Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

24 results

CVE-2021-41773-exercise

m96dg/cve-2021-41773-exercise

Hands-on lab to exploit Apache 2.4.49 path traversal (CVE-2021-41773) using Docker, Nmap scanning, and curl to retrieve a flag.

educationexploitationlabs-practice+3

4 years ago

Pentest-Everything

the-viper-one/pentest-everything

A collection of CTF write-ups, pentesting topics, guides and notes. Notes compiled from multiple sources and my own lab research. Topics also support…

ctfcurated-resourceseducation+4

6280 years ago

pwn2own2018

saelo/pwn2own2018

A Pwn2Own exploit chain

binary-exploitationeducationexploitation+5

7607 years ago

CVE-2025-4796

nxploited/cve-2025-4796

Eventin <= 4.0.34 - Authenticated (Contributor+) Privilege Escalation via User Email Change/Account Takeover

authentication-authorizationeducationexploitation+3

11 months ago

TeamViewer_Permissions_Hook_V1

gellin/teamviewer_permissions_hook_v1

A proof of concept injectable C++ dll, that uses naked inline hooking and direct memory modification to change your TeamViewer permissions.

educationexploitationlateral-movement+5

3118 years ago

cve-2021-41773

mightysai1997/cve-2021-41773

Exploit script for Apache HTTP Server 2.4.49/2.4.50 path traversal and remote code execution (CVE-2021-41773). Includes Docker-based reproduction…

educationexploitationpenetration-testing+3

4 years ago

cve-2021-41773-v-

mightysai1997/cve-2021-41773-v-

Proof-of-concept exploit for Apache HTTP Server 2.4.49/2.4.50 path traversal vulnerability (CVE-2021-41773) enabling remote code execution via CGI…

educationexploitationpenetration-testing+3

4 years ago

Dirty-COW-CVE-2016-5195-

zakariamaaraki/dirty-cow-cve-2016-5195-

Exploit the dirtycow vulnerability to login as root

container-escapeeducationexploitation+3

5 years ago

CVE-2026-48611-phpBB

wanmywan/cve-2026-48611-phpbb

Bypass Authentication

authenticationeducationexploitation+3

2 months ago

CVE-2025-22963

samplev45/cve-2025-22963

Detailed disclosure of CVE-2025-22963, a CSRF vulnerability in Teedy <= v1.11 enabling account takeover via forced user information changes.

educationpapers-researchvulnerability-analysis+2

1 year ago

CVE-2024-6244

nxploited/cve-2024-6244

pz-frontend-manager < 1.0.6 - CSRF Profile Picture Exploit

educationexploitationpenetration-testing+2

1 year ago

CVE-2021-41773m

mightysai1997/cve-2021-41773m

Proof-of-concept exploit for Apache HTTP Server 2.4.49 path traversal vulnerability (CVE-2021-41773) with remote code execution and reverse shell…

educationexploitationpenetration-testing+3

14 years ago

CVE-2021-41773-i-

mightysai1997/cve-2021-41773-i-

Proof-of-concept exploit for Apache HTTP Server 2.4.49 path traversal (CVE-2021-41773) with Docker-based lab environment and patch diff analysis.

educationexploitationlabs-practice+3

9 months ago

CVE-2021-41773

ludovicpatho/cve-2021-41773

The first vulnerability with the CVE identifier CVE-2021-41773 is a path traversal flaw that exists in Apache HTTP Server 2.4.49.

educationexploitationpenetration-testing+3

53 years ago

confluence-rce-poc

wolf1892/confluence-rce-poc

Setting up POC for CVE-2021-26084

educationexploitationpenetration-testing+2

5 years ago

CVE-2021-41773

itsecurityco/cve-2021-41773

Proof-of-concept exploit for Apache HTTP Server path traversal vulnerability CVE-2021-41773, with Docker setup and detailed vulnerability analysis.

educationexploitationpenetration-testing+3

123 years ago

cve-2022-33891-fix

elsvital/cve-2022-33891-fix

Educational lab demonstrating CVE-2022-33891 exploitation and patch application for Apache Spark with ACL authentication, including PoC verification…

educationexploitationlabs-practice+3

2 years ago

CVE-2025-25618

armaansidana2003/cve-2025-25618

Proof-of-concept demonstrating incorrect access control in Unifiedtransform v2.0, allowing teachers to modify section details. Includes step-by-step…

educationpapers-researchpenetration-testing+2

1 year ago

Previous12 Next