Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

146 results

CVE-2021-44077

horizon3ai/cve-2021-44077

Proof-of-concept exploit for PreAuth RCE in ManageEngine ServiceDesk Plus (CVE-2021-44077). Uploads and executes arbitrary Windows executables on…

exploitationpayload-generationpenetration-testing+3

4 years ago

log4j-shell-csw

cybersecurityworks553/log4j-shell-csw

A Proof-Of-Concept Exploit for CVE-2021-44228 vulnerability.

command-and-controlexploitationpayload-generation+3

84 years ago

CVE-2021-41773

adrianmafandy/cve-2021-41773

Proof-of-concept exploit for CVE-2021-41773, a path traversal and remote code execution vulnerability in Apache HTTP Server 2.4.49. Automates…

exploitationpayload-generationpenetration-testing+3

111 months ago

CVE-2021-41579-LCDS-LAquis-SCADA-4.3.1.1085-Arbitrary-File-Write

mbanyamer/cve-2021-41579-lcds-laquis-scada-4.3.1.1085-arbitrary-file-write

Proof-of-concept exploit for CVE-2021-41579 enabling arbitrary file write/read and RCE via malicious .els project file in LAquis SCADA ≤4.3.1.1085.

binary-exploitationexploitationpayload-generation+3

8 months ago

Archived

proxylogon-exploit

praetorian-inc/proxylogon-exploit

Proof-of-concept exploit for CVE-2021-26855 and CVE-2021-27065. Unauthenticated RCE in Exchange.

exploitationpayload-generationpenetration-testing+3

525 years ago

CVE-2021-41773

im2sinister/cve-2021-41773

Python-based PoC exploit for Apache 2.4.49 path traversal and RCE (CVE-2021-41773). Features dynamic command execution, double-percent encoding…

educationexploitationpayload-generation+3

13 months ago

htb-wifinetictwo-exploit

behindsecurity/htb-wifinetictwo-exploit

A simple python script to exploit CVE-2021-31630 on HTB WifineticTwo CTF

binary-exploitationctfeducation+5

2 years ago

CVE-2021-44228

jaehnri/cve-2021-44228

Proof-of-concept exploit for the Log4Shell vulnerability (CVE-2021-44228) in Apache Log4j, demonstrating remote code execution via JNDI injection.

exploitationpayload-generationpenetration-testing+2

14 years ago

CVE-2021-44228-demo

hoanle396/cve-2021-44228-demo

Proof-of-concept exploit for CVE-2021-44228 (Log4Shell) with automated LDAP/HTTP server setup and reverse shell payload generation for educational…

educationexploitationpayload-generation+3

12 years ago

LOGJ4_PocShell_CVE-2021-44228

yanghyperdata/logj4_pocshell_cve-2021-44228

Proof-of-concept exploit for CVE-2021-44228 (Log4Shell) that automates LDAP and HTTP servers to deliver a reverse shell payload to a vulnerable Java…

educationexploitationlabs-practice+3

2 years ago

CVE-2021-44228

kr0ff/cve-2021-44228

Log4Shell Proof of Concept (CVE-2021-44228)

educationexploitationpayload-generation+3

44 years ago

CVE-2021-38295-PoC

professionallyevil/cve-2021-38295-poc

A simple Python proof of concept for CVE-2021-38295.

exploitationpayload-generationpenetration-testing+2

35 years ago

log4j2-CVE-2021-44228-poc-local

snatalius/log4j2-cve-2021-44228-poc-local

Just a personal proof of concept of CVE-2021-44228 on log4j2

exploitationpayload-generationpenetration-testing+2

4 years ago

CVE-2021-44228

phineas09/cve-2021-44228

Log4Shell Proof-Of-Concept derived from https://github.com/kozmer/log4j-shell-poc

educationexploitationlabs-practice+3

4 years ago

log4j-shell-poc

ocastel/log4j-shell-poc

A Proof-Of-Concept for the CVE-2021-44228 vulnerability.

educationexploitationlabs-practice+4

4 years ago

Archived

log4j-shell-poc

kozmer/log4j-shell-poc

A Proof-Of-Concept for the CVE-2021-44228 vulnerability.

educationexploitationpayload-generation+3

1.8k2 years ago

Archived

TPASLog4ShellPoC

carlos-mesquita/tpaslog4shellpoc

Proof of Concept for the Log4Shell vulnerability (CVE-2021-44228), developed as part of the coursework for the curricular unit TPAS in the Master's…

educationexploitationpayload-generation+3

12 years ago

Archived

CVE-2021-27928

laliea/cve-2021-27928

A Proof of Concept for the CVE-2021-27928 flaw exploitation

command-and-controleducationexploitation+3

3 years ago

Previous12…9 Next