Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
1170 results
nginx-ultimate-bad-bot-blocker preview

nginx-ultimate-bad-bot-blocker

GitHubmitchellkrogza/nginx-ultimate-bad-bot-blocker

Nginx Block Bad Bots, Spam Referrer Blocker, Vulnerability Scanners, User-Agents, Malware, Adware, Ransomware, Malicious Sites, with anti-DDOS,…

anti-botdefensive-toolsnetwork-security+1
4.8k
13h 27m ago
wp2shell preview

wp2shell

GitHubcrypto-cat/wp2shell

PoC for CVE-2026-63030 + CVE-2026-60137, AKA WP2Shell

code-analysiseducationexploitation+2
31 month ago
CVE-2024-13513.py preview

CVE-2024-13513.py

GitHub0axz-tools/cve-2024-13513.py

Automated scanner and exploiter for CVE-2024-13513 in Oliver POS WordPress plugin, checking vulnerable installations and changing password-reset…

exploitationinformation-gatheringpenetration-testing+3
10 months ago
wpbullet preview

wpbullet

GitHubwebarx-security/wpbullet

A static code analysis for WordPress (and PHP)

code-analysisstatic-code-analysisvulnerability-analysis+1
2407 years ago
PenBox preview

PenBox

GitHubx3omdax/penbox

PenBox - A Penetration Testing Framework - The Tool With All The Tools , The Hacker's Repo

exploitationfuzzinginformation-gathering+8
5369 years ago
CVE-2024-51793 preview

CVE-2024-51793

GitHub0axz-tools/cve-2024-51793

Exploits CVE-2024-51793 unauthenticated arbitrary file upload in WordPress Computer Repair Shop plugin, scans target lists, uploads PHP webshells,…

exploitationpayload-developmentpenetration-testing+3
10 months ago
CVE-2022-21661 preview

CVE-2022-21661

GitHubguestzz/cve-2022-21661

Exploit for CVE-2022-21661 targeting Elementor WordPress plugin, enabling SQL injection-based privilege escalation and data extraction.

exploitationpenetration-testingvulnerability-analysis+2
74 years ago
CVE-2024-1512 preview

CVE-2024-1512

GitHubrat-c/cve-2024-1512

PoC for CVE-2024-1512 in MasterStudy LMS WordPress Plugin.

code-analysisexploitationpenetration-testing+3
22 years ago
CVE-2023-6567-poc preview

CVE-2023-6567-poc

GitHubmimiloveexe/cve-2023-6567-poc

Proof-of-concept exploit for a time-based blind SQL injection in the LearnPress WordPress plugin, allowing unauthenticated attackers to extract…

exploitationpenetration-testingvulnerability-analysis+2
2 years ago
CVE_2026_2576_PoC preview

CVE_2026_2576_PoC

GitHubsowatkheang/cve_2026_2576_poc

CVE-2026-2576 — Business Directory Plugin SQLi PoC (Local Setup). Unauthenticated Time-Based Blind SQL Injection Business Directory Plugin for…

educationexploitationlabs-practice+3
25 months ago
CVE-2026-18366 preview

CVE-2026-18366

GitHubghostpels/cve-2026-18366

Unauthenticated privilege-escalation PoC for WordPress Events Manager < 7.4.1; discovers colliding post/user IDs and escalates targets to…

exploitationinformation-gatheringprivilege-escalation+2
13 days ago
wphunter preview

wphunter

GitHubjakson2030/wphunter

WPHunter A Wordpress Vulnerability Scanner

information-gatheringvulnerability-scannersweb-security
1678 years ago
CVE-2025-0924-different preview

CVE-2025-0924-different

GitHubskrkcb2/cve-2025-0924-different

Technical analysis of CVE-2025-0924, a Stored XSS vulnerability in WP Activity Log plugin for WordPress. Includes root cause analysis, exploitation…

educationexploitationpapers-research+2
1 year ago
CVE-2024-50491 preview

CVE-2024-50491

GitHubrandomrobbiebf/cve-2024-50491

RSVP ME <= 1.9.9 - Unauthenticated SQL Injection

exploitationinformation-gatheringpenetration-testing+2
1 year ago
CVE-2025-7431 preview

CVE-2025-7431

GitHubnagisayumaa/cve-2025-7431

CVE-2025-7431

educationexploitationpenetration-testing+3
1 year ago
WP-GDPR-Compliance-Plugin-Exploit preview

WP-GDPR-Compliance-Plugin-Exploit

GitHubaeroot/wp-gdpr-compliance-plugin-exploit

Exploit of the privilege escalation vulnerability of the WordPress plugin "WP GDPR Compliance" by "Van Ons"…

exploitationpayload-generationpenetration-testing+3
47 years ago
CVE-2023-2982 preview

CVE-2023-2982

GitHubrandomrobbiebf/cve-2023-2982

WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.6.4 - Authentication Bypass

authenticationexploitationinformation-gathering+3
813 years ago
nex-forms_SQL-Injection-CVE-2023-2114 preview

nex-forms_SQL-Injection-CVE-2023-2114

GitHubschmidalex/nex-forms_sql-injection-cve-2023-2114

Quick Review about the SQL-Injection in the NEX-Forms Plugin for WordPress

exploitationpenetration-testingvulnerability-analysis+2
23 years ago
Previous12…65Next