Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

33 results

modelaudit

promptfoo/modelaudit

Security scanner for AI/ML model files. Detects malicious code, backdoors, and vulnerabilities before deployment

adversarial-attackai-securitydata-exfiltration+8

4 days ago

CVE-2024-3094

isuruwa/cve-2024-3094

Minimal CVE-2024-3094 reference repository documenting the xz backdoor vulnerability, affected versions (5.6.0/5.6.1), and mitigation steps. Includes…

curated-resourceseducationsupply-chain-security+2

2 years ago

PHP-8.1.0-dev-Backdoor

k3ystr0k3r/php-8.1.0-dev-backdoor

PHP 8.1.0-dev User-Agentt Backdoor Remote Code Execution (RCE)

exploitationpayload-developmentsupply-chain-security+3

12 months ago

Arcane

tokyoneon/arcane

Arcane is a simple script designed to backdoor iOS packages (iphone-arm) and create the necessary resources for APT repositories.

educationios-securitymobile-security+3

1576 years ago

lab_xz_backdoor

stevehenderson/lab_xz_backdoor

Some labs looking at the xz backdoor vulnerability (CVE-2024-3094)

educationexploitationforensics+6

2 months ago

ElfDoor-gcc

matheuzsecurity/elfdoor-gcc

LD_PRELOAD-based tool that hijacks gcc to inject malicious code into binaries during linking, enabling stealthy backdoor deployment without source…

binary-exploitationpersistence-mechanismssupply-chain-security

1331 year ago

xz-backdoor-research

nnatsopoulos/xz-backdoor-research

CVE-2024-3094 XZ Utils backdoor research - attack surface visualiser, system vulnerability checker, and general Linux CVE assessment tool

educationforensicsincident-response+5

12 months ago

CVE-2024-3094-XZ-Backdoor-Detector

devjanger/cve-2024-3094-xz-backdoor-detector

Shell script to detect the CVE-2024-3094 backdoor in XZ Utils by checking for malicious code in liblzma build artifacts and identifying affected…

forensicsincident-responsemalware-analysis+3

2 years ago

claude-code-backdoor

s0ld13rr/claude-code-backdoor

Backdooring Claude Code via hooks in settings.json. Authorized use only!

educationmalware-analysispenetration-testing+4

864 months ago

cve-2024-3094-tools

jfrog/cve-2024-3094-tools

Shell-based scanner to detect the XZ Backdoor (CVE-2024-3094) vulnerability in files and directories, enabling rapid identification and mitigation of…

forensicsincident-responsemalware-analysis+3

452 years ago

Detectar-Backdoor-en-liblzma-de-XZ-utils-CVE-2024-3094-

fevar54/detectar-backdoor-en-liblzma-de-xz-utils-cve-2024-3094-

Regla YARA para detectar el backdoor de liblzma en XZ Utils 5.6.0/5.6.1 (CVE-2024-3094).

incident-responseintrusion-detectionioc-management+3

2 years ago

CVE-2024-3094

mightysai1997/cve-2024-3094

Shell scripts to detect CVE-2024-3094 backdoor in liblzma5 across Kubernetes pods and Docker containers, with SBOM generation via Trivy for…

cloud-securitycontainer-securitydevsecops+3

2 years ago

xz-cve-2024-3094

0xlane/xz-cve-2024-3094

XZ Backdoor Extract(Test on Ubuntu 23.10)

binary-analysisexploitationforensics+3

172 years ago

CVE-2024-3094-XZ-Utils-Check

jbnetwork-git/cve-2024-3094-xz-utils-check

Shell script to check if your system has a vulnerable version of XZ Utils affected by CVE-2024-3094, enabling quick detection of the supply-chain…

general-purpose-utilitiesscripting-automationsupply-chain-security+2

32 years ago

Archived

xz-backdoor-links

przemoc/xz-backdoor-links

apocalypxze: xz backdoor (2024) AKA CVE-2024-3094 related links

curated-resourceseducationpapers-research+3

32 years ago

threat-intel-cve-2024-3094

24owais/threat-intel-cve-2024-3094

Threat intelligence report analyzing the xz-utils backdoor vulnerability (CVE-2024-3094)

educationincident-responsepapers-research+3

11 year ago

CS50FinalProject

m1lo25/cs50finalproject

Investigation into the XZ Utils backdoor (CVE-2024-3094): chronology, attack chain, risk to SSH, and supply-chain insights. Includes slides, sources,…

curated-resourceseducationincident-response+3

110 months ago

CVE-2024-3094

h3raklez/cve-2024-3094

Educational lab replicating the XZ Utils backdoor (CVE-2024-3094) with a custom Ed448 key pair. Includes a patched liblzma, systemd service, and…

cryptographyeducationexploitation+5

5 months ago

Previous12 Next