Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
2485 results
How-To-Secure-A-Linux-Server preview

How-To-Secure-A-Linux-Server

GitHubimthenachoman/how-to-secure-a-linux-server

Step-by-step guide for hardening a Linux server, covering SSH security, firewalls, intrusion detection, auditing, and system configuration to reduce…

authenticationconfiguration-auditingcurated-resources+7
31.4k
6 days ago
sops preview

sops

GitHubgetsops/sops

Simple and flexible tool for managing secrets

cloud-securityconfiguration-auditingcryptography+6
23.1k6 days ago
CVE-2022-4140 preview

CVE-2022-4140

GitHubanirbala98/cve-2022-4140

WordPress plugin Welcart e-Commerce < 2.8.5 - Arbitrary File Read

exploitationpenetration-testingvulnerability-analysis+2
6 days ago
CVE-2026-36392 preview

CVE-2026-36392

GitHubmoksh-nfsu/cve-2026-36392

Proof-of-concept for stored XSS in RISE CRM item title field (CVE-2026-36392), demonstrating session hijacking and account takeover with remediation…

exploitationpenetration-testingvulnerability-analysis+2
6 days ago
preflight preview

preflight

GitHubpreflightsh/preflight

Go-based CLI tool that scans codebases for launch readiness, detecting missing configuration, security hygiene issues, secret leaks, and integration…

code-analysisconfiguration-auditingdevsecops+8
596 days ago
DVWA preview

DVWA

GitHubdigininja/dvwa

Intentionally vulnerable PHP/MariaDB web application for practicing common web security vulnerabilities across multiple difficulty levels in a legal,…

educationlabs-practicepenetration-testing+2
13.7k6 days ago
cloudsploit preview

cloudsploit

GitHubaquasecurity/cloudsploit

Multi-cloud security posture scanner that audits AWS, Azure, GCP, and OCI for misconfigurations, compliance violations (HIPAA, PCI, CIS), and…

cloud-securityconfiguration-auditingvulnerability-scanners
3.8k7 days ago
CVE-2026-81780-Hash-Form preview

CVE-2026-81780-Hash-Form

GitHub0xterror/cve-2026-81780-hash-form

Exploit for CVE-2026-81780: unauthenticated file upload in WordPress Hash Form plugin leading to remote code execution via crafted PHP payloads.

exploitationpenetration-testingvulnerability-analysis+2
7 days ago
Sitadel preview

Sitadel

GitHubshenril/sitadel

Web Application Security Scanner

information-gatheringpenetration-testingvulnerability-scanners+3
6117 days ago
React2Shell-CVE-2025-55182-Exploit preview

React2Shell-CVE-2025-55182-Exploit

GitHubbluex707/react2shell-cve-2025-55182-exploit

Exploit for CVE-2025-55182, a React2Shell vulnerability, providing proof-of-concept code to demonstrate remote code execution.

exploitationvulnerability-analysisweb-application-exploitation
7 days ago
amasty-chekout-POC-rce preview

amasty-chekout-POC-rce

GitHubchrissec2014/amasty-chekout-poc-rce

my poc for CVE-2026-53787

exploitationpenetration-testingweb-application-exploitation+1
7 days ago
sbomlyze preview

sbomlyze

GitHubrezmoss/sbomlyze

Git diff for SBOMs—compare CycloneDX, SPDX, and Syft documents, detect tampering, and gate CI.

configuration-auditingdevsecopssecret-detection+5
248 days ago
CVE-2026-1529-Keycloak-Exploit-Tool preview

CVE-2026-1529-Keycloak-Exploit-Tool

GitHub0xlyvio/cve-2026-1529-keycloak-exploit-tool

Keycloak: Unauthorized organization registration via improper invitation token validation

authenticationexploitationpenetration-testing+2
18 days ago
CVE-2026-18963-keycloak preview

CVE-2026-18963-keycloak

GitHub0xlyvio/cve-2026-18963-keycloak

Proof-of-concept exploit for CVE-2026-18963, a Keycloak reset-credentials bypass leading to account takeover. Demonstrates the vulnerability and…

authenticationexploitationpenetration-testing+2
18 days ago
BTPS-SecPack preview

BTPS-SecPack

GitHubosbornepro/btps-secpack

PowerShell-based security toolkit for small-to-medium enterprises, providing automated alerts, Active Directory hardening, Windows Event Forwarding,…

configuration-auditingdefensive-toolseducation+3
528 days ago
CVE-2026-52774-YESWIKI-XSS preview

CVE-2026-52774-YESWIKI-XSS

GitHub0xterror/cve-2026-52774-yeswiki-xss

a reflected XSS vulnerability in YesWiki's Bazar widget handler.

exploitationpenetration-testingvulnerability-analysis+2
8 days ago
DLLHijackHunter preview

DLLHijackHunter

GitHubghostvectoracademy/dllhijackhunter

Automated DLL Hijacking Discovery, Validation, and Confirmation. Turning local misconfigurations into weaponized, confirmed attack paths.

binary-analysisdynamic-code-analysiseducation+8
4009 days ago
Langflow-RCE-CVE-2025-3248 preview

Langflow-RCE-CVE-2025-3248

GitHubleotheggman/langflow-rce-cve-2025-3248

Proof-of-concept exploit for CVE-2025-3248, a remote code execution vulnerability in Langflow, demonstrating exploitation of the vulnerable endpoint.

exploitationvulnerability-analysisweb-application-exploitation
9 days ago
Previous1…456…100Next