Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
1741 results
Massive-Web-Application-Penetration-Testing-Bug-Bounty-Notes preview

Massive-Web-Application-Penetration-Testing-Bug-Bounty-Notes

GitHubxalgord/massive-web-application-penetration-testing-bug-bounty-notes

A comprehensive guide for web application penetration testing and bug bounty hunting, covering methodologies, tools, and resources for identifying…

curated-resourceseducationlearning-paths-courses+3
2.0k
1 year ago
TIDoS-Framework preview

TIDoS-Framework

GitHub0xinfection/tidos-framework

The Offensive Manual Web Application Penetration Testing Framework.

exploitationfuzzinginformation-gathering+7
1.9k5 years ago
goWAPT preview

goWAPT

GitHubdzonerzy/gowapt

Go Web Application Penetration Test

fuzzingpenetration-testingscripting-automation+4
3442 years ago
Web-App-PenTesting preview

Web-App-PenTesting

GitHubsarthak4126/web-app-pentesting

Web application penetration testing lab — vulnerable Flask app, automated scanner, and professional pentest report. Covers OWASP Top 10, SQLi, XSS,…

educationlabs-practicepenetration-testing+4
31 month ago
MegaQuagga_Pentesting_Report preview

MegaQuagga_Pentesting_Report

GitHubaktia1/megaquagga_pentesting_report

Web application penetration testing project targeting a WordPress environment. Includes exploitation of CVE-2019-9978, reverse shell execution,…

educationexploitationpenetration-testing+5
6 months ago
burp-alfresco-referer-proxy-cve-2014-9301 preview

burp-alfresco-referer-proxy-cve-2014-9301

GitHubottimo/burp-alfresco-referer-proxy-cve-2014-9301

Burp Suite extension exploiting CVE-2014-9301 in Alfresco Referer Proxy for targeted web application penetration testing.

exploitationpenetration-testingvulnerability-analysis+2
9 years ago
xss-payload-list preview

xss-payload-list

GitHubproviesec/xss-payload-list

Curated collection of cross-site scripting payloads, polyglots, and injection test rules for web application penetration testing and bug bounty…

curated-resourceseducationpayload-development+4
14011 days ago
WebGoat preview

WebGoat

GitHubwebgoat/webgoat

Deliberately vulnerable web application with interactive lessons and challenges for learning web application security and penetration testing…

ctfeducationlabs-practice+4
9.4k14 days ago
apache__jspwiki_CVE-2019-10077_2-11-0-M3 preview

apache__jspwiki_CVE-2019-10077_2-11-0-M3

GitHubshoucheng3/apache__jspwiki_cve-2019-10077_2-11-0-m3

Exploit module for Apache JSPWiki CVE-2019-10077, targeting a Java-based wiki platform with JAAS authentication and access control. Enables…

authentication-authorizationconfiguration-auditingexploitation+3
1 year ago
CVE-2021-45428-Defacer preview

CVE-2021-45428-Defacer

GitHubprojectforsix/cve-2021-45428-defacer

Python-based exploit for CVE-2021-45428, targeting a specific web application vulnerability for penetration testing and security assessment.

exploitationpayload-generationpenetration-testing+2
2 years ago
WAFNinja preview

WAFNinja

GitHubkhalilbijjou/wafninja

WAFNinja is a tool which contains two functions to attack Web Application Firewalls.

fuzzingpenetration-testingwaf-bypass+1
8332 months ago
adapt preview

adapt

GitHubsecdec/adapt

ADAPT is a tool that performs automated Penetration Testing for WebApps.

penetration-testingvulnerability-scannersweb-security
1957 years ago
CVE-2022-46169 preview

CVE-2022-46169

GitHubimjdl/cve-2022-46169

Python exploit script for CVE-2022-46169 targeting a specific web application vulnerability. Designed for penetration testers to verify and…

exploitationpenetration-testingreconnaissance+2
3 years ago
cve-2019-3396 preview

cve-2019-3396

GitHubtno01/cve-2019-3396

Exploit for CVE-2019-3396 targeting a web application vulnerability. Designed for penetration testing and security assessment of affected systems.

exploitationpenetration-testingvulnerability-analysis+1
1 year ago
CVE-2014-6287 preview

CVE-2014-6287

GitHubjagg3rsec/cve-2014-6287

Exploit implementation for CVE-2014-6287, targeting a remote code execution vulnerability in a web application. Provides a proof-of-concept for…

exploitationpenetration-testingremote-access-tool+2
9 months ago
Modified-CVE-2019-15107 preview

Modified-CVE-2019-15107

GitHubcdedmondson/modified-cve-2019-15107

Modified exploit for CVE-2019-15107 with a Perl reverse shell payload. Designed for penetration testing of the targeted web application vulnerability.

exploitationpayload-generationpenetration-testing+2
5 years ago
FuzzingTool preview

FuzzingTool

GitHubnescau-ufla/fuzzingtool

Software for fuzzing, used on web application pentestings.

fuzzingpenetration-testingvulnerability-scanners+1
1794 years ago
CVE-2022-29469 preview

CVE-2022-29469

GitHubs4muraimelayu1337/cve-2022-29469

Exploit script for CVE-2022-29469, a web application vulnerability, providing automated exploitation for penetration testing and security assessment.

exploitationpenetration-testingreconnaissance+2
12 years ago
Previous12…97Next