Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
22 results
pcc preview

pcc

GitHubsektioneins/pcc

Automated PHP configuration auditor that scans php.ini for security misconfigurations, supports CLI and web modes, and outputs results in text, HTML,…

code-analysisconfiguration-auditingvulnerability-scanners
8188 months ago
suhosin preview

suhosin

GitHubsektioneins/suhosin

SUHOSIN [수호신] for PHP 5.x - The PHP security extension.

configuration-auditingdefensive-toolsweb-security
4653 years ago
php-eol-cve-2026-109618-109619 preview

php-eol-cve-2026-109618-109619

GitHubleonlai-tw/php-eol-cve-2026-109618-109619

Unofficial patches for PHP CVE-2026-109618 / CVE-2026-109619 (RCE, CVSS 9.2) on EOL platforms: PHP 7.3 on CentOS/RHEL 7 (Remi), PHP 5.4 on Amazon…

configuration-auditingdefensive-toolsdevsecops+4
5 days ago
php2shell-checker preview

php2shell-checker

GitHubopenai/php2shell-checker

CLI that checks a website's PHP version or a local PHP binary against embedded patch cutoffs to determine php2shell vulnerability status, with JSON…

defensive-toolsinformation-gatheringvulnerability-analysis+3
6316 days ago
CVE-2012-1823 preview

CVE-2012-1823

GitHubdrone789/cve-2012-1823

Automated exploit for CVE-2012-1823, a PHP CGI remote code execution vulnerability. Provides a quick check script for vulnerable servers.

exploitationpenetration-testingvulnerability-analysis+2
111 years ago
hosting preview

hosting

GitHubdanwin/hosting

Automated Tor-based shared web hosting server with PHP multi-version support, email routing, auto-scaling Tor instances, and built-in security…

configuration-auditingnetwork-securityprivacy+3
3706 months ago
VCG preview

VCG

GitHubnccgroup/vcg

VisualCodeGrepper - Code security scanning tool.

code-analysisconfiguration-auditingdefensive-tools+4
5553 years ago
CVE-2026-54806 preview

CVE-2026-54806

GitHubjoshuavanderpoll/cve-2026-54806

Proof-of-concept exploit for CVE-2026-54806: unauthenticated PHP object injection in WP Activity Log plugin enabling blind RCE via User-Agent header.…

educationexploitationlabs-practice+5
144 months ago
confused preview

confused

GitHubvisma-prodsec/confused

Tool to check for dependency confusion vulnerabilities in multiple package management systems

supply-chain-securityvulnerability-analysis
7923 years ago
docker-CVE-2019-11043 preview

docker-CVE-2019-11043

GitHubypereirareis/docker-cve-2019-11043

Docker image and commands to check CVE-2019-11043 vulnerability on nginx/php-fpm applications.

exploitationpenetration-testingvulnerability-analysis+3
87 years ago
NcStatusCheck preview

NcStatusCheck

GitLabjp.louvel/ncstatuscheck

Monitoring centralisé pour instances Nextcloud multiples

cloud-securityconfiguration-auditingvulnerability-analysis
34 days ago
CVE-2020-0688 preview

CVE-2020-0688

GitHubbailongwang1/cve-2020-0688

PHP CLI script that scans single hosts or IP ranges to detect Exchange servers vulnerable to CVE-2020-0688 by checking installed cumulative updates.

email-securityexploitationinformation-gathering+3
6 years ago
cve-2024-4577 preview

cve-2024-4577

GitHubaavamin/cve-2024-4577

CVE-2024-4577

command-and-controlexploitationpenetration-testing+2
62 years ago
Joomla-3.10.12-languagehelper-hotfix preview
Archived

Joomla-3.10.12-languagehelper-hotfix

GitHubtlwebdesign/joomla-3.10.12-languagehelper-hotfix

Plugin to fix security vulnerability CVE-2023-40626 in Joomla 3.10.12

code-analysisconfiguration-auditingeducation+3
82 years ago
php2shell-eol-backport preview

php2shell-eol-backport

GitHubalvm/php2shell-eol-backport

Unofficial fix for CVE-2026-109618 / CVE-2026-109619 (php2shell) for the end-of-life PHP 5.4 / 5.3 packages of RHEL, CentOS and Oracle Linux 7 / 6

configuration-auditingdefensive-toolsdevsecops+3
4 days ago
checkmk_php2shell preview

checkmk_php2shell

GitLabcheckmk1/checkmk_php2shell

Checkmk extension with an agent plug-in that inventories PHP binaries and Apache mod_php on Linux hosts and reports PHP2Shell…

configuration-auditingdefensive-toolsincident-response+3
6h 51m ago
php2shell-checker preview

php2shell-checker

GitLabtoxy4ny/php2shell-checker

Read-only PHP2Shell package checker for Debian 12/13 (CVE-2026-109618, CVE-2026-109619).

configuration-auditingdefensive-toolsincident-response+4
5 days ago
wordpress-cve-scanner preview

wordpress-cve-scanner

GitLabvaltersit/wordpress-cve-scanner

Scan your WordPress core, themes and plugins for known CVEs from the command line. Open source, auditable, privacy-first — powered by the ValtersIT…

configuration-auditingdevsecopsvulnerability-analysis+3
29 days ago
Previous12Next