Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
79 results
CVE-2026-1208 preview

CVE-2026-1208

GitHubsnailsploit/cve-2026-1208

Friendly Functions for Welcart <= 1.2.5 - Cross-Site Request Forgery to Settings Update

educationexploitationpapers-research+3
4 months ago
Prestashop-CVE-2024-34716 preview

Prestashop-CVE-2024-34716

GitHub0xdtc/prestashop-cve-2024-34716

Automates a CSRF attack against CVE-2024-34716 to deploy a PHP reverse shell on PrestaShop, with automated payload packaging and Netcat listener…

exploitationpayload-generationpenetration-testing+3
11 year ago
Exploit-CSRF-on-SCOPIA-XT-Desktop-version-8.3.915.4 preview

Exploit-CSRF-on-SCOPIA-XT-Desktop-version-8.3.915.4

GitHubv1n1v131r4/exploit-csrf-on-scopia-xt-desktop-version-8.3.915.4

Proof of concept demonstrating Cross-Site Request Forgery (CSRF) on Avaya SCOPIA XT Desktop, allowing admin password change without anti-CSRF token.

exploitationpenetration-testingvulnerability-analysis+2
16 years ago
XSRFProbe preview

XSRFProbe

GitHub0xinfection/xsrfprobe

The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.

crawlerpenetration-testingvulnerability-scanners+1
1.3k2 months ago
CVE-2021-43617 preview

CVE-2021-43617

GitHubsybelle03/cve-2021-43617

This is a reproduction of PHP Laravel 8.70.1 - Cross Site Scripting (XSS) to Cross Site Request Forgery (CSRF) vulnerability

exploitationpenetration-testingphishing+3
13 years ago
CVE-2021-46080 preview

CVE-2021-46080

GitHubsanupl/cve-2021-46080

CVE-2021-46080 - A Cross Site Request Forgery (CSRF) vulnerability exists in Vehicle Service Management System 1.0. An successful CSRF attacks leads…

exploitationpenetration-testingvulnerability-analysis+2
14 months ago
Vehicle-Service-Management-System-Multiple-Cross-Site-Request-Forgery-CSRF-Leads-to-XSS preview

Vehicle-Service-Management-System-Multiple-Cross-Site-Request-Forgery-CSRF-Leads-to-XSS

GitHubsanupl/vehicle-service-management-system-multiple-cross-site-request-forgery-csrf-leads-to-xss

CVE-2021-46080 - A Cross Site Request Forgery (CSRF) vulnerability exists in Vehicle Service Management System 1.0. An successful CSRF attacks leads…

exploitationpenetration-testingvulnerability-analysis+2
4 months ago
CVE-2023-44811 preview

CVE-2023-44811

GitHubahrixia/cve-2023-44811

mooSocial v3.1.8 is vulnerable to Cross Site Request Forgery (CSRF) which allows attacker to change admin password.

exploitationpenetration-testingvulnerability-analysis+2
2 years ago
CVE-2025-29722 preview

CVE-2025-29722

GitHubcypherdavy/cve-2025-29722

Cross Site Request Forgery (CSRF) in Commercify v1.0

educationpenetration-testingreconnaissance+3
1 year ago
CVE-2025-31033 preview

CVE-2025-31033

GitHubnxploited/cve-2025-31033

WordPress Buddypress Humanity Plugin <= 1.2 is vulnerable to Cross Site Request Forgery (CSRF)

educationexploitationpapers-research+3
1 year ago
CVE-2026-30498 preview

CVE-2026-30498

GitHubmehdi-ben-hamou/cve-2026-30498

Educational CSRF vulnerability demonstration with a controlled lab environment, including a proof-of-concept exploit and a fixed version with proper…

educationexploitationlabs-practice+3
16 months ago
CVE-2021-46366 preview

CVE-2021-46366

GitHubmbadanoiu/cve-2021-46366

CVE-2021-46366: Credential Bruteforce Attack via CSRF + Open Redirect in Magnolia CMS

exploitationinformation-gatheringpassword-attacks+3
2 years ago
CVE-2021-31762 preview

CVE-2021-31762

GitHubelectronicbots/cve-2021-31762

Exploiting a Cross-site request forgery (CSRF) attack to creat a new privileged user through the Webmin's add users feature

exploitationpenetration-testingred-teaming+2
85 years ago
CVE-2023-34839 preview

CVE-2023-34839

GitHubsahiloj/cve-2023-34839

CVE-2023-34839 is a Cross-Site Request Forgery (CSRF) vulnerability discovered in Issabel PBX version 4.0.0-6, a widely used open-source Unified…

educationexploitationpapers-research+3
57 months ago
CVE-2021-31760 preview

CVE-2021-31760

GitHubmesh3l911/cve-2021-31760

Exploiting a Cross-site request forgery (CSRF) attack to get a Remote Command Execution (RCE) through the Webmin's running process feature

command-and-controlexploitationpenetration-testing+3
35 years ago
CVE-2025-68434-OSPOS-CSRF preview

CVE-2025-68434-OSPOS-CSRF

GitHubnixon-h/cve-2025-68434-ospos-csrf

PoC & Write-up for CVE-2025-68434: Critical CSRF in OpenSourcePOS. Exploits a disabled filter configuration to allow unauthenticated attackers to…

educationexploitationpapers-research+3
33 months ago
CVE-2021-31760 preview

CVE-2021-31760

GitHubelectronicbots/cve-2021-31760

Exploiting a Cross-site request forgery (CSRF) attack to get a Remote Command Execution (RCE) through the Webmin's running process feature

command-and-controlexploitationpenetration-testing+3
25 years ago
CVE-2025-1306 preview

CVE-2025-1306

GitHubnxploited/cve-2025-1306

Newscrunch <= 1.8.4 - Cross-Site Request Forgery to Arbitrary File Upload

educationexploitationpayload-generation+2
51 year ago
Previous12345Next