Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Comprehensive frameworks for exploit development, testing, and execution.

Kitploit recommended

Top tools

10 selected

metasploit-framework

rapid7/metasploit-framework

38.8k6h 38m ago

Empire

bc-security/empire

5.2k1 month ago

sliver

bishopfox/sliver

11.7k1 day ago

Mythic

its-a-feature/mythic

4.7k26 days ago

routersploit

threat9/routersploit

13.2k6 months ago

Nettacker

owasp/nettacker

5.5k1 day ago

beef

beefproject/beef

11.0k8h 20m ago

#10

sqlmap

sqlmapproject/sqlmap

38.2k6h 51m ago

#11

kubesploit

cyberark/kubesploit

1.2k1 year ago

#12

ronin

ronin-rb/ronin

7559 months ago

Newest Relevance Most popular Recently updated

1239 results

mythic_telegram_profile

davidcarliez/mythic_telegram_profile

Mythic C2 profile that tunnels Athena and Apollo agent traffic through Telegram bot-to-bot messages, bridging encrypted payloads to Mythic via its…

penetration-testing-frameworksencryption-decryption-toolsexploit-frameworks+5

81 month ago

CVE-2026-31431

alihzsec/cve-2026-31431

Proof-of-concept exploit for CVE-2026-31431, a Linux local privilege escalation vulnerability, demonstrating kernel exploitation for educational and…

privilege-escalationexploit-frameworksvulnerability-analysis+3

76 months ago

CVE-2024-49112-PoC

bo0l3an/cve-2024-49112-poc

CVE-2024-49112 LDAP RCE PoC and Metasploit Module

exploit-frameworksvulnerability-analysisexploitation+3

121 year ago

ThrottleStop

demoo1337/throttlestop

CVE-2025-7771 ThrottleStop.sys privilege escalation exploit - unrestricted IOCTL access to physical memory via MmMapIoSpace

privilege-escalationexploit-frameworksvulnerability-analysis+3

101 year ago

CVE-2021-24155.rb

0dayninja/cve-2021-24155.rb

WordPress Backup Guard Authenticated Remote Code Execution Exploit

exploit-frameworksvulnerability-analysisweb-application-exploitation+3

105 years ago

cve-2025-29384-poc

otsmane-ahmed/cve-2025-29384-poc

Proof-of-concept exploit for CVE-2025-29384, a critical stack-based buffer overflow in Tenda AC9 routers. Includes Python and Metasploit modules for…

embedded-systems-securityexploit-frameworksvulnerability-analysis+7

141 year ago

HG532d-RCE-Exploit

wilfred-wulbou/hg532d-rce-exploit

A Remote Code Execution (RCE) exploit for Huawei HG532d based on CVE-2017-17215 vulnerability. Modded from original PoC code from exploit-db.com

exploit-frameworksiot-securityvulnerability-analysis+3

95 years ago

apache_normalize_path

zeop-cybersec/apache_normalize_path

Metasploit-Framework modules (scanner and exploit) for the CVE-2021-41773 and CVE-2021-42013 (Path Traversal in Apache 2.4.49/2.4.50)

vulnerability-scannersexploit-frameworksweb-application-exploitation+3

125 years ago

CVE-2026-60206-PoC-Exploit

tc4dy/cve-2026-60206-poc-exploit

👾 CVE-2026-60206 - Oracle WebLogic SAML Auth Bypass Exploit Framework ⚡Bash & Python versions. Features: --detect safe check, --exploit…

authentication-authorizationexploit-frameworkspayload-generation+8

429 days ago

IKEV2-POC

epsilonpointori/ikev2-poc

IKEv2, ikeext.dll, CVE-2026-33824, double free, heap grooming, ROP, SKF fragmentation, Windows exploit, anti-debug, obfuscation, API hooking,…

exploit-frameworksreverse-engineeringshellcode+3

44 months ago

wp2shell-poc2

attackercan/wp2shell-poc2

CVE-2026-63030

exploit-frameworksvulnerability-analysisweb-application-exploitation+5

63 months ago

badepoll-selinux-disabler

perongh/badepoll-selinux-disabler

Use CVE-2026-43074 to disable SELinux on Android (Linux 6.6/6.12)

android-securityprivilege-escalationexploit-frameworks+4

63 months ago

cobaltstrike_swing_xss2rce

hluwa/cobaltstrike_swing_xss2rce

Exploit for CVE-2022-39197, a cross-site scripting vulnerability in Cobalt Strike's Swing GUI that enables remote code execution on team servers.

exploit-frameworksvulnerability-analysisweb-application-exploitation+3

74 years ago

Blue-Borne

cracksoft900/blue-borne

BlueBorne Exploits & Framework This repository contains a PoC code of various exploits for the BlueBorne vulnerabilities. Under 'android' exploits…

bluetooth-securityexploit-frameworksvulnerability-analysis+3

106 years ago

CVE-2021-44228-log4jVulnScanner-metasploit

taroballzchen/cve-2021-44228-log4jvulnscanner-metasploit

open detection and scanning tool for discovering and fuzzing for Log4J RCE CVE-2021-44228 vulnerability

reconnaissancevulnerability-scannersexploit-frameworks+3

74 years ago

ie11_vbscript_exploit

ruthlezs/ie11_vbscript_exploit

Exploit Generator for CVE-2018-8174 & CVE-2019-0768 (RCE via VBScript Execution in IE11)

exploit-frameworkspayload-generationexploitation+3

97 years ago

CVE-2020-17519

murataydemir/cve-2020-17519

[CVE-2020-17519] Apache Flink RESTful API Arbitrary File Read

exploit-frameworksvulnerability-analysisexploitation+3

85 years ago

CVE-2019-15029

mhaskar/cve-2019-15029

The official exploit code for FusionPBX v4.4.8 Remote Code Execution CVE-2019-15029

exploit-frameworksvulnerability-analysisexploitation+3

87 years ago

Previous 1…363738…69 Next

Exploit Frameworks

Top tools

metasploit-framework

Empire

sliver

Mythic

routersploit

Nettacker

beef

sqlmap

kubesploit

ronin

mythic_telegram_profile

CVE-2026-31431

CVE-2024-49112-PoC

ThrottleStop

CVE-2021-24155.rb

cve-2025-29384-poc

HG532d-RCE-Exploit

apache_normalize_path

CVE-2026-60206-PoC-Exploit

IKEV2-POC

wp2shell-poc2

badepoll-selinux-disabler

cobaltstrike_swing_xss2rce

Blue-Borne

CVE-2021-44228-log4jVulnScanner-metasploit

ie11_vbscript_exploit

CVE-2020-17519

CVE-2019-15029