Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
230 results
padding-oracle-attacker preview

padding-oracle-attacker

GitHubkishanbagaria/padding-oracle-attacker

🔓 CLI tool and library to execute padding oracle attacks easily, with support for concurrent network requests and an elegant UI.

cryptographyencryption-decryption-toolsexploitation+1
220
4 years ago
dotnetpaddingoracle preview

dotnetpaddingoracle

GitHubnccgroup/dotnetpaddingoracle

Python Implementation of a .NET Padding Oracle Assessment Tool

cryptographyencryption-decryption-toolsexploitation+3
3110 years ago
wodat preview

wodat

GitHubinitroot/wodat

Windows Oracle Database Attack Toolkit

database-securitypassword-attackspenetration-testing+1
794 years ago
TimeException preview

TimeException

GitHubbananabr/timeexception

A tool to find folders excluded from AV real-time scanning using a time oracle

adversarial-attackinformation-gatheringpenetration-testing+2
2322 years ago
AegisJava preview

AegisJava

GitHubrashedhasan090/aegisjava

I have created AegisJava, a tool to fix (detect and mitigate) CVE-2025-30749.

code-analysisconfiguration-auditingdevsecops+3
1 month ago
cve-2017-10271 preview

cve-2017-10271

GitHubcved-sources/cve-2017-10271

Docker container for CVE-2017-10271 (Oracle WebLogic RCE) used with Cved framework to manage and deploy vulnerable environments for security testing…

container-securityexploitationpenetration-testing+3
5 years ago
odat preview

odat

GitHubquentinhardy/odat

Penetration testing tool for Oracle Databases that discovers valid SIDs, brute-forces credentials, escalates privileges to DBA, executes system…

command-and-controldatabase-securityexploitation+4
1.8k6 months ago
pax preview

pax

GitHubliamg/pax

:skull: :unlock: CLI tool for PKCS7 padding oracle attacks

cryptographyexploitationpenetration-testing+1
1455 years ago
CVE-2026-21962 preview

CVE-2026-21962

GitHub0xblackash/cve-2026-21962

CVE-2026-21962

authentication-authorizationexploitationpenetration-testing+3
25 months ago
CVE-2020-14882_Exploit_Gui preview

CVE-2020-14882_Exploit_Gui

GitHubqianniaoge/cve-2020-14882_exploit_gui

GUI-based exploit tool for CVE-2020-14882 targeting Oracle WebLogic servers. Supports reverse shell payload generation, proxy configuration, and…

exploitationpayload-generationpenetration-testing+3
5 years ago
CVE-2020-14882 preview

CVE-2020-14882

GitHubaleksazatezalo/cve-2020-14882

Exploits Oracle WebLogic Server RCE (CVE-2020-14882) to execute commands on vulnerable targets, capturing output via HTTP listener.

command-and-controlexploitationremote-access-tool+2
1 year ago
python-paddingoracle preview

python-paddingoracle

GitHubmwielgoszewski/python-paddingoracle

A portable, padding oracle exploit API

cryptographyencryption-decryption-toolsexploitation+2
3313 years ago
oracle-oam-authentication-bypas-exploit preview

oracle-oam-authentication-bypas-exploit

GitHubaymanelsherif/oracle-oam-authentication-bypas-exploit

Exploit for Oracle Access Manager padding oracle vulnerability (CVE-2018-2879)

authentication-authorizationcryptographyexploitation+3
77 years ago
CVE-2018-2628 preview

CVE-2018-2628

GitHub9uest/cve-2018-2628

Python exploit for CVE-2018-2628 targeting Oracle WebLogic Server T3 deserialization vulnerability to achieve remote code execution.

exploitationpenetration-testingremote-access-tool+2
18 years ago
keycloak preview

keycloak

GitHubmuhammedhussein17/keycloak

Security research disclosing CVE-2026-9794, an unauthenticated client ID enumeration flaw in Keycloak SAML ECP via faultstring oracle, fixed in…

authenticationidentity-managementinformation-gathering+3
4 months ago
CVE-2020-14882 preview

CVE-2020-14882

GitHubroot-shells/cve-2020-14882

CVE-2020-14882 rewritten in PowerShell

exploitationpenetration-testingremote-access-tool+2
1 year ago
CVE-2026-21962_Java_GUI_Exploit_Tool preview

CVE-2026-21962_Java_GUI_Exploit_Tool

GitHubnaozibuhao/cve-2026-21962_java_gui_exploit_tool

Java GUI tool for exploiting CVE-2026-21962, an unauthenticated RCE in Oracle WebLogic Proxy Plug-In, enabling multi-target command execution via…

command-and-controlexploitationpenetration-testing+3
26 months ago
CVE-2025-69600 preview

CVE-2025-69600

GitHubwise-security/cve-2025-69600

Demonstrates command injection vulnerabilities in RayVentory Scan Engine's rvia tool, allowing arbitrary command execution via getconfig, upload,…

command-and-controlexploitationpenetration-testing+3
5 months ago
Previous12…13Next