#1Static and dynamic code analysis, SAST, DAST, and code review tools.
Kitploit recommended

Fork spring-webmvc 5.3.39 to fix CVE-2024-38816, CVE-2024-38819

OpenSSL 1.0.1g source code with CVE-2015-1791 patch, providing SSL/TLS and cryptographic library for secure communications.


Android netd vulnerability analysis and exploitation research for CVE-2023-40084, focusing on the platform's network daemon.

Analyzes and demonstrates the Android Runtime vulnerability CVE-2021-0394, providing code-level insights for security researchers and developers.

Analyzes and patches a specific Android vulnerability (CVE-2023-21282) in the AAC audio codec, providing a patched AOSP10 source tree for security…

Grails sample application using the Javamelody 1.44 plugin to illustrate the CVE-2013-4378 vulnerability.

Android MediaProvider vulnerability analysis and patch for CVE-2023-40127, focusing on security assessment and remediation.

Proof-of-concept for CVE-2024-43018: SQL injection in Piwigo 13.8.0 via unsanitized max_level and min_register parameters, enabling information…


OpenSSL toolkit providing TLS/SSL protocols and general-purpose cryptographic library with command-line tools for key generation, certificate…

Exploit for CVE-2022-25173 targeting Jenkins Pipeline Groovy Plugin's CPS interpreter sandbox bypass, enabling arbitrary code execution within…

Demo project to evaluate Log4j2 Vulnerability | CVE-2021-44228

Fork of lodash.template with CVE-2021-23337 fix (command injection via variable option)

Remote code execution in Mediawiki Score

Analyzes and patches Android AAC (Adaptive Audio Coding) library for CVE-2023-21282, focusing on vulnerability assessment and code-level fixes.

Apache Struts2框架是一个用于开发Java EE网络应用程序的Web框架。Apache Struts于2020年12月08日披露 S2-061 Struts 远程代码执行漏洞(CVE-2020-17530),在使用某些tag等情况下可能存在OGNL表达式注入漏洞,从而造成远程代码执行,风…