#1General-purpose tools, frameworks, and environments supporting various cybersecurity workflows and tasks.
Kitploit recommended
owasp/qrljackingSocial engineering attack vector and exploitation framework for hijacking user sessions via QR code login, targeting web applications like WhatsApp,…
mingqizhang7710/cve-2022-0847-poc-dockerimageDocker image packaging a proof-of-concept exploit for CVE-2022-0847 (Dirty Pipe), a Linux kernel privilege escalation vulnerability.
paolokappa/sharepointsecuritymonitorA comprehensive PowerShell-based SharePoint security monitoring solution with CVE-2025-53770 protection, advanced DLL analysis, threat detection, and…
mercuryworkshop/woefulWoeful is a tool that lets web apps to safely and securely connect to the outside internet without a complex backend.
jesusprubio/blueboxA collection of exploits for different VoIP products.
dosx-dev/websafecompilerA powerfull websites compiler/obfuscator for optimization or intellectual property protection purposes.
lumberjackstorys/cveProof-of-concept app to overwrite fonts on iOS using CVE-2022-46689.
ic3-512/linux-root-kitEnd-to-end simulation of a Python dependency confusion attack, sudo privilege escalation (CVE-2025-32463), and rootkit-based persistence - with full…
n1ckdunn/exploitivatorAutomate Metasploit scanning and exploitation
maalfer/sudo-cve-2021-3156Exploit para explotar la vulnerabilidad CVE-2025-32463
vmware-archive/burp-rest-apiREST/JSON API to the Burp Suite security tool.
guinea-offensive-security/wazuh-rceRemote code execution exploit for Wazuh 8.4 (CVE-2025-24016) with Python-based proof-of-concept targeting vulnerable SIEM deployments.
joshlarsen/aws-reconMulti-threaded AWS inventory collection tool with a focus on security-relevant resources and metadata.
tdawg506/mailenable-cve-2022-36934Metasploit module for MailEnable CVE-2022-36934 authentication bypass RCE
hklabcr/cve-2011-2523Manual and automated exploitation walkthrough for vsftpd 2.3.4 backdoor (CVE-2011-2523) with custom reverse shell payload and Metasploit integration…
iamfarzad/fbcounsulting_v2ARCHIVED: FBC v2 consulting website draft. Deprecated. Vulnerable to CVE-2026-44579 (Next.js Cache DoS).
qubesos/qvm-create-windows-qubeSpin up new Windows qubes quickly, effortlessly and securely on Qubes OS
sornram9254/cve-2022-38577-processmakerProcessMaker before v3.5.4 was discovered to contain insecure permissions in the user profile page. This vulnerability allows attackers to escalate…
