Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

39 results

solidity_CVE-2021-42574-POC

tin-z/solidity_cve-2021-42574-poc

POC of CVE-2021-42574 for solidity and solc compiler

code-analysiseducationexploitation+3

3 years ago

fixcve2023_39526_2023_39527

dnkhack/fixcve2023_39526_2023_39527

Prestashop fix vulnerability CVE-2023-39526 & CVE-2023-39527

code-analysiseducationmisconfiguration+2

33 years ago

CVE-2023-30533

benedridge/cve-2023-30533

There were no proper POCs for CVE-2023-30533 so I made one. (Reported by Vsevolod Kokorin)

code-analysisexploitationstatic-analysis+2

123 years ago

claude_opus_cve_2023_0266

seanheelan/claude_opus_cve_2023_0266

Demo showing Claude Opus does not find CVE-2023-0266

ai-securitycode-analysiseducation+3

172 years ago

cve-2023-34446

minsmiths/cve-2023-34446

Proof-of-concept exploit for CVE-2023-36664, a Ghostscript command injection vulnerability. Includes Docker lab environment, detailed analysis of…

binary-exploitationcode-analysiseducation+3

3 months ago

Apache-Solr-RCE_CVE-2023-50386_POC

vvmdx/apache-solr-rce_cve-2023-50386_poc

Apache Solr Backup/Restore APIs RCE Poc (CVE-2023-50386)

code-analysisexploitationpayload-development+3

632 years ago

analyze-Exploit-CVE-2023-22518-Confluence

d3ckkno0b/analyze-exploit-cve-2023-22518-confluence

CVE-2023-22518 exploit analysis for Atlassian Confluence Server covering setup, JAR diffing, root cause, and unauthorized restore to regain admin…

code-analysisdebuggerseducation+4

11 year ago

libwebp-checker

murphysecurity/libwebp-checker

A tool for finding vulnerable libwebp(CVE-2023-4863)

code-analysisstatic-analysissupply-chain-security+2

213 years ago

cve-2023-45612_exploit

clemfavre/cve-2023-45612_exploit

Reproduction of a high severty security problem that allows XXE (XML eXternal Entity) attacks on Ktor's XML serialization.

api-security-testingcode-analysiseducation+3

1 year ago

lblfixer_cve_2023_30839

drkbcn/lblfixer_cve_2023_30839

PrestaShop <1.7.8.9 Fix for CVE-2023-30839 and CVE-2023-30545

code-analysisdevsecopsmisconfiguration+2

3 years ago

CVE-2023-45827

200101whoami/cve-2023-45827

code-analysisexploitationstatic-analysis+2

2 years ago

Dolibarr-17.0.0-Exploit-CVE-2023-30253

dollarboysushil/dolibarr-17.0.0-exploit-cve-2023-30253

In Dolibarr 17.0.0 with the CMS Website plugin (core) enabled, an authenticated attacker can obtain remote command execution via php code injection…

code-analysisexploitationpayload-development+3

92 years ago

CVE-2023-43646

200101whoami/cve-2023-43646

redos

code-analysiseducationpapers-research+2

2 years ago

CVE-2023-33246-mitigation

pavilionq/cve-2023-33246-mitigation

Maven-based demonstration of CVE-2023-33246 mitigation for Apache RocketMQ, featuring attack testing and enhanced parameter validation to prevent…

cloud-securitycode-analysisexploitation+2

12 years ago

Sequelize-1day-CVE-2023-25813

bde574786/sequelize-1day-cve-2023-25813

Proof-of-concept and technical analysis of CVE-2023-25813, a SQL injection vulnerability in Sequelize ORM versions prior to 6.19.1, including…

code-analysisdatabase-securityexploitation+3

1 year ago

EP3_Redes

luizgustavop/ep3_redes

Implementações de servidores HTML em GO para análise da vulnerabilidade CVE-2023-29406.

code-analysiseducationexploitation+2

2 years ago

CVE-2023-31584

rootd4ddy/cve-2023-31584

Public disclosure for CVE-2023-31584.

code-analysiseducationstatic-analysis+2

3 years ago

Citrix-Bleed-Buffer-Overread-Demo

scottzxor/citrix-bleed-buffer-overread-demo

This code functionally approximates the Citrix Bleed vulnerability (CVE-2023-4699).

binary-analysiscode-analysiseducation+2

12 years ago

Previous12 3 Next