Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
12 results
wpscan preview

wpscan

GitHubwpscanteam/wpscan

WordPress security scanner that detects vulnerabilities, enumerates plugins/themes/users, and checks for weak passwords. Integrates with the WPScan…

crawlerdynamic-code-analysisinformation-gathering+7
9.8k
3 days ago
WPScan preview

WPScan

GitHubalessiodallapiazza/wpscan

WordPress security scanner that enumerates vulnerable plugins, themes, and users to identify misconfigurations and known vulnerabilities for…

information-gatheringpenetration-testingreconnaissance+3
3113 years ago
wpx preview

wpx

GitHubgreg-randall/wpx

Asynchronous WordPress security scanner with WAF bypass via headless browser. Enumerates plugins, themes, users, and multisite installations with…

api-security-testingcrawlerinformation-gathering+6
106 months ago
autowpscan preview

autowpscan

GitHubpassword123456/autowpscan

Automated WordPress vulnerability scanner that processes multiple sites concurrently using wpscan, analyzes results, and sends summaries via Telegram.

information-gatheringvulnerability-scannersweb-security
13 years ago
Wordpresscan preview
Archived

Wordpresscan

GitHubswisskyrepo/wordpresscan

WPScan rewritten in Python + some WPSeku ideas

information-gatheringpassword-attacksreconnaissance+3
6515 years ago
poc-cve-xss-inventory-press-plugin preview

poc-cve-xss-inventory-press-plugin

GitHub0xn4d/poc-cve-xss-inventory-press-plugin

PoC for CVE-2023-2579

exploitationpayload-developmentpenetration-testing+3
3 years ago
CVE-2024-27956 preview

CVE-2024-27956

GitHubcappricio-securities/cve-2024-27956

WordPress Automatic Plugin <= 3.92.0 - SQL Injection

information-gatheringpenetration-testingvulnerability-scanners+1
22 years ago
poc-cve-xss-encoded-wp-inventory-manager-plugin preview

poc-cve-xss-encoded-wp-inventory-manager-plugin

GitHub0xn4d/poc-cve-xss-encoded-wp-inventory-manager-plugin

PoC for CVE-2023-2123

exploitationinformation-gatheringpenetration-testing+3
23 years ago
CVE-2024-0235 preview

CVE-2024-0235

GitHubcappricio-securities/cve-2024-0235

EventON (Free < 2.2.8, Premium < 4.5.5) - Information Disclosure

information-gatheringpenetration-testingreconnaissance+3
2 years ago
CVE-2023-6063-PoC preview

CVE-2023-6063-PoC

GitHubmotikan2010/cve-2023-6063-poc

CVE-2023-6063 (WP Fastest Cache < 1.2.2 - UnAuth SQL Injection)

exploitationinformation-gatheringpenetration-testing+2
292 years ago
CVE-2023-6063 preview

CVE-2023-6063

GitHubeulex0x/cve-2023-6063

CVE-2023-6063 (WP Fastest Cache < 1.2.2 - UnAuth SQL Injection)

exploitationpenetration-testingvulnerability-analysis+1
92 years ago
CVE-2026-88997 preview

CVE-2026-88997

GitHubpervinzahidli/cve-2026-88997

JSM Show Post Metadata < 4.9.1 - Contributor+ Stored XSS via Custom Field Meta Key

exploitationpapers-researchvulnerability-analysis+1
8 days ago