve-2024-24919
exploitationinformation-gatheringpenetration-testing+2
12 years ago
CVE-2024-57378 preview

CVE-2024-57378

GitHubrxerium/cve-2024-57378

Detection for CVE-2024-57378

exploitationinformation-gatheringpenetration-testing+3
10 months ago
PHPCGIScanner preview

PHPCGIScanner

GitHubinfosec-db/phpcgiscanner

A PHP CGI Vulnerability Scanner for CVE-2024-4577

information-gatheringpenetration-testingreconnaissance+3
0 years ago
CVE-2020-3452 preview

CVE-2020-3452

GitHubcappricio-securities/cve-2020-3452

Cisco Adaptive Security Appliance (ASA)/Firepower Threat Defense (FTD) - Local File Inclusion

exploitationinformation-gatheringreconnaissance+3
12 years ago
behat-config-leaks preview

behat-config-leaks

GitHubcappricio-securities/behat-config-leaks

BeHat Configuration file leaking

information-gatheringmisconfigurationsecret-detection+3
12 years ago
fortra-goanywhere-mft-vulnerability-detection preview

fortra-goanywhere-mft-vulnerability-detection

GitHubrxerium/fortra-goanywhere-mft-vulnerability-detection

Vulnerability detection scripts for the Goanywhere MFT product.

information-gatheringpenetration-testingthreat-intelligence+3
8 months ago
appspec-yaml-leaks preview

appspec-yaml-leaks

GitHubcappricio-securities/appspec-yaml-leaks

Appspec YML and YAML leaks

api-securitycloud-securityinformation-gathering+4
12 years ago
phpinfo-files-leaks preview

phpinfo-files-leaks

GitHubcappricio-securities/phpinfo-files-leaks

This tool is used to find php info page

information-gatheringmisconfigurationpenetration-testing+4
12 years ago
CVE-2024-0235 preview

CVE-2024-0235

GitHubcappricio-securities/cve-2024-0235

EventON (Free < 2.2.8, Premium < 4.5.5) - Information Disclosure

information-gatheringpenetration-testingreconnaissance+3
2 years ago
sound4-directory-listing preview

sound4-directory-listing

GitHubcappricio-securities/sound4-directory-listing

SOUND4 Impact/Pulse/First/Eco <=2.x - Information Disclosure

information-gatheringvulnerability-scannersweb-security+1
2 years ago
cgi-printenv preview

cgi-printenv

GitHubcappricio-securities/cgi-printenv

CGI Print ENV leaking

information-gatheringmisconfigurationpenetration-testing+3
2 years ago
CVE-2025-47812 preview

CVE-2025-47812

GitHubrxerium/cve-2025-47812

Detection for CVE-2025-47812

exploitationinformation-gatheringpenetration-testing+3
10 months ago
CVE-2023-3971 preview

CVE-2023-3971

GitHubashangp923/cve-2023-3971

To find HTML injection and XSS

information-gatheringpenetration-testingvulnerability-analysis+2
2 years ago
cve-2026-15748 preview

cve-2026-15748

GitHubyora1928/cve-2026-15748

Scans WordPress Forminator for CVE-2026-15748 unauthenticated RCE. Detects vulnerable sites, crawls forms, extracts nonces, runs safe upload tests.

crawlerexploitationinformation-gathering+4
22 days ago
CVE-2026-18366 preview

CVE-2026-18366

GitHubnxploited/cve-2026-18366

Events Manager < 7.4.1 - Unauthenticated Privilege Escalation to Administrator

exploitationinformation-gatheringpost-exploitation+3
4 days ago
xss2shell-check preview

xss2shell-check

GitHubsanaullahamanullah/xss2shell-check

Non-destructive detector for CVE-2026-64638 (XSS2Shell) — WordPress pre-auth XSS reflection primitive

defensive-toolsinformation-gatheringpenetration-testing+4
4 days ago
Livewire2025CVE preview

Livewire2025CVE

GitHube4zyy/livewire2025cve

Fast Python scanner detects vulnerable Laravel Livewire v3 sites (CVE-2025-54068, CVSS 9.2). Separates risky sites into vuln.txt, safe sites into…

information-gatheringvulnerability-analysisvulnerability-scanners+2
37 months ago
Previous123456Next