Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
38 results
http-protocol-exfil preview

http-protocol-exfil

GitHubricardojoserf/http-protocol-exfil

Exfiltrate files using the HTTP protocol version ("HTTP/1.0" is a 0 and "HTTP/1.1" is a 1)

data-exfiltrationnetwork-security
244 years ago
TrafficWatch preview

TrafficWatch

GitHubhalildeniz/trafficwatch

PCAP-based packet sniffer and analyzer supporting ARP, ICMP, TCP, UDP, DNS, DHCP, HTTP, SNMP, LLMNR, and NetBIOS protocol inspection with filtering…

information-gatheringnetwork-mappingnetwork-security+1
1372 years ago
socksmon preview

socksmon

GitHubmrschyte/socksmon

Monitor arbitrary TCP traffic using your HTTP interception proxy of choice

packet-sniffing-analysispenetration-testingweb-proxies-interception
468 years ago
CVE-2022-47522-PoC preview

CVE-2022-47522-PoC

GitHubtoffeenutt/cve-2022-47522-poc

Proof-of-concept exploit for CVE-2022-47522 demonstrating Wi-Fi frame interception via deauthentication attack and MAC address spoofing to capture…

exploitationpacket-sniffing-analysispenetration-testing+3
1 year ago
CVE-2022-21907 preview

CVE-2022-21907

GitHubmalwareman007/cve-2022-21907

POC for CVE-2022-21907: HTTP Protocol Stack Remote Code Execution Vulnerability.

exploitationpenetration-testingremote-access-tool+2
171 year ago
CVE-2021-31166-Exploit preview

CVE-2021-31166-Exploit

GitHuby0g3sh-99/cve-2021-31166-exploit

Exploit for MS Http Protocol Stack RCE vulnerability (CVE-2021-31166)

exploitationvulnerability-analysisweb-security
75 years ago
Http-Asynchronous-Reverse-Shell preview
Archived

Http-Asynchronous-Reverse-Shell

GitHubonsec-fr/http-asynchronous-reverse-shell

[POC] Asynchronous reverse shell using the HTTP protocol.

command-and-controldata-exfiltrationids-ips-evasion+7
2721 year ago
CVE-2022-21907 preview

CVE-2022-21907

GitHubzz-socmap/cve-2022-21907

HTTP Protocol Stack Remote Code Execution Vulnerability CVE-2022-21907

exploitationpayload-developmentpenetration-testing+3
3604 years ago
CVE-2021-31166 preview

CVE-2021-31166

GitHubcorelight/cve-2021-31166

Detection rules (Suricata + Zeek) for CVE-2021-31166 HTTP Protocol Stack vulnerability, providing network-level alerts on exploit attempts against…

exploitationintrusion-detectionnetwork-security+3
121 year ago
CVE-2021-31166-exploit preview

CVE-2021-31166-exploit

GitHubiranzai/cve-2021-31166-exploit

Exploit for CVE-2021-31166 targeting HTTP Protocol Stack RCE in Windows 10 and Server versions 2004/20H2, enabling remote code execution via crafted…

exploitationpenetration-testingremote-access-tool+2
24 years ago
CVE-2022-21907 preview

CVE-2022-21907

GitHubkamal-marouane/cve-2022-21907

Vulnerability in HTTP Protocol Stack Enabling Remote Code Execution and Potential System Crash.

educationexploitationlabs-practice+2
12 years ago
cve-2022-21907-http.sys preview

cve-2022-21907-http.sys

GitHubiveresk/cve-2022-21907-http.sys

An unauthenticated attacker can send an HTTP request with an "Accept-Encoding" HTTP request header triggering a double free in the unknown…

binary-exploitationexploitationpenetration-testing+2
14 years ago
CVE-2022-21907 preview

CVE-2022-21907

GitHubcassie0206/cve-2022-21907

Proof-of-concept exploit for CVE-2022-21907, a remote code execution vulnerability in Windows HTTP Protocol Stack (HTTP.sys). Demonstrates…

exploitationinformation-gatheringpenetration-testing+2
3 years ago
CVE-2022-21907 preview

CVE-2022-21907

GitHubasepsaepdin/cve-2022-21907

Proof-of-concept exploit for CVE-2022-21907, a remote code execution vulnerability in the HTTP protocol stack (IIS). Includes a Python script and…

educationexploitationpenetration-testing+2
3 years ago
outlook-auto-register preview

outlook-auto-register

GitHublxf746/outlook-auto-register

Automated Outlook account registration tool using pure HTTP protocol with PerimeterX captcha solving, proxy pool management, and email token…

captcha-bypassemail-securityweb-security
5796 days ago
CVE-2021-31166 preview
Archived

CVE-2021-31166

GitHub0vercl0k/cve-2021-31166

Proof of concept for CVE-2021-31166, a remote HTTP.sys use-after-free triggered remotely.

binary-exploitationexploitationremote-access-tool+2
8275 years ago
vhosts-sieve preview

vhosts-sieve

GitHubdariusztytko/vhosts-sieve

Searching for virtual hosts among non-resolvable domains

information-gatheringpenetration-testingreconnaissance+2
886 years ago
CVE-2022-21907-Vulnerability-PoC preview

CVE-2022-21907-Vulnerability-PoC

GitHubmichelep/cve-2022-21907-vulnerability-poc

CVE-2022-21907 Vulnerability PoC

exploitationpenetration-testingremote-access-tool+2
284 years ago
Previous123Next