Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

318 results

CVE-2023-25690-POC

dhmosfunk/cve-2023-25690-poc

CVE 2023 25690 Proof of concept - mod_proxy vulnerable configuration on Apache HTTP Server versions 2.4.0 - 2.4.55 leads to HTTP Request Smuggling…

educationexploitationlabs-practice+3

288

2 years ago

CVE-2023-25690-POC

oocyginxoo/cve-2023-25690-poc

CVE 2023 25690 Proof of concept - mod_proxy vulnerable configuration on Apache HTTP Server versions 2.4.0 - 2.4.55 leads to HTTP Request Smuggling…

educationexploitationlabs-practice+3

21 year ago

CVE-2023-3124

amirwhitehat/cve-2023-3124

CVE-2023-3124 PoC

educationexploitationprivilege-escalation+2

53 years ago

CVE-2023-4911

rickdejager/cve-2023-4911

CVE-2023-4911 proof of concept

binary-exploitationeducationexploitation+2

1673 years ago

CVE-2023-42793

zenmovie/cve-2023-42793

PoC of CVE-2023-42793

educationexploitationpenetration-testing+2

93 years ago

CVE-2023-22527-POC

maanvader/cve-2023-22527-poc

Atlassian Confluence Remote Code Execution(RCE) Proof Of Concept

educationexploitationlabs-practice+3

12 years ago

CVE-2023-51385---OpenSSH-ProxyCommand-Injection-PoC

saarcastified/cve-2023-51385---openssh-proxycommand-injection-poc

This repository contains a proof-of-concept (PoC) for exploiting the OpenSSH ProxyCommand vulnerability — CVE-2025-51385 — affecting OpenSSH servers…

command-and-controleducationexploitation+2

1 year ago

CVE-2023-32571

sectex/cve-2023-32571

Proof of Concept for CVE-2023-32571

code-analysiseducationexploitation+3

1 year ago

CVE-2023-20938-poc

byt3quester/cve-2023-20938-poc

Local privilege escalation proof-of-concept for CVE-2023-20938, a use-after-free in Android binder, achieving root and disabling SELinux on…

android-securitybinary-exploitationctf+3

24 months ago

CVE-2023-46805

w2xim3/cve-2023-46805

CVE-2023-46805 Ivanti POC RCE - Ultra fast scanner.

command-and-controleducationexploitation+3

22 years ago

CVE-2023-23752_Joomla

hadrian3689/cve-2023-23752_joomla

Proof-of-concept exploit for CVE-2023-23752 targeting unauthenticated information disclosure in Joomla! versions 4.0.0 to 4.2.7. Includes a Python…

educationexploitationinformation-gathering+3

2 years ago

CVE-2023-2008

bluefrostsecurity/cve-2023-2008

Proof of concept code for CVE-2023-2008

binary-exploitationeducationexploitation+2

393 years ago

CVE-2023-40028

0xyassine/cve-2023-40028

Proof of concept demonstrating authenticated symlink upload in Ghost CMS leading to arbitrary file read via CVE-2023-40028.

educationexploitationpenetration-testing+2

142 years ago

CVE-2023-45612-PoC

ksaweryr/cve-2023-45612-poc

Proof of concept for XXE in Ktor (CVE-2023-45612)

code-analysiseducationexploitation+2

11 months ago

CVE-2023-40931-POC

g4sp4rcs/cve-2023-40931-poc

CVE-2023-40931 Proof of Concept made for HTB MONITORED

educationexploitationpenetration-testing+2

1 year ago

blueXploit

danyw24/bluexploit

Exploit basado en vulnerabilidades criticas Bluetooth (CVE-2023-45866, CVE-2024-21306)

bluetooth-securityeducationexploitation+4

163 months ago

CVE-2023-44487-HTTP-2-Rapid-Reset-Exploit-PoC

threatlabindonesia/cve-2023-44487-http-2-rapid-reset-exploit-poc

Proof-of-concept checker for CVE-2023-44487 HTTP/2 Rapid Reset DoS vulnerability. Tests single or bulk URLs for RST_STREAM frame susceptibility with…

educationexploitationpenetration-testing+2

1210 months ago

CVE-2023-50164-POC

snyk-labs/cve-2023-50164-poc

Proof-of-concept exploit for CVE-2023-50164, a path traversal vulnerability in Apache Struts leading to remote code execution. Includes vulnerable…

educationexploitationlabs-practice+3

62 years ago

Previous12…18 Next