Skip to content

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories

Loading categories

GitHub/1n7erface/poclist

Vulnerability Analysis Exploitation Web Application Exploitation Information Gathering Penetration Testing Remote Access Tool

1n7erface/poclist

PocList

Vulnerability-specific PoC scripts for discovering and exploiting RCE, SQLi, XXE, SSRF, and unauthorized-access flaws in enterprise web apps and middleware.

View Repository

1.1k31353 years ago

Most Popular

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →

Share

This project is temporarily paused. During later updates, I realized two issues: First, it seems my declaration of the Cybersecurity Law in the repository was insufficient, leading to some results I did not intend. Second, at the initial design stage of this project, I did not consider some fundamental architectural aspects, such as interface universality, or the fact that graphical interfaces and full-version detection for a single framework are what most users actually need.

Written POCs

Alibaba-Nacos-Unauthorized

ApacheDruid-RCE_CVE-2021-25646

MS-Exchange-SSRF-CVE-2021-26885

Oracle-WebLogic-CVE-2021-2109_RCE

RG-CNVD-2021-14536

RJ-SSL-VPN-UltraVires

Redis-Unauthorized-RCE

TDOA-V11.7-GetOnlineCookie

VMware-vCenter-GetAnyFile

yongyou-GRP-U8-XXE

Oracle-WebLogic-CVE-2020-14883

Oracle-WebLogic-CVE-2020-14882

Apache-Solr-GetAnyFile

F5-BIG-IP-CVE-2021-22986

Sonicwall-SSL-VPN-RCE

GitLab-Graphql-CNVD-2021-14193

D-Link-DCS-CVE-2020-25078

WLAN-AP-WEA453e-RCE

360TianQing-Unauthorized

360TianQing-SQLinjection

FanWeiOA-V8-SQLinjection

QiZhiBaoLeiJi-AnyUserLogin

QiAnXin-WangKangFirewall-RCE

Jinshan-V8-TerminalSecuritySystem-RCE

NCCloud-SQLinjection

ShowDoc-RCE

About POCs

Here, the author simplifies various tedious vulnerabilities encountered in different environments into POC tools, making them easier to discover and exploit in subsequent operations.

Disclaimer

All tools provided here are intended to be used only under authorized conditions. If criminal cases or unauthorized attacks occur, I bear no responsibility. Everyone is expected to be familiar with the Cybersecurity Law.