Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

19 results

CVE-2021-38647

horizon3ai/cve-2021-38647

Proof-of-concept exploit for CVE-2021-38647 (OMIGOD), an unauthenticated remote code execution vulnerability in the OMI agent commonly deployed on…

cloud-securityexploitationpenetration-testing+3

233

5 years ago

CVE-2021-38647-noimages

corelight/cve-2021-38647-noimages

Zeek package detecting CVE-2021-38647 (OMIGOD) exploit attempts by monitoring OMI/WMI traffic for missing Authorization headers and malicious SOAP…

cloud-securityexploitationincident-response+3

2 years ago

Archived

cve-2021-44228-workaround-buildpack

alexandreroman/cve-2021-44228-workaround-buildpack

Buildpack providing a workaround for CVE-2021-44228 (Log4j RCE exploit)

cloud-securitydevsecopseducation+3

34 years ago

cve-2021-38647

abousteif/cve-2021-38647

https://github.com/corelight/CVE-2021-38647 without the bloat

cloud-securityexploitationincident-response+3

5 years ago

WIn-CVE-2021-31166

bgsilvait/win-cve-2021-31166

Proof-of-concept for CVE-2021-31166 (http.sys RCE) with Terraform deployment on AWS, including testing scripts and a WAFv2 rule to block the exploit.

cloud-securitydevsecopsexploitation+3

5 years ago

ZigRaceExploit

glutenfree69/zigraceexploit

CVE-2021-25741 POC in Zig

binary-exploitationcloud-securitycontainer-security+3

7 months ago

REALITY_SMASHER

rabidwh0re/reality_smasher

vRealize RCE + Privesc (CVE-2021-21975, CVE-2021-21983, CVE-0DAY-?????)

cloud-securityexploitationpenetration-testing+3

375 years ago

log4j-cve-2021-44228

lucab85/log4j-cve-2021-44228

Ansible playbook automating Red Hat's Log4j detector script to scan Linux hosts for CVE-2021-44228 (Log4Shell) vulnerability with GPG verification.

cloud-securityconfiguration-auditingdevsecops+3

584 years ago

CVE-2021-1056

pokerfacesad/cve-2021-1056

PoC for CVE-2021-1056, related to GPU Container Security

cloud-securitycontainer-securityexploitation+3

165 years ago

f5-waf-quick-patch-cve-2021-44228

irgoncalves/f5-waf-quick-patch-cve-2021-44228

This tool creates a custom signature set on F5 WAF and apply to policies in blocking mode

api-securitycloud-securitydevsecops+3

34 years ago

CVE-2021-21975

murataydemir/cve-2021-21975

[CVE-2021-21975] VMware vRealize Operations Manager API Server Side Request Forgery (SSRF)

cloud-securityexploitationinformation-gathering+3

45 years ago

ansible-role-log4shell

lucab85/ansible-role-log4shell

Ansible playbook to verify target Linux hosts using the official Red Hat Log4j detector script RHSB-2021-009 for Log4Shell (CVE-2021-44228).

cloud-securityconfiguration-auditingdevsecops+2

44 years ago

pulsar-docker-images-patch-CVE-2021-44228

lhotari/pulsar-docker-images-patch-cve-2021-44228

Patch Pulsar Docker images with Log4J 2.17.1 update to mitigate Apache Log4J Security Vulnerabilities including Log4Shell

cloud-securitycontainer-securitydevsecops+3

14 years ago

tf-log4j-aws-poc

moshuum/tf-log4j-aws-poc

This project files demostrate a proof-of-concept of log4j vulnerability (CVE-2021-44228) on AWS using Terraform Infrastructure-as-a-code means.

cloud-securityexploitationpenetration-testing+2

14 years ago

CVE-2021-43858-MinIO

khuntor/cve-2021-43858-minio

Go-based exploit for CVE-2021-43858 targeting MinIO privilege escalation vulnerability. Executes against a specified IP and port to demonstrate the…

cloud-securityexploitationpenetration-testing+3

3 years ago

CVE-2021-25741

cdxiaodong/cve-2021-25741

Proof-of-concept exploit for CVE-2021-25741 enabling Kubernetes container escape via subpath volume mount manipulation, designed for security testing…

cloud-securitycontainer-escapecontainer-security+3

3 years ago

Check-AAD-Connect-for-CVE-2021-36949-vulnerability

maxwitat/check-aad-connect-for-cve-2021-36949-vulnerability

check if Azure AD Connect is affected by the vulnerability described in CVE-2021-36949

authenticationcloud-securitymisconfiguration+2

35 years ago

sudowp-adminer

sudo-wp/sudowp-adminer

A secure, zero-trust database management tool for WordPress. Fixes critical SSRF vulnerabilities (CVE-2021-21311) by enforcing local connections only.

authentication-authorizationcloud-securitydatabase-security+3

17 months ago

Previous12 Next