Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Categories

Command and Control

C2 frameworks, redirectors, listeners, and command infrastructure tools.

Kitploit recommended

Top tools

10 selected
sliver preview#1

sliver

GitHubbishopfox/sliver
11.7k7 days ago
Mythic preview#2

Mythic

GitHubits-a-feature/mythic
4.7k21 days ago
Empire preview#4

Empire

GitHubbc-security/empire
5.2k1 month ago
merlin preview#6

merlin

GitHubne0nd0g/merlin
5.6k17 days ago
AdaptixC2 preview#8

AdaptixC2

GitHubadaptix-framework/adaptixc2
3.5k1 month ago
emp3r0r preview#9

emp3r0r

GitHubjm33-m0/emp3r0r
1.7k10h 18m ago
metasploit-framework preview#12

metasploit-framework

GitHubrapid7/metasploit-framework
38.8k1 day ago
kubesploit preview#13

kubesploit

GitHubcyberark/kubesploit
1.2k1 year ago
NetExec preview#14

NetExec

GitHubpennyw0rth/netexec
5.8k1 day ago
impacket preview#15

impacket

GitHubfortra/impacket
16.0k2 days ago
NewestRelevanceMost popularRecently updated
2536 results
CVE-2026-40176-poc preview

CVE-2026-40176-poc

GitHubsaku0512/cve-2026-40176-poc

Proof-of-concept for CVE-2026-40176, an OS command injection in Composer's Perforce driver allowing remote code execution via crafted composer.json.

vulnerability-analysisexploitationweb-application-exploitation+3
24 months ago
Flowise-CVE-2026-58057-exploit preview

Flowise-CVE-2026-58057-exploit

GitHubcerberusmrxi/flowise-cve-2026-58057-exploit

Flowise Windows RCE exploit for CVE-2026-58057. Bypasses environment variable validation via case-sensitive flaw. Uses node_options to inject…

persistence-mechanismsvulnerability-analysisexploitation+7
13 months ago
CVE-2025-55182-React2Shell-RCE preview

CVE-2025-55182-React2Shell-RCE

GitHubsyrins/cve-2025-55182-react2shell-rce

A modern, user-friendly GUI application for detecting and exploiting the CVE-2025-55182 vulnerability in React Server Components. Built with Python…

vulnerability-scannerspayload-generationexploitation+4
310 months ago
CVE-2019-17558_Solr_Vul_Tool preview

CVE-2019-17558_Solr_Vul_Tool

GitHubthelostworldfree/cve-2019-17558_solr_vul_tool

CVE-2019-17558 Solr模板注入漏洞图形化一键检测工具。CVE-2019-17558 Solr Velocity Template Vul POC Tool.

vulnerability-scannerspayload-generationexploitation+3
16 years ago
TOTOLINK_poc preview

TOTOLINK_poc

GitHubningxin2002/totolink_poc

TOTOLINK A6000R 命令执行漏洞（CVE-2024-41319）

vulnerability-analysisexploitationweb-application-exploitation+2
21 year ago
PNGboomer-CVE-2026-77622 preview

PNGboomer-CVE-2026-77622

GitHubsqu1shification/pngboomer-cve-2026-77622

Sliver HTTP(S) C2 PNG bomb DoS exploit — GHSA-663m-7x7m-g4fw (CVE-2026-77622)

vulnerability-analysisexploitationpenetration-testing+2
12 months ago
CVE-2024-29973 preview

CVE-2024-29973

GitHubaerchy/cve-2024-29973

Proof-of-concept exploit for CVE-2024-29973, a remote command injection in Zyxel NAS devices, demonstrating arbitrary command execution via crafted…

vulnerability-analysisexploitationweb-application-exploitation+2
22 years ago
struts2-tool preview

struts2-tool

GitHubgu-007/struts2-tool

Struts2 S2-045/S2-046 CVE-2017-5638 detection & exploitation tool

vulnerability-scannersexploitationweb-application-exploitation+5
11 month ago
Project-CVE-2026-33017 preview

Project-CVE-2026-33017

GitHube4zyy/project-cve-2026-33017

CVE-2026-33017 - Langflow Unauthenticated RCE Exploit

reconnaissancepersistence-mechanismsvulnerability-analysis+6
12 months ago
CVE-2019-0232 preview

CVE-2019-0232

GitHubdharan10/cve-2019-0232

Hi this is a revised and enhanced code for CVE-2019-0232

payload-generationexploitationweb-application-exploitation+3
21 year ago
CVE-2026-64638 preview

CVE-2026-64638

GitHubzildanz/cve-2026-64638

Node.js exploit for CVE-2026-64638 that runs an ngrok tunnel to a malicious endpoint, enabling remote access and post-exploitation control.

exploitationpost-exploitationpenetration-testing+3
12 months ago
CVE-2026-76060_ZoneMinder_CommandInjection-PoC preview

CVE-2026-76060_ZoneMinder_CommandInjection-PoC

GitHubinvestigato/cve-2026-76060_zoneminder_commandinjection-poc

Proof-of-concept exploit for CVE-2026-76060, an OS command injection in ZoneMinder's event export, demonstrating RCE via crafted monitor names.

vulnerability-analysisexploitationweb-application-exploitation+3
12 months ago
CVE-2026-4480 preview

CVE-2026-4480

GitHub0xblackash/cve-2026-4480

CVE-2026-4480

vulnerability-analysisexploitationcommand-and-control+3
14 months ago
Rainstorm preview

Rainstorm

GitHubrainmak3r/rainstorm

CVE-2014-6271 RCE tool

payload-generationvulnerability-analysisexploitation+3
212 years ago
CVE-2026-9198_exploit preview

CVE-2026-9198_exploit

GitHub0xdak/cve-2026-9198_exploit

Unauthenticated RCE exploit for Langflow OSS chaining auto_login JWT bypass with validate/code exec() to achieve remote command execution and reverse…

vulnerability-analysisexploitationweb-application-exploitation+4
13 months ago
CVE-2026-48909-Joomla-SP-Exploit preview

CVE-2026-48909-Joomla-SP-Exploit

GitHubcerberusmrxi/cve-2026-48909-joomla-sp-exploit

CVE-2026-48909 - Unauthenticated PHP Object Injection to RCE exploit for Joomla SP LMS extension versions <= 4.1.3. Exploits lmsOrders cookie…

vulnerability-analysiscode-analysisexploitation+8
23 months ago
CVE-2022-28906-POC preview

CVE-2022-28906-POC

GitHubfinnvle/cve-2022-28906-poc

Python proof-of-concept for unauthenticated OS command injection in TOTOLINK N600R, exploiting the langType parameter to execute arbitrary commands…

iot-securityvulnerability-analysisexploitation+3
12 months ago
CVE-2021-44228-POC preview

CVE-2021-44228-POC

GitHubsec13b/cve-2021-44228-poc

exploit CVE-2021-44228

payload-generationvulnerability-analysisexploitation+3
11 year ago
Previous1…888990…100Next