Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

91 results

CVE-2020-13937

kailing0220/cve-2020-13937

Apache Kylin有一个restful api会在没有任何认证的情况下暴露配置信息

exploitationmisconfigurationpenetration-testing+3

14 years ago

FC3er

im-hanzou/fc3er

Automatic Mass Tool for checking vulnerability in CVE-2022-0591 - Formcraft3 < 3.8.28 - Unauthenticated SSRF

exploitationpenetration-testingvulnerability-scanners+1

13 years ago

CVE-2022-29361_Werkzeug_Client-Side-Desync-to-XSS

l3ragio/cve-2022-29361_werkzeug_client-side-desync-to-xss

Proof-of-concept exploit for CVE-2022-29361, demonstrating client-side desync to XSS in Werkzeug. Tested on Chromium.

exploitationpenetration-testingvulnerability-analysis+2

12 years ago

Joomla-CVE-Detector-CVE-2022-27913-

cameron-coding-projects/joomla-cve-detector-cve-2022-27913-

Detect Joomla instances vulnerable to CVE-2022-27913 with a lightweight Python scanner for rapid identification and reporting.

information-gatheringreconnaissancevulnerability-analysis+2

111 months ago

CVE-2022-43097

nibin-m/cve-2022-43097

All details about CVE-2022-43097

exploitationpenetration-testingvulnerability-analysis+2

13 years ago

CVE-2022-40684

ccordeiro/cve-2022-40684

PoC for CVE-2022-40684 - Authentication bypass lead to Full device takeover (Read-only)

authenticationexploitationinformation-gathering+3

11 months ago

CVE-2022-0165

cappricio-securities/cve-2022-0165

WordPress Page Builder KingComposer <=2.9.6 - Open Redirect

information-gatheringpenetration-testingvulnerability-scanners+1

2 years ago

CVE-2022-23779

rishi-kaul/cve-2022-23779

CVE-2022-23779 is a security vulnerability in Zoho ManageEngine Desktop Central ,Testing for CVE-2022-23779 using curl

exploitationinformation-gatheringpenetration-testing+3

9 months ago

dfir-malware-investigation

suyash-r-k/dfir-malware-investigation

Spring4Shell (CVE-2022-22965) DFIR lab with exploit simulation, Python WAF, IOC-based detection, and PCAP analysis.

digital-forensicseducationincident-response+9

8 months ago

CVE-2022-22536_SAP_Request_Smuggling_Scanner

abrewer251/cve-2022-22536_sap_request_smuggling_scanner

Fast, socket-level scanner for detecting CVE-2022-22536 in SAP ICM or Web Dispatcher instances. Performs request smuggling tests with a crafted…

exploitationnetwork-securitypenetration-testing+3

11 months ago

jquery-cve-2022-31160

cyberone-teamares/jquery-cve-2022-31160

jquery XSS Proof of Concept (PoC)

ctfeducationexploitation+3

1 year ago

CVE-2022-45354

randomrobbiebf/cve-2022-45354

Download Monitor <= 4.7.60 - Sensitive Information Exposure via REST API

api-securityexploitationinformation-gathering+3

3 years ago

CVE-2023-27997-POC

node011/cve-2023-27997-poc

Fortigate SSL VPN buffer overflow exploit

educationexploitationpenetration-testing+2

1 year ago

lblfixer_cve_2022_31181

drkbcn/lblfixer_cve_2022_31181

Module for PrestaShop 1.6.1.X/1.7.X to fix CVE-2022-31181 / CVE-2022-36408 vulnerability (Chain SQL Injection)

database-securitymisconfigurationvulnerability-analysis+1

4 years ago

PoC-for-ME-SAML-Vulnerability

shameem-testing/poc-for-me-saml-vulnerability

PoC for cve-2022-47966

exploitationpenetration-testingvulnerability-analysis+2

3 years ago

CVE-2022-40684

dkstar11q/cve-2022-40684

Authentication bypass exploit for CVE-2022-40684 targeting FortiOS, FortiProxy, and FortiSwitchManager. Checks vulnerability and overwrites admin SSH…

authenticationexploitationpenetration-testing+3

4 years ago

CVE-2022-21661-Technical-Analysis

7rootsec/cve-2022-21661-technical-analysis

Proof-of-concept and technical analysis for CVE-2022-21661, a WordPress SQL injection vulnerability, including root-cause breakdown, exploitation…

educationlabs-practicepenetration-testing+3

7 months ago

CVE-2022-0739

g01d3nw01f/cve-2022-0739

Proof-of-concept exploit for CVE-2022-0739, an SQL injection vulnerability in the BookingPress WordPress plugin before version 1.0.11.

exploitationpenetration-testingvulnerability-analysis+2

3 years ago

Previous 1 2 345 6 Next