Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

63 results

NimbusPWN-CVE-2022-29799-29800

joshuavanderpoll/nimbuspwn-cve-2022-29799-29800

NimbusPwn (CVE-2022-29799/29800) local privilege escalation PoC in C.

educationexploitationlabs-practice+3

2 months ago

CVE-2022-23305_POC

tkomlodi/cve-2022-23305_poc

CVE-2022-23305 Log4J JDBCAppender SQl injection POC

database-securityeducationexploitation+3

13 years ago

fortigate-cve-2022-40684-tool

pintukumar-sutradhar/fortigate-cve-2022-40684-tool

FortiGate CVE-2022-40684 assessment tool for user enumeration, configuration dump, and lab testing.

educationexploitationlabs-practice+3

4 months ago

CVE-2022-42889

necroteddy/cve-2022-42889

docker for CVE-2022-42889

educationexploitationlabs-practice+2

3 years ago

Archived

Bootloader_Unlock_Retroid_Pocket_3Plus

seriousattempts/bootloader_unlock_retroid_pocket_3plus

Bootloader unlock using CVE-2022-38694 for Retroid Pocket 3+

android-securityeducationembedded-systems-security+4

21 year ago

ICT287-CVE-2022-42889

kosmicowl045/ict287-cve-2022-42889

Setup and exploit recreation for CVE-2022-42889 Text4Shell.

educationexploitationlabs-practice+3

4 months ago

CVE-2022-36804-Bitbucket-RCE-Analysis

danielhallbro/cve-2022-36804-bitbucket-rce-analysis

Full-chain reproduction of CVE-2022-36804 (Bitbucket RCE). Includes a Dockerized laboratory, pspy64 monitoring for null-byte injection verification,…

binary-exploitationcommand-and-controleducation+6

5 months ago

llama_facts

adindrabkin/llama_facts

Web application vulnerable to Python3 Flask SSTI (CVE-2019-8341)

ctfeducationlabs-practice+3

3 years ago

SSI-CVE-2022-21661

wellingtonespindula/ssi-cve-2022-21661

Study and exploit the vulnerability CVE-2022-21661 that allows SQL Injections through plugins POST requests to WordPress versions below 5.8.3.

educationexploitationlabs-practice+3

62 years ago

CS4239-Spring4Shell-POC

xenosf/cs4239-spring4shell-poc

CVE-2022-22965 proof of concept for CS4239 report

educationexploitationlabs-practice+2

9 months ago

TryHackMe-Atlassian-CVE-2022-26134

r1skkam/tryhackme-atlassian-cve-2022-26134

Atlassian, CVE-2022-26134 An interactive lab showcasing the Confluence Server and Data Center un-authenticated RCE vulnerability.

ctfeducationexploitation+3

14 years ago

spring4shell_victim

fracturelabs/spring4shell_victim

Intentionally vulnerable Spring app to test CVE-2022-22965

educationexploitationlabs-practice+3

24 years ago

CVE-2022-22965

joe1sn/cve-2022-22965

CVE-2022-22965 Environment

educationexploitationlabs-practice+2

14 years ago

ps-lab-cve-2022-0847

mattlloyddavies/ps-lab-cve-2022-0847

Resources required for building Pluralsight CVE-2022-0847 lab

binary-exploitationeducationexploitation+3

13 years ago

CVE-2022-26134-LAB

skhalsa-sigsci/cve-2022-26134-lab

Detecting CVE-2022-26134 using Nuclei

educationexploitationlabs-practice+3

33 years ago

CVE-2022-22947

dbgee/cve-2022-22947

Spring Cloud Gateway Actuator API 远程命令执行 CVE-2022-22947

educationexploitationlabs-practice+2

24 years ago

CVE-2022-46169

hpt-intern-task-submission/cve-2022-46169

authenticationcommand-and-controleducation+4

2 years ago

cve-2022-46395-qemu

gao-zuin/cve-2022-46395-qemu

binary-exploitationeducationexploitation+3

2 months ago

Previous 123 4 Next