Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
173 results
CVE-2022-23342 preview

CVE-2022-23342

GitHubinitroot/cve-2022-23342

Proof-of-concept for Active Directory username enumeration vulnerability in Hyland OnBase via login endpoint response differences, enabling…

authenticationinformation-gatheringreconnaissance+2
3
4 years ago
cve-2018-15473 preview

cve-2018-15473

GitHubwtbacon/cve-2018-15473

Remote OpenSSH username enumeration exploit for CVE-2018-15473, featuring malformed packet and timing attack scripts with multi-threaded scanning.

exploitationinformation-gatheringnetwork-security+3
5 months ago
CVE-2018-15473 preview

CVE-2018-15473

GitHubkaktus5454/cve-2018-15473

SSH username enumeration exploit for CVE-2018-15473 (OpenSSH 2.3-7.7). Sends malformed authentication packets to identify valid users on vulnerable…

exploitationinformation-gatheringpenetration-testing+3
5 months ago
CVE-2023-30458 preview

CVE-2023-30458

GitHubd34dun1c02n/cve-2023-30458

Username enumeration exploit for Medicine Tracker System 1.0 leveraging response timing discrepancies in the login functionality to identify valid…

exploitationinformation-gatheringpenetration-testing+2
3 years ago
smb-usermap preview

smb-usermap

GitHubh3x0v3rl0rd/smb-usermap

Python exploit for Samba 3.0.20-3.0.25rc3 'username map script' command injection, providing unauthenticated remote code execution and reverse shell.

exploitationpenetration-testingremote-access-tool
4 years ago
CVE-2007-2447 preview

CVE-2007-2447

GitHub0xkn/cve-2007-2447

Python exploit for Samba CVE-2007-2447 username map script remote command execution, delivering a reverse shell payload to a configurable remote…

command-and-controlexploitationpenetration-testing+3
5 years ago
CVE-2023-3897 preview

CVE-2023-3897

GitHubjfriedli/cve-2023-3897

Exploit for CVE-2023-3897 enabling username enumeration via CAPTCHA bypass in On-premise SureMDM on Windows. Includes PoC script for local user…

captcha-bypassexploitationinformation-gathering+3
2 years ago
CVE-2007-2447_Samba_3.0.25rc3 preview

CVE-2007-2447_Samba_3.0.25rc3

GitHubwildfootw/cve-2007-2447_samba_3.0.25rc3

Exploit for Samba 3.0.0-3.0.25rc3 'Username' map script command execution vulnerability (CVE-2007-2447), enabling remote code execution.

command-and-controlexploitationpenetration-testing+2
5 years ago
CVE-2018-15473 preview

CVE-2018-15473

GitHub1stpeak/cve-2018-15473

Proof-of-concept SSH username enumeration exploit for OpenSSH CVE-2018-15473. Supports threading, wordlists, IPv6, and detection of valid accounts on…

exploitationinformation-gatheringnetwork-security+3
5 years ago
maigret preview

maigret

GitHubsoxoj/maigret

🕵️‍♂️ Collect a dossier on a person by username from 3000+ sites

crawlerdns-subdomain-enumerationemail-harvesting+8
37.7k4h 5m ago
BridgeKeeper preview

BridgeKeeper

GitHub0xzdh/bridgekeeper

Scrape, Hunt, and Transform names and usernames

crawleremail-harvestinginformation-gathering+2
1313 years ago
Stalker preview

Stalker

GitLabpxmme/stalker

OSINT tool for automated scanning of social networks and other websites, using a single nickname.

information-gatheringosintreconnaissance+1
76 years ago
nexfil preview

nexfil

GitHubthewhiteh4t/nexfil

OSINT tool for finding profiles by username

information-gatheringosintreconnaissance+1
2.6k2 years ago
Osint-Sync preview

Osint-Sync

GitHubmixaoc/osint-sync

Browser extension for OSINT research enabling username, email, and phone number searches across 20+ platforms with integrated access to GHunt,…

email-harvestinginformation-gatheringosint+5
619 months ago
CVE-2018-15473 preview

CVE-2018-15473

GitHub0xrobiul/cve-2018-15473

Python-based exploit for CVE-2018-15473 enabling OpenSSH username enumeration via authentication response oracle, with single-user and wordlist modes.

exploitationinformation-gatheringnetwork-security+3
14 years ago
CVE-2007-2447 preview

CVE-2007-2447

GitHubfoudadev/cve-2007-2447

Educational exploit implementation for CVE-2007-2447 Samba 3.0.20-3.0.25rc username map script command execution vulnerability with Python SMB client…

binary-exploitationcommand-and-controleducation+6
2 years ago
Snoop preview

Snoop

GitHubankhcorp/snoop

OSINT Tool for research social media accounts by username

information-gatheringosintreconnaissance+1
724 months ago
OracleOTM preview

OracleOTM

GitHubofirhamam/oracleotm

Python tool for exploiting CVE-2021-35616

database-securityexploitationinformation-gathering+3
114 years ago
Previous123…10Next