Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

2728 results

CVE-2017-8570

erfze/cve-2017-8570

Python-based exploit for CVE-2017-8570, generating malicious RTF files with embedded SCT and EXE payloads for targeted exploitation.

exploitationpayload-generationpenetration-testing+2

6 years ago

Docker-Escape-Miner

epsteina16/docker-escape-miner

Code sample for using exploit CVE-2019-5736 to mine bitcoin with no association to original container or user.

container-escapeexploitationpayload-development+3

36 years ago

CVE-2024-34831

enzored/cve-2024-34831

Detailed disclosure of CVE-2024-34831: Stored XSS in GibbonEdu Core v26.0.00 leading to privilege escalation via crafted imageLink parameter and…

educationexploitationpenetration-testing+3

1 year ago

CVE-2024-1112

enessakircolak/cve-2024-1112

Proof-of-concept exploit for a heap overflow vulnerability in ResHacker.exe, generating a malicious payload file to trigger the overflow and…

binary-exploitationexploitationpayload-generation+2

2 years ago

CVE-2019-1221

edxsh/cve-2019-1221

Proof-of-concept exploit for CVE-2019-1221 targeting Internet Explorer 11 32-bit on Windows 10 x64 up to RS5, using VBScript.Encode and CVE-2019-0768…

exploitationpayload-generationvulnerability-analysis+1

15 years ago

CVE-2018-20250-WinRAR-ACE

easis/cve-2018-20250-winrar-ace

Proof of concept code in C# to exploit the WinRAR ACE file extraction path (CVE-2018-20250).

binary-exploitationexploitationpayload-generation+3

217 years ago

cve-2023-50164-poc

dwisiswant0/cve-2023-50164-poc

Proof of Concept for Path Traversal in Apache Struts ("CVE-2023-50164")

exploitationpayload-generationpenetration-testing+2

572 years ago

Struts2-048

dragoneeg/struts2-048

Python-based proof-of-concept exploit for CVE-2017-9791 (Apache Struts2 S2-048) with check and command execution modes for penetration testing.

exploitationpayload-generationpenetration-testing+2

279 years ago

CVE-2019-11932

dorkerdevil/cve-2019-11932

double-free bug in WhatsApp exploit poc

binary-exploitationexploitationmobile-security+3

2675 years ago

CVE-2015-3306

donmedfor/cve-2015-3306

Python PoC exploit for CVE-2015-3306 ProFTPD directory traversal. Copies files and drops a PHP backdoor into webroot for remote command execution via…

exploitationpayload-generationpenetration-testing+2

1 year ago

CVE-2024-50379

dear-cell/cve-2024-50379

Exploit script for CVE-2024-50379, automating JSP webshell upload and execution via a race condition in Apache Tomcat.

exploitationpayload-generationpenetration-testing+3

11 year ago

CVE-2020-11546

damit5/cve-2020-11546

Go-based proof-of-concept exploit for CVE-2020-11546, targeting a remote code execution vulnerability in SuperWebMailer 5.50. Provides a ready-to-use…

exploitationpayload-generationpenetration-testing+2

14 years ago

CVE-2021-4034

dadvlingd/cve-2021-4034

Multi-language PoC exploit collection for CVE-2021-4034 (polkit pkexec local privilege escalation), including C, Python2, and Python3 implementations…

exploitationpayload-generationpenetration-testing+2

203 years ago