Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

40 results

cve-2024-55591-poc

ull0a/cve-2024-55591-poc

Educational implementation in Go for CVE-2024-55591 (Fortinet FortiOS Authentication Bypass). Designed for security research, vulnerability…

authenticationexploitationpenetration-testing+2

1 month ago

CVE-2024-10449-patch

g-u-i-d/cve-2024-10449-patch

Patch for CVE-2024-10449: replaces vulnerable loginAction.php with a hardened version that requires database configuration for secure authentication.

authenticationcode-analysismisconfiguration+2

1 year ago

CVE-2024-31964

d-raco/cve-2024-31964

Proof-of-concept exploit for CVE-2024-31964, a temporary authentication bypass in Mitel 6900w Series SIP phones allowing unauthenticated POST…

authenticationexploitationhardware-security+4

21 year ago

CVE-2024-4573-Mitigation-Script

castro-ian/cve-2024-4573-mitigation-script

Detects NTLM authentication status by checking LmCompatibilityLevel registry value to assess exposure to CVE-2024-43451 and mitigate credential relay…

authenticationconfiguration-auditingincident-response+2

1 year ago

CVE-2024-31218-WEBHOOD-LAB

chandrimanath04-hue/cve-2024-31218-webhood-lab

Docker-based lab reproducing CVE-2024-31218, an unauthenticated PocketBase admin creation flaw in Webhood, with PoC, detection, and remediation…

authenticationeducationexploitation+4

1 month ago

cve-2024-56348

joshuavanderpoll/cve-2024-56348

Go-based exploit for CVE-2024-56348 targeting JetBrains TeamCity authentication bypass and remote code execution. Provides interactive shell, reverse…

authenticationexploitationpenetration-testing+4

37 months ago

CVE-2024-4358

harydhk7/cve-2024-4358

Pre-authenticated remote code execution exploit for Telerik Report Server (CVE-2024-4358/CVE-2024-1800) with authentication bypass and…

authenticationeducationexploitation+3

2 years ago

CVE-2024-3183-POC

im10n/cve-2024-3183-poc

POC for CVE-2024-3183 (FreeIPA Rosting)

authenticationexploitationpassword-attacks+2

292 years ago

CVE-2024-4358

verylazytech/cve-2024-4358

Authentication Bypass Vulnerability — CVE-2024–4358 — Telerik Report Server 2024

authenticationeducationexploitation+3

131 year ago

CVE-2023-46805_CVE-2024-21887

raminkarimkhani1996/cve-2023-46805_cve-2024-21887

The script in this repository only checks whether the vulnerabilities specified in the Ivanti Connect Secure product exist.

authenticationexploitationpenetration-testing+2

52 years ago

CVE-2024-0012

0xjessie21/cve-2024-0012

CVE-2024-0012 PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015) RCE POC

authenticationcommand-and-controlexploitation+3

41 year ago

watchguard-sso-client

redteampentesting/watchguard-sso-client

Client Implementation for the WatchGuard SSO Agent Protocol used for Security Research (CVE-2024-6592, CVE-2024-6593, CVE-2024-6594)

authenticationexploitationnetwork-security+3

32 years ago

CVE-2024-55591

virus-or-not/cve-2024-55591

An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS and FortiProxy may allow a remote attacker to…

authenticationeducationexploitation+3

81 year ago

CVE-2024-20674

gpotter2/cve-2024-20674

Exploit for CVE-2024-20674: Kerberos mutual authentication bypass via logic bug in client-side U2U TGT-REP handling. Enables unauthenticated network…

authenticationexploitationnetwork-security+2

11 year ago

CVE-2024-11680_PoC_Exploit

d3n14ld15k/cve-2024-11680_poc_exploit

This repository contains a Proof of Concept (PoC) exploit for CVE-2024-11680, a critical vulnerability in ProjectSend r1605 and older versions. The…

authenticationexploitationmisconfiguration+3

121 year ago

GenCrushSSTIExploit

geniuszly/gencrushsstiexploit

is a PoC for CVE-2024-4040 tool for exploiting the SSTI vulnerability in CrushFTP

authenticationeducationexploitation+3

82 years ago

CVE-2024-55591-POC

umchacker/cve-2024-55591-poc

Proof-of-concept exploit for CVE-2024-55591, enabling unauthenticated WebSocket CLI access to FortiOS devices, with interactive shell and admin…

authenticationexploitationpenetration-testing+3

21 year ago

CVE-2024-28987

horizon3ai/cve-2024-28987

Proof-of-concept exploit for CVE-2024-28987 targeting SolarWinds Web Help Desk hardcoded credential vulnerability. Automates exploitation via URL…

authenticationexploitationinformation-gathering+3

82 years ago

Previous12 3 Next