Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Comprehensive frameworks for exploit development, testing, and execution.

Kitploit recommended

Top tools

10 selected

metasploit-framework

rapid7/metasploit-framework

38.8k8h 10m ago

Empire

bc-security/empire

5.2k1 month ago

sliver

bishopfox/sliver

11.7k9 days ago

Mythic

its-a-feature/mythic

4.7k23 days ago

routersploit

threat9/routersploit

13.2k6 months ago

Nettacker

owasp/nettacker

5.5k18h 25m ago

beef

beefproject/beef

11.0k1 day ago

#10

sqlmap

sqlmapproject/sqlmap

38.2k1 day ago

#11

kubesploit

cyberark/kubesploit

1.2k1 year ago

#12

ronin

ronin-rb/ronin

7559 months ago

Newest Relevance Most popular Recently updated

1238 results

NoCameraSound

straight-tamago/nocamerasound

CVE-2022-46689

exploit-frameworksios-securityvulnerability-analysis+2

1301 year ago

CVE-2021-4034

nikaiw/cve-2021-4034

Proof-of-concept exploit for CVE-2021-4034, a local privilege escalation vulnerability in polkit's pkexec, demonstrating exploitation for security…

privilege-escalationexploit-frameworksvulnerability-analysis+2

594 years ago

CVE-2026-31431-CopyFail-Universal-LPE

shadowabi/cve-2026-31431-copyfail-universal-lpe

CVE-2026-31431 Copy Fail — Universal LPE exploit. Dynamic ELF offset + full-binary overwrite, Python 2/3 compatible with ctypes splice fallback

privilege-escalationcontainer-securityexploit-frameworks+6

596 months ago

CVE-2018-14442

payatu/cve-2018-14442

PoC for Foxit Reader CVE-2018-14442

exploit-frameworksvulnerability-analysisexploitation+3

587 years ago

Mythic-Macro-Generator

cedowens/mythic-macro-generator

Python3 script to generate a macro to launch a Mythic payload. Author: Cedric Owens

phishing-toolsexploit-frameworkspayload-generation+4

475 years ago

LocalStranger

nbs32k/localstranger

PoC for WinNotify, demonstrated through a driver mapper, and local privilege escalation.

privilege-escalationexploit-frameworkspost-exploitation+3

431 month ago

pentest_teamcity

kacperszurek/pentest_teamcity

Pentest TeamCity using Metasploit

exploit-frameworkspayload-generationweb-application-exploitation+3

458 years ago

endgame

endgamec2framework/endgame

ENDGAME C2 FRAMEWORK — AI-powered command and control for professional red team operations

privilege-escalationreconnaissanceexploit-frameworks+8

2828 days ago

Remote-BOF-Runner

pard0p/remote-bof-runner

Remote BOF Runner is a Havoc extension framework for remote execution of Beacon Object Files (BOFs) using a PIC loader made with Crystal Palace.

penetration-testing-frameworksprivilege-escalationexploit-frameworks+8

10210 months ago

c2

averagesecurityguy/c2

A simple, extensible C&C beaconing system.

exploit-frameworksnetwork-securitypenetration-testing+3

1048 years ago

mythic_ornn

n0qword/mythic_ornn

LLM-driven generator for Mythic Agents, Payload-Type and C2 Profiles.

penetration-testing-frameworksexploit-frameworkscommand-and-control+3

552 months ago

joro

bishopfox/joro

A collaborative web exploitation framework.

penetration-testing-frameworksexploit-frameworkspayload-generation+5

304 days ago

CVE-2026-31431

0xshe/cve-2026-31431

Kernel privilege escalation exploit for CVE-2026-31431, abusing AF_ALG interface to overwrite /bin/su and spawn a root shell. Includes C…

privilege-escalationexploit-frameworksexploitation+2

456 months ago

PyStegosploit

charmve/pystegosploit

PoC - Exploit Delivery via Steganography and Polyglots, CVE-2014-0282

exploit-frameworksweb-application-exploitationsteganography+5

532 years ago

bluebox

jackofmosttrades/bluebox

Automated Exploit Toolkit for CVE-2015-6095 and CVE-2016-0049

exploit-frameworksexploitationlateral-movement+3

519 years ago

Neo

stillbigjosh/neo

The NeoC2 Framework

privilege-escalationexploit-frameworkspersistence-mechanisms+8

345 days ago

brutus

exbotanical/brutus

extensible exploitation framework shipped on a modular multi-tasking architecture

packet-sniffing-analysisreconnaissanceexploit-frameworks+6

825 years ago

CVE-2025-24990_POC

moiz-2x/cve-2025-24990_poc

Proof of Concept CVE-2025-24990 (Agere Systems's driver)