Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools for weaponizing vulnerabilities to gain unauthorized access to systems or data.

Kitploit recommended

Top tools

10 selected

metasploit-framework

rapid7/metasploit-framework

38.8k15h 6m ago

sqlmap

sqlmapproject/sqlmap

38.2k15h 42m ago

beef

beefproject/beef

11.0k11h 59m ago

routersploit

threat9/routersploit

13.2k6 months ago

Nettacker

owasp/nettacker

5.5k1 day ago

Empire

bc-security/empire

5.2k1 month ago

sliver

bishopfox/sliver

11.7k10 days ago

Mythic

its-a-feature/mythic

4.7k24 days ago

#10

NetExec

pennyw0rth/netexec

5.8k3 days ago

#11

impacket

fortra/impacket

16.0k7h 35m ago

Newest Relevance Most popular Recently updated

26168 results

CVE-2022-0847-DirtyPipe-Exploit

arinerron/cve-2022-0847-dirtypipe-exploit

A root exploit for CVE-2022-0847 (Dirty Pipe)

privilege-escalationvulnerability-analysisexploitation+2

1.1k4 years ago

follina.py

chvancooten/follina.py

POC to replicate the full 'Follina' Office RCE vulnerability for testing purposes

payload-generationexploitationpenetration-testing+1

1.1k3 years ago

BadUSB-Files-For-FlipperZero

beigeworm/badusb-files-for-flipperzero

A Collection of Over 60 Scripts - updated specifically for the BadUSB function on the FlipperZero.

exploitationdata-exfiltrationpost-exploitation+5

1.2k3 months ago

xss-cheatsheet-data

portswigger/xss-cheatsheet-data

Community-contributed JSON dataset of XSS payload vectors powering the PortSwigger XSS cheat sheet, with browser support and interaction metadata.

payload-generationvulnerability-analysisweb-application-exploitation+4

4765 days ago

CVE-2021-1675

calebstewart/cve-2021-1675

Pure PowerShell implementation of CVE-2021-1675 Print Spooler Local Privilege Escalation (PrintNightmare)

privilege-escalationpayload-generationexploitation+1

1.1k5 years ago

jdwp-shellifier

ioactive/jdwp-shellifier

Exploitation script for exposed Java Debug Wire Protocol (JDWP) services, enabling pentesters to inject Java code and execute arbitrary OS commands…

exploitationdebuggerspenetration-testing+1

9179 years ago

sulley

openrce/sulley

A pure-python fully automated and unattended fuzzing framework.

dynamic-analysis-sandboxingvulnerability-analysisexploitation+3

1.4k7 years ago

JYso

qi4l/jyso

Dual-purpose JNDI injection and Java deserialization exploitation framework with advanced bypass capabilities for WAF, RASP, and high JDK versions.…

penetration-testing-frameworksexploit-frameworksmemory-forensics+5

1.8k4 months ago

PrivEsc

1n3/privesc

A collection of Windows, Linux and MySQL privilege escalation scripts and exploits.

privilege-escalationvulnerability-analysisexploitation+2

9958 years ago

PackMyPayload

mgeeky/packmypayload

A PoC that packages payloads into output containers to evade Mark-of-the-Web flag & demonstrate risks associated with container file formats.…

phishing-toolscontainer-securityexploit-frameworks+3

1.2k3 years ago

Supershell

tdragon6/supershell

Supershell C2 远控平台，基于反向SSH隧道获取完全交互式Shell

payload-generationpersistence-mechanismslateral-movement+5

1.8k7 months ago

Nginx-Rift

depthfirstdisclosures/nginx-rift

NGINX RCE exploits

vulnerability-analysisexploitationweb-application-exploitation+3

9173 months ago

ARES

mafifrizi/ares

Autonomous red-team engagement platform with MITRE ATT&CK module orchestration, DAG attack-path solving, OPSEC controls, encrypted credential vault,…

defensive-toolspenetration-testing-frameworksexploit-frameworks+5

8223 days ago

Kamerka-GUI

woj-ciech/kamerka-gui

Ultimate Internet of Things/Industrial Control Systems reconnaissance tool.

osintreconnaissanceiot-security+6

8655 months ago

SourcePoint

tylous/sourcepoint

Polymorphic C2 profile generator for Cobalt Strike that automates creation of evasive beacon configurations with randomized options for HTTP, DNS,…

exploit-frameworkspayload-generationcommand-and-control+1

1.2k1 month ago

ATSCAN

alisamtechnology/atscan

Advanced dork Search & Mass Exploit Scanner

osintvulnerability-scannersencryption-decryption-tools+7

1.6k2 years ago

reverse-shell

lukechilds/reverse-shell

On-demand reverse shell service that auto-detects target environment and executes appropriate payload for remote access during penetration tests.

exploitationshellcodepenetration-testing+3

2.0k8 months ago

securitylab

github/securitylab

Resources related to GitHub Security Lab

static-analysisvulnerability-analysiscode-analysis+5

1.6k11 months ago

Previous 1…252627…100 Next