Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

193 results

CVE-2020-23590

huzaifahussain98/cve-2020-23590

CSRF leads to change the password for "WLAN SSID"

embedded-systems-securityexploitationiot-security+3

3 years ago

PoC

mcw0/poc

Issues has been disabled for these PoC's, as they are simply PoC, Public Domain and unsupported.

binary-exploitationembedded-systems-securityexploitation+5

7833 years ago

CVE-2018-9995_dvr_credentials

ezelf/cve-2018-9995_dvr_credentials

(CVE-2018-9995) Get DVR Credentials

exploitationiot-securitypassword-attacks+3

5578 years ago

sagemcom-fast-3890-exploit

lyrebirds/sagemcom-fast-3890-exploit

Exploit for Sagemcom F@ST 3890 cable modem implementing Cable Haunt vulnerability to achieve remote code execution via WebSocket-based buffer…

binary-exploitationembedded-systems-securityexploitation+4

2236 years ago

CVE-2022-30075

aaronsvk/cve-2022-30075

Tp-Link Archer AX50 Authenticated RCE (CVE-2022-30075)

embedded-systems-securityexploitationhardware-security+3

2354 years ago

Xiaomi_Mi_WiFi_R3G_Vulnerability_POC

ultramangaia/xiaomi_mi_wifi_r3g_vulnerability_poc

A login bypass(CVE-2019-18371) and a command injection vulnerability(CVE-2019-18370) in Xiaomi Router R3G up to version 2.28.23.

exploitationiot-securitypenetration-testing+2

1856 years ago

CVE-2021-36260

cuerz/cve-2021-36260

海康威视RCE漏洞批量检测和利用工具

exploitationiot-securitypenetration-testing+3

1694 years ago

DVR-Exploiter

cyb0r9/dvr-exploiter

Bash script exploiting CVE-2018-9995 to extract credentials from vulnerable DVRs via web interface, supporting multiple DVR brands for automated…

exploitationiot-securityvulnerability-analysis+1

1128 years ago

PS4-webkit-exploit-6.XX

synacktiv/ps4-webkit-exploit-6.xx

Webkit exploit that give arbitrary R/W on 6.XX PS4 firmwares

binary-exploitationembedded-systems-securityexploitation+1

605 years ago

CVE-2018-18852

hook-s3c/cve-2018-18852

Authenticated remote code execution exploit for CERIO routers (DT300N, DT100G, AMR-3204, WMR-200N) using vendor default credentials. Python PoC…

embedded-systems-securityexploitationiot-security+4

457 years ago

CVE-2023-43261

win3zz/cve-2023-43261

CVE-2023-43261 - Credential Leakage Through Unprotected System Logs and Weak Password Encryption

exploitationiot-securitymisconfiguration+3

573 years ago

DIR8xx_PoC

embedi/dir8xx_poc

Proof-of-Concept exploits for D-Link DIR8xx routers

binary-exploitationembedded-systems-securityexploitation+3

379 years ago

TP-Link-WDR-Router-Command-injection_POC

afang5472/tp-link-wdr-router-command-injection_poc

CVE-2019-6487. A command injection vulnerability in TP-Link WDR5620 Series up to verion 3.

exploitationiot-securitypenetration-testing+2

417 years ago

CVE-2023-35086-POC

tin-z/cve-2023-35086-poc

POC of CVE-2023-35086 only DoS

embedded-systems-securityexploitationfuzzing+3

443 years ago

FlashHax

fullmetal5/flashhax

An implementation of CVE-2016-0974 for the Nintendo Wii.

embedded-systems-securityexploitationhardware-iot-security+2

492 years ago

CVE-2023-35803

lachlan2k/cve-2023-35803

PoC exploit for CVE-2023-35803 unauthenticated buffer overflow in Aerohive HiveOS/Extreme Networks IQ Engine, enabling remote code execution on…

exploitationiot-securitypenetration-testing+3

233 years ago

watchTowr-vs-SonicWall-PreAuth-RCE-Chain

watchtowrlabs/watchtowr-vs-sonicwall-preauth-rce-chain

PoC exploit chain for pre-authentication remote code execution on SonicWall SMA 100 appliances exploiting CVE-2023-44221 and CVE-2024-38475.

embedded-systems-securityexploitationpenetration-testing+3

191 year ago

ConceptronicIPCam_MultipleVulnerabilities

dreadlocked/conceptronicipcam_multiplevulnerabilities

[CVE-2018-6407 & CVE-2018-6408] Conceptronic IPCam Administration panel CSRF and Denial of Service

exploitationiot-securityvulnerability-analysis+1

98 years ago

Previous 1 234…11 Next