Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

C2 frameworks, redirectors, listeners, and command infrastructure tools.

Kitploit recommended

Top tools

10 selected

sliver

bishopfox/sliver

11.7k2 days ago

Mythic

its-a-feature/mythic

4.7k15 days ago

Empire

bc-security/empire

5.2k1 month ago

merlin

ne0nd0g/merlin

5.6k12 days ago

AdaptixC2

adaptix-framework/adaptixc2

3.5k1 month ago

emp3r0r

jm33-m0/emp3r0r

1.7k1h 57m ago

#12

metasploit-framework

rapid7/metasploit-framework

38.8k22h 17m ago

#13

kubesploit

cyberark/kubesploit

1.2k1 year ago

#14

NetExec

pennyw0rth/netexec

5.8k17h 8m ago

#15

impacket

fortra/impacket

16.0k19h 25m ago

Newest Relevance Most popular Recently updated

2524 results

CVE-2026-41179

pssec-io/cve-2026-41179

POC for CVE-2026-41179

vulnerability-analysisexploitationweb-application-exploitation+5

14 months ago

CVE-2022-22963

puckiestyle/cve-2022-22963

Proof-of-concept exploit for CVE-2022-22963 (Spring Cloud Function SpEL injection) with detection script and curl-based RCE payload generation.

payload-generationvulnerability-analysisexploitation+2

14 years ago

connectwise-automate-AiTM-rce

synap5e/connectwise-automate-aitm-rce

Writeup and code for CVE-2025-11492, CVE-2025-11493 - RCE in ConnctWise Automate RMM via Adversary-in-the-Middle

privilege-escalationpersistence-mechanismsvulnerability-analysis+8

111 months ago

SneeitScanner-CVE-2025-6389

itsismarcos/sneeitscanner-cve-2025-6389

SneeitScanner - PoC & Scanner para RCE não autenticada no Sneeit Framework (CVE-2025-6389)

vulnerability-scannerspayload-generationexploitation+3

110 months ago

React2Shell

prowlsec/react2shell

An advanced command-line framework for discovery, validation, and exploitation of CVE-2025-55182 and CVE-2025-66478 affecting Next.js applications…

vulnerability-scannerspayload-generationexploitation+4

110 months ago

CVE-2026-23744-RCE-for-MCPjam-inspector-v1.4.2

srginebras/cve-2026-23744-rce-for-mcpjam-inspector-v1.4.2

Python exploit for CVE-2026-23744 achieving remote code execution via crafted POST requests to the /api/mcp/connect endpoint in MCPJam Inspector <=…

vulnerability-analysisexploitationweb-application-exploitation+3

14 months ago

CVE-2026-36356

totekuh/cve-2026-36356

CVE-2026-36356: MeiG Smart FORGE_SLT711 GoAhead - Unauthenticated OS Command Injection (RCE as root)

iot-securityvulnerability-analysisexploitation+4

15 months ago

OpenWire-CVE-2023-46604-Investigation

aelshimony-cloud/openwire-cve-2023-46604-investigation

Incident response walkthrough analyzing CVE-2023-46604 exploitation of Apache ActiveMQ via OpenWire, including PCAP analysis, IOC identification, and…

ioc-managementpacket-sniffing-analysisvulnerability-analysis+7

4 months ago

SOC336-Windows-OLE-Zero-Click-RCE-Exploitation-Detected-CVE-2025-21298

abc1230940/soc336-windows-ole-zero-click-rce-exploitation-detected-cve-2025-21298

SOC336 - Windows OLE Zero-Click RCE Exploitation Detected (CVE-2025-21298) Walkthrough

vulnerability-analysisexploitationlateral-movement+9

5 months ago

CVE-2026-46368-OpenWrt-Exploit

iwallplace/cve-2026-46368-openwrt-exploit

Proof of Concept exploit for CVE-2026-46368 — authenticated root command injection in OpenWrt luci-app-https-dns-proxy (EDB-52521)

vulnerability-analysisexploitationweb-application-exploitation+3

14 months ago

CVE-2025-55182-react2shell

saturate/cve-2025-55182-react2shell

A bash scanner for detecting CVE-2025-55182 vulnerability in Next.js applications. And a PoC nodejs script

vulnerability-scannersexploitationshellcode+5

13 months ago

tanstack-compromise-checker

ry-allan/tanstack-compromise-checker

Detects CVE-2026-45321 (TanStack supply chain compromise) and Mini Shai-Hulud worm artifacts. Scans node_modules, lockfiles, persistence hooks…

ioc-managementvulnerability-scannerspersistence-mechanisms+6

5 months ago

CVE-2022-1388-EXP

linjacck/cve-2022-1388-exp

CVE-2022-1388-EXP可批量实现攻击

payload-generationvulnerability-analysisexploitation+3

14 years ago

CVE-2023-0830

xbz0n/cve-2023-0830

Exploit for EasyNAS version 1.1.0. The vulnerability exploited is a command injection flaw, which requires authentication.

payload-generationexploitationweb-application-exploitation+3

11 year ago

CVE-2020-8816

martinsohn/cve-2020-8816

A PoC for CVE-2020-8816 that does not use $PATH but $PWD and globbing

vulnerability-analysisexploitationweb-application-exploitation+3

14 years ago

CVE-2007-2447

aviksaikat/cve-2007-2447

automated script for exploiting CVE-2007-2447

payload-generationvulnerability-analysisexploitation+2

13 years ago

EpSiLoNPoInT-

epsilonpoint88-glitch/epsilonpoint-

Modular exploit framework targeting CVE-2026-23550 in WordPress, featuring mass exploitation, obfuscation, post-exploitation, and Docker-based C2…

privilege-escalationvulnerability-scannerspersistence-mechanisms+7

18 months ago

CVE-2026-46420

jvr2022/cve-2026-46420

PoC for CVE-2026-46420, command injection in shivammathur/setup-php via repository-controlled PHP version resolution.

vulnerability-analysisexploitationweb-application-exploitation+3

13 months ago

Previous 1…99100Next

Command and Control — Page 100 | Kitploit