Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

C2 frameworks, redirectors, listeners, and command infrastructure tools.

Kitploit recommended

Top tools

10 selected

sliver

bishopfox/sliver

11.7k2 days ago

Mythic

its-a-feature/mythic

4.7k16 days ago

Empire

bc-security/empire

5.2k1 month ago

merlin

ne0nd0g/merlin

5.6k12 days ago

AdaptixC2

adaptix-framework/adaptixc2

3.5k1 month ago

emp3r0r

jm33-m0/emp3r0r

1.7k6h 9m ago

#12

metasploit-framework

rapid7/metasploit-framework

38.8k9h 4m ago

#13

kubesploit

cyberark/kubesploit

1.2k1 year ago

#14

NetExec

pennyw0rth/netexec

5.8k21h 20m ago

#15

impacket

fortra/impacket

16.0k0 days ago

Newest Relevance Most popular Recently updated

2526 results

CVE-2020-11800

ycseo-git/cve-2020-11800

PoC exploit for CVE-2020-11800, a command injection in Zabbix Server via malicious agent auto-registration, with Python-based payload delivery and…

vulnerability-analysisexploitationweb-security+3

5 months ago

Command and Control — Page 98 | Kitploit

CVE-2026-54424

tomadimitrie/cve-2026-54424

Exploiting Parsec for Windows to gain SYSTEM privileges

privilege-escalationvulnerability-analysisexploitation+5

3 months ago

PoC-CVE-2019-1003030

cyberbelly/poc-cve-2019-1003030

PoC for jenkins 2.63 CVE-2019-1003030

payload-generationvulnerability-analysisexploitation+3

3 months ago

Webmin-1.580---file-show.cgi-Manual-Remote-Command-Execution-Non-Metasploit-

marinovharisan/webmin-1.580---file-show.cgi-manual-remote-command-execution-non-metasploit-

Manual, non-Metasploit authenticated Remote Code Execution (RCE) exploit via the browser URL bar for Webmin 1.580 (CVE-2012-2982)

vulnerability-analysisexploitationweb-application-exploitation+3

5 months ago

watchTowr-vs-Dell-UnityVSA-PreAuth-CVE-2025-36604

watchtowrlabs/watchtowr-vs-dell-unityvsa-preauth-cve-2025-36604

Detection Artefact Generator for Dell UnityVSA CVE-2025-36604

vulnerability-analysisexploitationweb-application-exploitation+2

21 year ago

CVE-2024-10914__POC

0xss3k/cve-2024-10914__poc

PoC para explotar el CVE-2024-10914

vulnerability-analysisexploitationweb-application-exploitation+3

4 months ago

F5-BIG-IP

devrafaelprogrammer/f5-big-ip

O F5 BIG-IP é uma plataforma de entrega e segurança de aplicações amplamente utilizada em ambientes corporativos. A CVE-2020-5902 é uma…

vulnerability-analysisexploitationweb-application-exploitation+5

3 months ago

Powershell-C2

al1ex/powershell-c2

Powershell-C2

persistence-mechanismspost-exploitationcommand-and-control+2

16 years ago

CVE-2023-1389

werwolfz/cve-2023-1389

TP-Link Archer AX21 - Unauthenticated Command Injection [Loader]

payload-generationvulnerability-analysisexploitation+3

13 years ago

C2-and-Post-Exploitation-Framework

jacobtaylor3/c2-and-post-exploitation-framework

CVE-2021-21220 Exploitation infrastructure

privilege-escalationpayload-generationexploitation+8

5 months ago

CVE-2026-5426

horkimhab/cve-2026-5426

CVE-2026-5426

vulnerability-analysisexploitationweb-application-exploitation+3

4 months ago

CVE-2025-69212-PoC

xorandd/cve-2025-69212-poc

Proof-of-concept exploit for CVE-2025-69212, an OS command injection in OpenSTAManager. Uploads a malicious .p7m file via ZIP to execute arbitrary…

vulnerability-analysisexploitationweb-application-exploitation+2

3 months ago

CVE-2026-3300

horkimhab/cve-2026-3300

CVE-2026-3300

vulnerability-analysisexploitationweb-application-exploitation+3

4 months ago

HTB-TwoMillion-Writeup

karimelsheikh1/htb-twomillion-writeup

HackTheBox TwoMillion machine writeup — API abuse, command injection & CVE-2023-0386

privilege-escalationreconnaissancevulnerability-analysis+8

6 months ago

external-c2-experiments

vulncheck-oss/external-c2-experiments

Go external C2 module for go-exploit that catches reverse SSH shells, providing a server listener and payload client for integrating custom C2…

exploit-frameworksexploitationpost-exploitation+6

11 year ago

CVE-2023-22496-PoC

jstjep00/cve-2023-22496-poc

PoC for CVE-2023-22496: Netdata Agent <1.37 OS Command Injection via registry_hostname

vulnerability-analysisexploitationweb-application-exploitation+3

13 months ago

CVE-2026-54088-poc

saku0512/cve-2026-54088-poc

Proof-of-concept exploit for CVE-2026-54088, a pre-authentication OS command injection in File Browser <=2.63.5. Demonstrates shell injection via…

vulnerability-analysisexploitationweb-application-exploitation+4

14 months ago

CVE-2026-20253

het-kalariya/cve-2026-20253

Self-contained security training lab reproducing CVE-2026-20253 (Splunk Enterprise unauthenticated RCE). Provides a Docker-based environment to…

privilege-escalationvulnerability-analysisexploitation+9

3 months ago

Previous 1…979899 100 Next