Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
213 results
bifrost preview

bifrost

GitHubbifrost-proxy/bifrost

High-performance HTTP/HTTPS/SOCKS5 MITM proxy in Rust with TLS interception, rule-based request rewriting, traffic capture, breakpoints, script…

api-security-testingnetwork-securitypacket-sniffing-analysis+6
161
11h 12m ago
CVE-2021-20717 preview

CVE-2021-20717

GitHubs-index/cve-2021-20717

CVE-2021-20717-EC-CUBE-XSS

educationexploitationpenetration-testing+3
15 years ago
CookieCatcher preview

CookieCatcher

GitHubdisk0nn3ct/cookiecatcher

CookieCatcher

educationexploitationphishing-tools+1
14613 years ago
CVE-2525-25748-Cross-Site-Request-Forgery-CSRF-Vulnerability-in-HotelDruid-3.0.7 preview

CVE-2525-25748-Cross-Site-Request-Forgery-CSRF-Vulnerability-in-HotelDruid-3.0.7

GitHubhuyvo2910/cve-2525-25748-cross-site-request-forgery-csrf-vulnerability-in-hoteldruid-3.0.7

Detailed CVE-2025-25748 proof-of-concept and analysis of a CSRF vulnerability in HotelDruid 3.0.7, including exploitation flow, impact assessment,…

educationpapers-researchpenetration-testing+3
1 year ago
CredSniper preview

CredSniper

GitHubustayready/credsniper

CredSniper is a phishing framework written with the Python micro-framework Flask and Jinja2 templating which supports capturing 2FA tokens.

authenticationimpersonation-toolsphishing+3
1.4k6 years ago
hacker-profile preview

hacker-profile

GitLabnoraj/hacker-profile

Personal hacker profile page showcasing CTF achievements, cybersecurity projects, and curated resources. Built with Middleman and Gulp for static…

ctfcurated-resourceseducation
124 days ago
CVE-2022-24181 preview

CVE-2022-24181

GitHubcyberhawk000/cve-2022-24181

XSS via Host Header injection and Steal Password Reset Token of another user

information-gatheringpenetration-testingreconnaissance+2
2 years ago
CVE-2025-69606-GSVoIP-XSS preview

CVE-2025-69606-GSVoIP-XSS

GitHubrazielx64/cve-2025-69606-gsvoip-xss

Proof-of-concept for a reflected XSS vulnerability (CVE-2025-69606) in GSVoIP Web Panel v2.0.90, demonstrating unauthenticated arbitrary JavaScript…

educationphishingsocial-engineering+3
5 months ago
CVE-2024-51032 preview

CVE-2024-51032

GitHubshree-chandragiri/cve-2024-51032

A Cross-site Scripting (XSS) vulnerability in manage_recipient.php of Sourcecodester Toll Tax Management System 1.0 allows remote authenticated users…

educationpenetration-testingvulnerability-analysis+2
1 year ago
CVE-2026-50229 preview

CVE-2026-50229

GitHubzero-trace7/cve-2026-50229

Automated XSS scanner and proof-of-concept exploit for CVE-2026-50229 in Apache Tomcat examples. Detects and exploits reflected cross-site scripting…

educationexploitationpenetration-testing+3
18 days ago
CVE-2026-39107 preview

CVE-2026-39107

GitHubmgtx2/cve-2026-39107

Detailed disclosure of a stored XSS vulnerability in Kimi AI v1.0's Preview tab, including attack scenario, PoC, and remediation guidance for…

educationpapers-researchvulnerability-analysis+2
4 months ago
dark-fantasy-hack-tool preview

dark-fantasy-hack-tool

GitHubritvikb99/dark-fantasy-hack-tool

DDOS Tool: To take down small websites with HTTP FLOOD. Port scanner: To know the open ports of a site. FTP Password Cracker: To hack file system of…

educationemail-harvestinginformation-gathering+5
4834 years ago
CVE-2026-30252 preview

CVE-2026-30252

GitHubvenablee/cve-2026-30252

The ZenShare Suite application is vulnerable by a Reflected Cross-Site Scripting (XSS) vulnerability, affecting web application login and recovery…

educationexploitationpapers-research+2
1 month ago
CVE-2022-41445 preview

CVE-2022-41445

GitHubrashidkhanpathan/cve-2022-41445

Cross Site Scripting in Teacher's Record Management System using CodeIgnitor

educationpenetration-testingvulnerability-analysis+2
23 years ago
CVE-2025-44603-CSRF-Leads_to_Create_FakeUsers preview

CVE-2025-44603-CSRF-Leads_to_Create_FakeUsers

GitHubmoulish2004/cve-2025-44603-csrf-leads_to_create_fakeusers

Proof-of-concept demonstrating a CSRF vulnerability in a PHP-based Client Management System, with HTML exploit code and mitigation strategies for web…

educationexploitationpenetration-testing+3
1 year ago
CVE-2026-42533 preview

CVE-2026-42533

GitHubsuominen/cve-2026-42533
curated-resourceseducationexploitation+3
6 days ago
CVE-2022-43144-Stored-XSS preview

CVE-2022-43144-Stored-XSS

GitHubmudassiruddin/cve-2022-43144-stored-xss

PoC to exploit CVE-2022-43144

educationexploitationpenetration-testing+3
43 years ago
CVE-2024-46538 preview

CVE-2024-46538

GitHublauleysen/cve-2024-46538

based on [EQSTLab](https://github.com/EQSTLab)

educationexploitationlabs-practice+3
41 year ago
Previous12…12Next