Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

533 results

text4shell-exploit

syndicate27/text4shell-exploit

A custom Python-based proof-of-concept (PoC) exploit targeting Text4Shell (CVE-2022-42889), a critical remote code execution vulnerability in Apache…

educationexploitationpayload-generation+3

1 year ago

cve-2022-42475-poc

ull0a/cve-2022-42475-poc

Proof of Concept (PoC) for research and controlled laboratory validation of CVE-2022-42475, a critical heap-based buffer overflow vulnerability…

exploitationpenetration-testingred-teaming+3

11 month ago

Spring4Shell-POC

bobtheshoplifter/spring4shell-poc

Spring4Shell Proof Of Concept/And vulnerable application CVE-2022-22965

exploitationpayload-generationvulnerability-analysis+1

3783 years ago

CVE-2022-0739

chris01s/cve-2022-0739

Simple bash script to automate the exploit of cve 2022 0739

exploitationpenetration-testingvulnerability-analysis+1

43 years ago

CVE-2022-22980

trganda/cve-2022-22980

Proof-of-concept exploit for CVE-2022-22980 targeting Spring Data MongoDB. Demonstrates remote code execution via crafted MongoDB queries. Requires…

database-securityexploitationvulnerability-analysis+1

324 years ago

CVE-2022-22965-Spring4Shell

jakabakos/cve-2022-22965-spring4shell

PoC and exploit for CVE-2022-22965 Spring4Shell

educationexploitationpayload-development+3

23 years ago

CVE-2022-41852

warxim/cve-2022-41852

CVE-2022-41852 Proof of Concept (unofficial)

code-analysisexploitationpayload-development+3

744 years ago

CVE-2022-42889-RCE

cryxnet/cve-2022-42889-rce

Proof of Concept for CVE-2022-42889 (Text4Shell Vulnerability)

educationexploitationpayload-development+3

153 years ago

follina_cve_2022-30190

amitniz/follina_cve_2022-30190

proof of concept to CVE-2022-30190 (follina)

educationexploitationpayload-generation+3

24 years ago

CS4239-Spring4Shell-POC

xenosf/cs4239-spring4shell-poc

CVE-2022-22965 proof of concept for CS4239 report

educationexploitationlabs-practice+2

11 months ago

CVE-2022-42889-text4shell

kljunowsky/cve-2022-42889-text4shell

Proof-of-concept exploit for CVE-2022-42889 (Text4Shell) in Apache Commons Text, with manual and mass exploitation scripts using script, URL, and DNS…

exploitationinformation-gatheringpayload-generation+3

582 years ago

refreshing-soap-exploit

rbowes-r7/refreshing-soap-exploit

A PoC exploit for CVE-2022-41622 - a CSRF in F5 BIG-IP control plane that leads to remote root

command-and-controlexploitationpayload-development+7

224 years ago

unrar-cve-2022-30333-poc

rbowes-r7/unrar-cve-2022-30333-poc

Proof-of-concept exploit for CVE-2022-30333 path traversal in unRAR, generating malicious .rar files to plant payloads at arbitrary locations.…

exploitationexploit-frameworkspayload-generation+3

144 years ago

CVE-2022-1421

nb1b3k/cve-2022-1421

Proof-of-concept exploit for CVE-2022-1421, a CSRF vulnerability in Discy WordPress theme allowing admin settings modification via crafted AJAX…

educationexploitationpenetration-testing+2

73 years ago

CVE-2022-31061

wangyanan131/cve-2022-31061

PoC for GLPI CVE-2022-31061

exploitationpenetration-testingvulnerability-analysis+1

44 years ago

CVE-2022-38553

4websecurity/cve-2022-38553

Proof-of-concept for reflected cross-site scripting in Academy LMS versions before 5.9.1, triggered via the search?query parameter to execute…

exploitationpenetration-testingvulnerability-analysis+2

24 years ago

CVE-2022-30333

rakhithjk/cve-2022-30333

Generates malicious RAR archives exploiting a path traversal vulnerability in unRAR to plant files at arbitrary locations, demonstrated with a Zimbra…

exploitationexploit-frameworkspayload-generation+3

4 years ago

victorian_machinery

jbaines-r7/victorian_machinery

Proof of concept exploit for CVE-2022-30525 (Zxyel firewall command injection)

command-and-controlexploitationpenetration-testing+3

304 years ago

Previous12…30 Next