Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

17 results

CVE-2013-2028-Exploit

vanivamshi/cve-2013-2028-exploit

Docker-based lab and Python exploit for CVE-2013-2028, an Nginx 1.3.9 chunked-parser integer overflow, covering canary recovery, mprotect, and…

binary-exploitationeducationexploitation+6

1 month ago

Remediating-CVE-2013-3900-EnableCertPaddingCheck-

pkblanks/remediating-cve-2013-3900-enablecertpaddingcheck-

Step-by-step remediation report for CVE-2013-3900 on Windows Server 2019 Azure VM, using Tenable/Nessus credentialed scans and registry hardening to…

cloud-securityconfiguration-auditingeducation+3

11 year ago

rails-cve-2012-5664-test

phusion/rails-cve-2012-5664-test

Demo app showing how the Rails CVE-2013-5664 vulnerability works.

code-analysisdatabase-securityeducation+2

213 years ago

ntpscanner

suedadam/ntpscanner

NTP monlist scanner CVE-2013-5211

educationinformation-gatheringnetwork-security+2

211 years ago

ntpdos

sepehrdaddev/ntpdos

PoC for distributed NTP reflection DoS (CVE-2013-5211)

educationexploitationnetwork-security+1

107 years ago

grails-javamelody-sample-app

theratpack/grails-javamelody-sample-app

Grails sample application using the Javamelody 1.44 plugin to illustrate the CVE-2013-4378 vulnerability.

code-analysiseducationexploitation+2

13 years ago

CveTest

sdneon/cvetest

Test case for Node.JS V0.10.31 v8 backport CVE-2013-6668 crash

binary-analysiseducationexploitation+2

12 years ago

cve-2013-3900-remediation-report

malaya-m/cve-2013-3900-remediation-report

Step-by-step remediation guide for CVE-2013-3900 WinVerifyTrust vulnerability on Windows Server 2019, including registry fix, reboot, and…

configuration-auditingeducationincident-response+2

1 year ago

cve-2013-2094

realtalk/cve-2013-2094

original cve-2013-2094 exploit and a rewritten version for educational purposes

binary-exploitationeducationexploitation+2

9113 years ago

CVE-2013-0156

oxben10/cve-2013-0156

This script is specifically designed to solve the challenge on PentesterLab for the CVE-2013-0156 exploit

educationexploitationlabs-practice+3

1 year ago

CVE20131491-JIT

guhe120/cve20131491-jit

Proof-of-concept exploit for CVE-2013-1491 using Java JIT-Spray technique to demonstrate memory corruption in JRE 7u17 on Windows 7 32-bit.

binary-exploitationeducationexploitation+2

812 years ago

CVE-2017-0261

erfze/cve-2017-0261

CVE-2017-8570 Exp及利用样本分析

binary-exploitationeducationexploitation+3

6 years ago

Nginx-CVE-2013-4547

cyberharsh/nginx-cve-2013-4547

Docker-based lab demonstrating Nginx CVE-2013-4547 URI parsing vulnerability with step-by-step exploitation for privilege bypass and code execution.

educationexploitationmisconfiguration+3

36 years ago

rails-exploit-cve-2013-0156

bsodmike/rails-exploit-cve-2013-0156

Bootstrapped Rails 3.2.10 to test the remote code exploit CVE-2013-0156

educationexploitationpenetration-testing+2

513 years ago

java-vulnerable

dannyendortest/java-vulnerable

EXPOSURE demo target: Tomcat (CVE-2016-0714) + Apache Rave (CVE-2013-1814) + Java filter-padding deps

educationlabs-practicemisconfiguration+3

5 months ago

CVE-2011-1237

brunopujos/cve-2011-1237

POC for exploit of CVE-2011-1237

binary-exploitationeducationexploitation+2

19 years ago

CVE-2023-21716

reggyraider/cve-2023-21716

CVE-2023-21716 - Microsoft Word RTF fonttbl Heap Corruption RCE exploit with reverse shell payload

binary-exploitationeducationexploitation+4

4 months ago