Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Custom payload crafting, obfuscation, AV evasion, and delivery mechanism tools.

Kitploit recommended

Top tools

10 selected

donut

thewover/donut

4.7k1 year ago

sRDI

monoxgas/srdi

2.5k4 years ago

pe_to_shellcode

hasherezade/pe_to_shellcode

2.8k1 year ago

sgn

egebalci/sgn

2.0k2 months ago

unicorn

trustedsec/unicorn

3.9k28 days ago

SysWhispers2

jthuraisamy/syswhispers2

1.8k4 years ago

SysWhispers3

klezvirus/syswhispers3

1.6k2 years ago

#10

libpeconv

hasherezade/libpeconv

1.4k6 months ago

#11

metasploit-framework

rapid7/metasploit-framework

38.8k8h 53m ago

#12

pwntools

gallopsled/pwntools

13.6k3 days ago

Newest Relevance Most popular Recently updated

3739 results

Killer

0xhossam/killer

Killer is a super simple tool designed to bypass AV/EDR security tools using various evasive techniques and used by Patchwork group.

exploitationids-ips-evasionshellcode+4

8462 years ago

HiddenDesktop

wkl-sec/hiddendesktop

HVNC for Cobalt Strike

penetration-testing-frameworksexploit-frameworkspost-exploitation+4

1.3k3 years ago

php_filter_chain_generator

synacktiv/php_filter_chain_generator

CLI to generate PHP filter chains for remote code execution via controlled include/require parameters. Produces complex iconv-based filter bypasses…

payload-generationexploitationweb-application-exploitation+2

1.1k3 years ago

Koppeling

monoxgas/koppeling

Adaptive DLL hijacking / dynamic export forwarding

exploitationred-teamingpayload-development+1

8196 years ago

patching

gaasedelen/patching

An Interactive Binary Patching Plugin for IDA Pro

static-analysisdynamic-code-analysisexploitation+8

1.3k1 year ago

LSTAR

lintstar/lstar

LSTAR - CobaltStrike 综合后渗透插件

penetration-testing-frameworksprivilege-escalationpersistence-mechanisms+7

1.3k4 years ago

DarkWidow

reveng007/darkwidow

Indirect Dynamic Syscall, SSN + Syscall address sorting via Modified TartarusGate approach + Remote Process Injection via APC Early Bird + Spawns a…

privilege-escalationexploitationids-ips-evasion+6

8078 months ago

PS4-5.05-Kernel-Exploit

cryptogenic/ps4-5.05-kernel-exploit

A fully implemented kernel exploit for the PS4 on 5.05FW

embedded-systems-securityprivilege-escalationexploitation+4

6398 years ago

CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability

xaitax/cve-2024-21413-microsoft-outlook-remote-code-execution-vulnerability

Microsoft-Outlook-Remote-Code-Execution-Vulnerability

phishing-toolsreconnaissancepassword-attacks+5

7662 years ago

PoolParty

safebreach-labs/poolparty

A set of fully-undetectable process injection techniques abusing Windows Thread Pools

privilege-escalationexploitationshellcode+3

1.3k2 years ago

pwn2own2018

saelo/pwn2own2018

A Pwn2Own exploit chain

privilege-escalationvulnerability-analysisexploitation+5

7597 years ago

PCShare

xdnice/pcshare

PCShare是一款强大的远程控制软件，可以监视目标机器屏幕、注册表、文件系统等。

privilege-escalationpayload-generationpersistence-mechanisms+9

5689 years ago

BetterAndroRAT

mwsrc/betterandrorat

Android Remote Access Trojan

android-securityprivilege-escalationpersistence-mechanisms+8

5399 years ago

gh0st

sin5678/gh0st

a open source remote administrator tool

post-exploitationpenetration-testingcommand-and-control+3

55813 years ago

SmmBackdoor

cr4sh/smmbackdoor

First open source and publicly available System Management Mode backdoor for UEFI based platforms. Good as general purpose playground for various SMM…

privilege-escalationpersistence-mechanismsexploitation+4

6323 years ago

ThreadStackSpoofer

mgeeky/threadstackspoofer

Thread Stack Spoofing - PoC for an advanced In-Memory evasion technique allowing to better hide injected shellcode's memory allocation from scanners…

penetration-testing-frameworksexploit-frameworksmemory-forensics+4

1.2k4 years ago

cPanelSniper

ynsmroztas/cpanelsniper

CVE-2026-41940 — cPanel & WHM Authentication Bypass via Session-File CRLF Injection

authentication-authorizationvulnerability-scannersexploitation+6

5085 months ago

CVE-2022-29072

kagancapar/cve-2022-29072

7-Zip through 21.07 on Windows allows privilege escalation and command execution when a file with the .7z extension is dragged to the Help>Contents…