Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Custom payload crafting, obfuscation, AV evasion, and delivery mechanism tools.

Kitploit recommended

Top tools

10 selected

donut

thewover/donut

4.7k1 year ago

sRDI

monoxgas/srdi

2.5k4 years ago

pe_to_shellcode

hasherezade/pe_to_shellcode

2.8k1 year ago

sgn

egebalci/sgn

2.0k2 months ago

unicorn

trustedsec/unicorn

3.9k26 days ago

SysWhispers2

jthuraisamy/syswhispers2

1.8k4 years ago

SysWhispers3

klezvirus/syswhispers3

1.6k2 years ago

#10

libpeconv

hasherezade/libpeconv

1.4k6 months ago

#11

metasploit-framework

rapid7/metasploit-framework

38.8k3 days ago

#12

pwntools

gallopsled/pwntools

13.6k2 days ago

Newest Relevance Most popular Recently updated

3741 results

CVE-2025-24801

fatkz/cve-2025-24801

Proof-of-concept exploit for CVE-2025-24801, an LFI-to-RCE vulnerability in GLPI 10.0.17. Automates login, enables PHP uploads, and uploads a reverse…

vulnerability-analysisexploitationweb-application-exploitation+3

31 year ago

UAC-Elevation-CVE

daoshureal/uac-elevation-cve

fodhelper-based UAC bypass poc for CVE-2021-31956, registry keys to SYSTEM without a prompt. educational

privilege-escalationvulnerability-analysisexploitation+4

1 year ago

CVE-2022-23940

manuelz120/cve-2022-23940

PoC for CVE-2022-23940

vulnerability-analysiscode-analysisexploitation+3

141 year ago

ingressNightmare-CVE-2025-1974-exps

esonhugh/ingressnightmare-cve-2025-1974-exps

IngressNightmare POC. world first non-blind remote execution exploitation with multi-advanced exploitation methods. allow on disk exploitation.…

container-securityvulnerability-analysisexploitation+5

971 year ago

CVE-2024-40110

thiagosmith/cve-2024-40110

Exploit para Poultry Farm Management System v1.0

vulnerability-analysisexploitationweb-application-exploitation+3

41 year ago

CVE-2025-24813

hakankarabacak/cve-2025-24813

Proof of Concept (PoC) script for CVE-2025-24813, vulnerability in Apache Tomcat.

vulnerability-analysisexploitationweb-application-exploitation+3

1 year ago

Archived

GoRedOps

kiexitdispatcher/goredops

🦫 | GoRedOps is a repository dedicated to gathering and sharing advanced techniques and offensive malware for Red Team, with a specific focus on…

privilege-escalationexploitationids-ips-evasion+9

6731 year ago

CVE-2025-1974

chhhd/cve-2025-1974

Proof-of-concept exploit for CVE-2025-1974 (IngressNightmare) targeting Kubernetes Ingress-NGINX Admission Controller to achieve remote code…

container-securityvulnerability-analysisexploitation+5

11 year ago

CVE-2021-43857-POC

g4sp4rcs/cve-2021-43857-poc

Optimized exploit for CVE-2021-43857 affecting Gerapy < 0.9.8

vulnerability-analysisexploitationweb-application-exploitation+2

1 year ago

CVE-2025-30406

w01fh4cker/cve-2025-30406

Exploit for CVE-2025-30406

vulnerability-analysisexploitationweb-application-exploitation+3

121 year ago

PMD

rad9800/pmd

Practical Windows malware development course: API hashing, DLL sideloading, shellcode execution, PE manipulation, payload hosting, and delivery labs.

reverse-engineeringshellcodemalware-analysis+6

1591 year ago

masm_shc

hasherezade/masm_shc

A helper utility for creating shellcodes. Cleans MASM file generated by MSVC, gives refactoring hints.

shellcodeutilities-frameworksshellcode-generation+1

1911 year ago

CVE-2025-24016-Wazuh-Remote-Code-Execution-RCE-PoC

cybersecplayground/cve-2025-24016-wazuh-remote-code-execution-rce-poc

A critical RCE vulnerability has been identified in the Wazuh server due to unsafe deserialization in the wazuh-manager package. This bug affects…

vulnerability-analysisexploitationweb-application-exploitation+4

21 year ago

cve-2019-2215_SH-M08

mouseos/cve-2019-2215_sh-m08

Proof-of-concept exploit for CVE-2019-2215 targeting Android kernel to achieve root privilege escalation on AQUOS sense 2 (SH-M08). Includes kernel…

android-securityprivilege-escalationexploitation+2

21 year ago

Dirty-Pipe

bytereaper77/dirty-pipe

Proof-of-concept exploit for CVE-2022-0847 (Dirty Pipe) enabling local privilege escalation on Linux kernels 5.8–5.16 via pipe buffer manipulation…

privilege-escalationvulnerability-analysisexploitation+4

31 year ago

POC_CVE-2025-32433

ekomssavior/poc_cve-2025-32433

Proof-of-concept exploit for CVE-2025-32433 with simulated and real attack modes, including a Flask-based C2 server for reverse shell callbacks and…

vulnerability-analysisexploitationpenetration-testing+3

51 year ago

HackerLife.exe

spiralbl0ck/hackerlife.exe

Write up exploit failed chain and experience tryin to sell your first nday

vulnerability-analysisexploitationreverse-engineering+5

1 year ago

CVE-2025-24813-vulhub

erosion2020/cve-2025-24813-vulhub

CVE-2025-24813的vulhub环境的POC脚本

vulnerability-analysisexploitationweb-application-exploitation+3

51 year ago

Previous 1…99100Next

Payload Development

Top tools

donut

sRDI

pe_to_shellcode

sgn

unicorn

SysWhispers2

SysWhispers3

libpeconv

metasploit-framework

pwntools

CVE-2025-24801

UAC-Elevation-CVE

CVE-2022-23940

ingressNightmare-CVE-2025-1974-exps

CVE-2024-40110

CVE-2025-24813

GoRedOps

CVE-2025-1974

CVE-2021-43857-POC

CVE-2025-30406

PMD

masm_shc

CVE-2025-24016-Wazuh-Remote-Code-Execution-RCE-PoC

cve-2019-2215_SH-M08

Dirty-Pipe

POC_CVE-2025-32433

HackerLife.exe

CVE-2025-24813-vulhub