Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Categories

Command and Control

C2 frameworks, redirectors, listeners, and command infrastructure tools.

Kitploit recommended

Top tools

10 selected
sliver preview#1

sliver

GitHubbishopfox/sliver
11.7k1 day ago
Mythic preview#2

Mythic

GitHubits-a-feature/mythic
4.7k26 days ago
Empire preview#4

Empire

GitHubbc-security/empire
5.2k1 month ago
merlin preview#6

merlin

GitHubne0nd0g/merlin
5.6k22 days ago
AdaptixC2 preview#8

AdaptixC2

GitHubadaptix-framework/adaptixc2
3.5k1 month ago
emp3r0r preview#9

emp3r0r

GitHubjm33-m0/emp3r0r
1.7k12h 17m ago
metasploit-framework preview#12

metasploit-framework

GitHubrapid7/metasploit-framework
38.8k8h 57m ago
kubesploit preview#13

kubesploit

GitHubcyberark/kubesploit
1.2k1 year ago
NetExec preview#14

NetExec

GitHubpennyw0rth/netexec
5.8k15h 48m ago
impacket preview#15

impacket

GitHubfortra/impacket
16.0k2 days ago
NewestRelevanceMost popularRecently updated
2545 results
CVE-2023-45158 preview

CVE-2023-45158

GitHubyifanzhg/cve-2023-45158

Proof-of-concept exploit for CVE-2023-45158, a command injection vulnerability in web2py. Demonstrates remote code execution via crafted HTTP…

payload-generationvulnerability-analysisexploitation+3
43 years ago
Command and Control — Page 79 | Kitploit
CVE-2011-2523-poc preview

CVE-2011-2523-poc

GitHub4m3rr0r/cve-2011-2523-poc

Python exploit for CVE-2011-2523 (VSFTPD 2.3.4 Backdoor Command Execution)

payload-generationvulnerability-analysisexploitation+3
42 years ago
CVE-2025-24893-XWiki-RCE preview

CVE-2025-24893-XWiki-RCE

GitHubhex00-0x4/cve-2025-24893-xwiki-rce

This vulnerability could allow a malicious user to execute remote code by sending appropriately crafted requests to the default search engine…

reconnaissancevulnerability-analysisexploitation+3
61 year ago
CVE-2024-23692 preview

CVE-2024-23692

GitHubnanowraith/cve-2024-23692

Proof-of-concept exploit for CVE-2024-23692, demonstrating command injection in HFS via crafted HTTP requests to execute system commands and retrieve…

vulnerability-analysisexploitationweb-application-exploitation+2
42 years ago
CVE-2025-48703 preview

CVE-2025-48703

GitHubskynoxk/cve-2025-48703

Remote Code execution in CentOS web panel

vulnerability-analysisexploitationweb-application-exploitation+3
31 year ago
CVE-2026-63030 preview

CVE-2026-63030

GitHublangz337/cve-2026-63030

Python exploit tool chaining CVE-2026-63030 REST batch-route confusion with CVE-2026-60137 SQL injection to achieve unauthenticated WordPress RCE,…

privilege-escalationvulnerability-scannersexploitation+8
11 month ago
CVE-2026-24061 preview

CVE-2026-24061

GitHub0xblackash/cve-2026-24061

CVE-2026-24061

privilege-escalationvulnerability-analysisexploitation+3
121 days ago
cve-2025-11953-vulnerability-demo preview

cve-2025-11953-vulnerability-demo

GitHubsaidbenaissa/cve-2025-11953-vulnerability-demo

CVE-2025-11953 demonstration: Critical RCE vulnerability in React Native CLI (CVSS 9.8). Educational security research with proof-of-concept exploits…

vulnerability-analysisexploitationweb-application-exploitation+3
41 year ago
CVE-2021-26084_Confluence preview

CVE-2021-26084_Confluence

GitHubprettyrecon/cve-2021-26084_confluence

CVE-2021-26084 - Confluence Pre-Auth RCE OGNL injection 回显

vulnerability-analysisexploitationweb-application-exploitation+3
15 years ago
poc-2025-9074 preview

poc-2025-9074

GitHubxwpdx0/poc-2025-9074

Docker API CVE-2025-9074 PoC (Proof-Of-Concept). A sophisticated exploitation framework for CVE-2025-9074, targeting unauthenticated Docker API…

cloud-infrastructure-securityprivilege-escalationvulnerability-scanners+7
411 months ago
multicat preview

multicat

GitHubdakotanelson/multicat

PoC RAT using the sneaky-creeper data exfiltration library

data-exfiltrationpost-exploitationcommand-and-control+3
310 years ago
vSphereyeeter preview

vSphereyeeter

GitHubpettyhacks/vsphereyeeter

POC exploit for CVE-2021-21972

vulnerability-analysisexploitationpenetration-testing+3
34 years ago
CVE-2018-2628 preview

CVE-2018-2628

GitHublikekabin/cve-2018-2628

Python exploit for CVE-2018-2628 targeting WebLogic servers, providing remote command execution via a JSP webshell with interactive cmd interface.

vulnerability-analysisexploitationweb-application-exploitation+2
38 years ago
StrutsShell preview

StrutsShell

GitHubfalcon-lnhg/strutsshell

Interactive command-line shell for exploiting Apache Struts CVE-2017-5638. Automates HTTP/HTTPS exploitation with real-time shell interaction on…

vulnerability-analysisexploitationweb-application-exploitation+3
39 years ago
Apache-Log4j-POC preview

Apache-Log4j-POC

GitHubbadb33f/apache-log4j-poc

Proof of Concept of apache log4j LDAP lookup vulnerability. CVE-2021-44228

payload-generationvulnerability-analysisexploitation+2
34 years ago
bitbucket-cve-2022-36804 preview

bitbucket-cve-2022-36804

GitHubvulnmachines/bitbucket-cve-2022-36804

CVE-2022-36804 Atlassian Bitbucket Command Injection Vulnerability

vulnerability-analysisexploitationweb-application-exploitation+2
34 years ago
CVE-2021-26828-Ultimate preview

CVE-2021-26828-Ultimate

GitHubridpath/cve-2021-26828-ultimate

ScadaFlare Authenticated RCE Exploit Framework for ScadaBR (CVE-2021-26828) OpenPLC ScadaBR

payload-generationvulnerability-analysisexploitation+6
511 months ago
CVE-2022-36446 preview

CVE-2022-36446

GitHubemirpolatt/cve-2022-36446

CVE-2022-36446 - Webmin 1.996 Remote Code Execution

vulnerability-analysisexploitationweb-application-exploitation+3
34 years ago
Previous1…787980…100Next