Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

19 results

w3-total-cache-cve-2013-2010

spyata123/w3-total-cache-cve-2013-2010

Remote code execution running on w3 total cache cve 2013-2010

exploitationpayload-generationpenetration-testing+3

1 year ago

rails-cve-2012-5664-test

phusion/rails-cve-2012-5664-test

Demo app showing how the Rails CVE-2013-5664 vulnerability works.

code-analysisdatabase-securityeducation+2

213 years ago

grails-javamelody-sample-app

theratpack/grails-javamelody-sample-app

Grails sample application using the Javamelody 1.44 plugin to illustrate the CVE-2013-4378 vulnerability.

code-analysiseducationexploitation+2

13 years ago

ShellEvil

pentestingxroot/shellevil

Struts 2 DefaultActionMapper Interactive Shell Exploit for CVE-2013-225 [S2-016]

exploitationpayload-generationpenetration-testing+3

9 years ago

CVE-2021-26855-PoC

srvaccount/cve-2021-26855-poc

PoC exploit code for CVE-2021-26855

email-securityexploitationinformation-gathering+3

175 years ago

CVE-2013-3651

motikan2010/cve-2013-3651

CVE-2013-3651 PoC - EC-CUBE 2

exploitationinformation-gatheringpenetration-testing+2

26 years ago

CVE-2013-6117

milo2012/cve-2013-6117

CVE-2013-6117

authenticationexploitationiot-security+2

88 years ago

CVE-2013-3827

thistehneisen/cve-2013-3827

Quick PoC checker for common configurations that might be available via directory traversal due to CVE-2013-3827

exploitationinformation-gatheringpenetration-testing+2

13 years ago

CVE-2013-0156

oxben10/cve-2013-0156

This script is specifically designed to solve the challenge on PentesterLab for the CVE-2013-0156 exploit

educationexploitationlabs-practice+3

1 year ago

ACEDcup

grrrdog/acedcup

Payload generator for Java Binary Deserialization attack with Commons FileUpload (CVE-2013-2186)

exploitationpayload-generationpenetration-testing+2

3710 years ago

CVE-2013-2729

feliam/cve-2013-2729

Python-based exploit generator for Adobe Reader BMP/RLE heap corruption (CVE-2013-2729). Demonstrates arbitrary code execution via malicious BMP…

binary-exploitationexploitationfuzzing+3

246 years ago

cve-2013-3319

devoteam-cybertrust/cve-2013-3319

metasploit module for CVE-2013-3319 / SAP Security Note 1816536

exploit-frameworksinformation-gatheringpenetration-testing+3

13 years ago

CVE-2013-1965

cinno/cve-2013-1965

Proof-of-concept exploit for CVE-2013-1965 targeting Apache Struts 2, demonstrating remote code execution via crafted request parameters.

exploitationpayload-developmentpenetration-testing+2

111 years ago

CVE-2021-26855

hackerxj007/cve-2021-26855

CVE-2021-26855 exp

exploitationinformation-gatheringpenetration-testing+3

55 years ago

Nginx-CVE-2013-4547

cyberharsh/nginx-cve-2013-4547

Docker-based lab demonstrating Nginx CVE-2013-4547 URI parsing vulnerability with step-by-step exploitation for privilege bypass and code execution.

educationexploitationmisconfiguration+3

36 years ago

rails-exploit-cve-2013-0156

bsodmike/rails-exploit-cve-2013-0156

Bootstrapped Rails 3.2.10 to test the remote code exploit CVE-2013-0156

educationexploitationpenetration-testing+2

513 years ago

java-vulnerable

dannyendortest/java-vulnerable

EXPOSURE demo target: Tomcat (CVE-2016-0714) + Apache Rave (CVE-2013-1814) + Java filter-padding deps

educationlabs-practicemisconfiguration+3

5 months ago

SignHere

retr0-code/signhere

SignHere is implementation of CVE-2017-11882. SignHere is builder of malicious rtf document and VBScript payloads.

command-and-controlexploitationpayload-generation+3

65 years ago

Previous12 Next