Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

19 results

magento2-template-filter-patch

wubinworks/magento2-template-filter-patch

Magento 2 patch for CVE-2022-24086, CVE-2022-24087. Fix the RCE vulnerability and related bugs by performing deep template variable escaping. If you…

code-analysisexploitationmisconfiguration+3

1 year ago

CVE-2022-1077

brosck/cve-2022-1077

TEM FLEX-1080/FLEX-1085 1.6.0 log log.cgi Information Disclosure

exploitationinformation-gatheringiot-security+3

41 year ago

jsonorg-fn1

scabench/jsonorg-fn1

simple application with a CVE-2022-45688 vulnerability

code-analysiseducationmisconfiguration+3

12 years ago

Minio-Security-Vulnerability-Checker

ifulxploit/minio-security-vulnerability-checker

Program ini adalah alat (tool) yang dibuat untuk memeriksa keamanan sistem Minio terkait dengan kerentanan CVE-2022-35919

cloud-infrastructure-securitycloud-securityconfiguration-auditing+2

2 years ago

jsonorg-fp2

scabench/jsonorg-fp2

simple application with a (unreachable!) CVE-2022-45688 vulnerability

code-analysiseducationmisconfiguration+3

2 years ago

Archived

GSSC-CVE-2022-41923

grails/gssc-cve-2022-41923

Workaround guide for CVE-2022-41923 privilege management vulnerability in Grails Spring Security Core plugin, providing patched filter definitions…

authentication-authorizationcode-analysiseducation+3

73 years ago

CVE-2020-13937

kailing0220/cve-2020-13937

Apache Kylin有一个restful api会在没有任何认证的情况下暴露配置信息

exploitationmisconfigurationpenetration-testing+3

14 years ago

Archived

Follina-Remediation

cosmo121/follina-remediation

Removes the ability for MSDT to run, in response to CVE-2022-30190 (Follina)

defensive-toolsexploitationincident-response+2

44 years ago

blmvuln

mathiasreker/blmvuln

Major Security Vulnerability on PrestaShop Websites - CVE-2022-31101

code-analysisincident-responsemalware-analysis+3

424 years ago

lblfixer_cve_2022_31181

drkbcn/lblfixer_cve_2022_31181

Module for PrestaShop 1.6.1.X/1.7.X to fix CVE-2022-31181 / CVE-2022-36408 vulnerability (Chain SQL Injection)

database-securitymisconfigurationvulnerability-analysis+1

4 years ago

Follina-Workaround-CVE-2022-30190

sentrium-security/follina-workaround-cve-2022-30190

PowerShell scripts to apply and restore Microsoft's registry-based workaround for CVE-2022-30190 (Follina) vulnerability, deployable via InTune for…

configuration-auditingdefensive-toolsexploitation+3

4 years ago

CVE-2022-30929

nanaao/cve-2022-30929

CVE-2022-30929 POC

code-analysisexploitationmisconfiguration+3

4 years ago

Archived

CVE-2022-30190_Temporary_Fix_Source_Code

jotaqc/cve-2022-30190_temporary_fix_source_code

These are the source codes of the Python scripts to apply the temporary protection against the CVE-2022-30190 vulnerability (Follina)

configuration-auditingdefensive-toolsexploitation+3

4 years ago

CVE-2022-30190

cyberdashy/cve-2022-30190

PowerShell script to mitigate CVE-2022-30190 by updating a registry DWORD key, designed for deployment via RMM tools like ConnectWise Automate.

configuration-auditingdefensive-toolsmisconfiguration+2

4 years ago

mitigate-folina

derco0n/mitigate-folina

Mitigates the "Folina"-ZeroDay (CVE-2022-30190)

defensive-toolsincident-responsemisconfiguration+1

14 years ago

cve-2022-30190

paddlingcode/cve-2022-30190

CVE-2022-30190 remediation via removal of ms-msdt from Windows registry

configuration-auditingmisconfigurationvulnerability-analysis

64 years ago

cve-2022-22976-bcrypt-skips-salt

spring-io/cve-2022-22976-bcrypt-skips-salt

CLI tool to detect and update BCrypt password hashes with vulnerable work factor 31, integrating with Spring Security databases for CVE-2022-xxxx…

authenticationdatabase-securityencryption-decryption-tools+3

14 years ago

irule-cve-2022-22965

irgoncalves/irule-cve-2022-22965

F5 BIG-IP iRule providing mitigation against CVE-2022-22965 (Spring4Shell) remote code execution vulnerability in Java Spring Framework. Tested on…

exploitationids-ips-evasionmisconfiguration+3

24 years ago

Previous12 Next