Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

35 results

edb-49263-fixed

xenophil90/edb-49263-fixed

Fixed version of the Python script to exploit CVE-2018-19571 and CVE-2018-19585 (GitLab 11.4.7 - Authenticated Remote Code Execution) that is…

exploitationpenetration-testingremote-access-tool+2

5 years ago

CVE-2018-1000861

smokeintheshell/cve-2018-1000861

CVE-2018-1000861 Exploit

command-and-controlexploitationpenetration-testing+3

3 years ago

CVE-2018-5955

mikethehash/cve-2018-5955

An exploit for CVE-2018-5955 GitStack 2.3.10 Unauthenticated RCE

educationexploitationpenetration-testing+3

101 year ago

CVE-2018-10933

blacknbunny/cve-2018-10933

Exploit for CVE-2018-10933 (LibSSH authentication bypass) enabling unauthenticated shell access to vulnerable SSH servers with version detection and…

exploitationpenetration-testingremote-access-tool+1

4983 years ago

CVE-2018-11235

rogdham/cve-2018-11235

PoC exploit for CVE-2018-11235 allowing RCE on git clone --recurse-submodules

command-and-controlexploitationpayload-generation+2

485 years ago

CVE-2018-7750

jm33-m0/cve-2018-7750

an RCE (remote command execution) approach of CVE-2018-7750

exploitationpayload-developmentpenetration-testing+2

217 years ago

CVE-2018-14772

killvxk/cve-2018-14772

RCE exploit for CVE-2018-14772

exploitationpayload-generationpenetration-testing+2

17 years ago

node-cve-2018-4407

samdecrock/node-cve-2018-4407

Node.js PoC exploit code for CVE-2018-4407

exploitationpayload-generationpenetration-testing+3

107 years ago

CVE-2018-6546-Exploit

securifera/cve-2018-6546-exploit

CVE-2018-6546-Exploit

binary-exploitationexploitationpenetration-testing+2

418 years ago

paint2die

lucaskatashi/paint2die

Simplest and most reliable RichFaces Paint2DResource CVE-2018-12533 RF-14310 exploit PoC

exploitationpayload-generationpenetration-testing+3

111 months ago

GPON-LOADER

choudai/gpon-loader

Exploit loader for Remote Code Execution w/ Payload on GPON Home Gateway devices (CVE-2018-10562) written in Python.

exploitationiot-securitypayload-generation+3

28 years ago

Pingpon-Exploit

649/pingpon-exploit

Exploit for Mass Remote Code Execution on GPON home routers (CVE-2018-10562) obtained from Shodan.

exploitationosintreconnaissance+3

248 years ago

CVE-2018-18925

j4k0m/cve-2018-18925

Exploit for CVE-2018-18925: Remote Code Execution in Gogs via directory traversal in session handling, enabling session bypass and administrator…

exploitationpayload-developmentpenetration-testing+3

75 years ago

drupal8-REST-RCE

ludy-dev/drupal8-rest-rce

Python exploit script for Drupal 8 REST RCE vulnerabilities (CVE-2019-6340, CVE-2018-7600) enabling remote code execution on target systems via…

exploitationpenetration-testingremote-access-tool+2

45 years ago

CVE-2018-20718

us3r777/cve-2018-20718

Proof-of-concept exploit for CVE-2018-20718, a PHP object injection vulnerability in Pydio before 8.2.1 enabling unauthenticated remote code…

code-analysisexploitationpenetration-testing+3

37 years ago

CVE-2018-14847

yukar1z0e/cve-2018-14847

Exploit for CVE-2018-14847 targeting MikroTik RouterOS to create a global proxy and extract credentials via PPTP server setup.

exploitationnetwork-securitypenetration-testing+2

16 years ago

weblogic-cve-2018-2628

cscadoge/weblogic-cve-2018-2628

Exploit for CVE-2018-2628 targeting Oracle WebLogic Server deserialization vulnerability, enabling remote code execution via ysoserial JRMP listener.

exploitationpayload-developmentpenetration-testing+3

4 years ago

Jmeter-CVE-2018-1297-

48484848484848/jmeter-cve-2018-1297-

Dockerized vulnerable Apache JMeter RMI environment for CVE-2018-1297 deserialization RCE, with ysoserial exploit commands, verification, and…

command-and-controlexploitationpayload-generation+3

2 years ago

Previous12 Next