Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Categories

Payload Development

Custom payload crafting, obfuscation, AV evasion, and delivery mechanism tools.

Kitploit recommended

Top tools

10 selected
donut preview#1

donut

GitHubthewover/donut
4.7k1 year ago
sRDI preview#2

sRDI

GitHubmonoxgas/srdi
2.5k4 years ago
pe_to_shellcode preview#3

pe_to_shellcode

GitHubhasherezade/pe_to_shellcode
2.8k1 year ago
sgn preview#4

sgn

GitHubegebalci/sgn
2.0k2 months ago
unicorn preview#5

unicorn

GitHubtrustedsec/unicorn
3.9k1 month ago
SysWhispers2 preview#6

SysWhispers2

GitHubjthuraisamy/syswhispers2
1.8k4 years ago
SysWhispers3 preview#7

SysWhispers3

GitHubklezvirus/syswhispers3
1.6k2 years ago
libpeconv preview#10

libpeconv

GitHubhasherezade/libpeconv
1.4k6 months ago
metasploit-framework preview#11

metasploit-framework

GitHubrapid7/metasploit-framework
38.8k1 day ago
pwntools preview#12

pwntools

GitHubgallopsled/pwntools
13.6k5 days ago
NewestRelevanceMost popularRecently updated
3738 results
git_rce preview

git_rce

GitHubamalmurali47/git_rce

Exploit PoC for CVE-2024-32002

vulnerability-analysisexploitationweb-application-exploitation+3
5332 years ago
Payload Development — Page 15 | Kitploit
DInvoke preview

DInvoke

GitHubthewover/dinvoke

Dynamically invoke arbitrary unmanaged code from managed code without PInvoke.

post-exploitationred-teamingpayload-development+1
7914 years ago
JNDI-Injection-Exploit-Plus preview

JNDI-Injection-Exploit-Plus

GitHubcckuailong/jndi-injection-exploit-plus

Generates workable JNDI injection links and deserialization payloads with 80+ gadgets, supporting RMI, LDAP, and HTTP servers for automated…

exploit-frameworksvulnerability-analysisweb-application-exploitation+2
8802 years ago
ronin preview

ronin

GitHubronin-rb/ronin

Ronin is a Free and Open Source Ruby Toolkit for Security Research and Development. Ronin also allows for the rapid development and distribution of…

osintpenetration-testing-frameworksreconnaissance+9
7559 months ago
BobTheSmuggler preview

BobTheSmuggler

GitHubthecyb3ralpha/bobthesmuggler

"Bob the Smuggler": A tool that leverages HTML Smuggling Attack and allows you to create HTML files with embedded 7z/zip archives. The tool would…

phishing-toolsencryption-decryption-toolspayload-generation+4
5981 year ago
exploit-CVE-2016-10033 preview

exploit-CVE-2016-10033

GitHubopsxcq/exploit-cve-2016-10033

PHPMailer < 5.2.18 Remote Code Execution exploit and vulnerable container

static-code-analysisvulnerability-analysiscode-analysis+6
4087 years ago
LazyOwn preview

LazyOwn

GitHubgrisuno/lazyown

Red team framework and multi-operator C2 platform with AI agents, malleable implants, rootkits, phishing engine, and 741 CLI commands covering the…

penetration-testing-frameworksvulnerability-scannersexploit-frameworks+8
3001 day ago
shellnoob preview

shellnoob

GitHubreyammer/shellnoob

A shellcode writing toolkit

exploitationreverse-engineeringscripting-automation+6
6941 year ago
azureOutlookC2 preview

azureOutlookC2

GitHubboku7/azureoutlookc2

Azure Outlook Command & Control (C2) - Remotely control a compromised Windows Device from your Outlook mailbox. Threat Emulation Tool for North…

cloud-securitycommand-and-controlred-teaming+2
5043 years ago
yetAnotherObfuscator preview

yetAnotherObfuscator

GitHub0xb11a1/yetanotherobfuscator

C# obfuscator that bypass windows defender

red-teamingpayload-developmentadversarial-attack
8243 years ago
Armor preview

Armor

GitHubtokyoneon/armor

Armor is a simple Bash script designed to create encrypted macOS payloads capable of evading antivirus scanners.

encryption-decryption-toolspayload-generationshellcode+3
2777 years ago
CallbackHell preview

CallbackHell

GitHubly4k/callbackhell

Exploit for CVE-2021-40449 - Win32k Elevation of Privilege Vulnerability (LPE)

privilege-escalationvulnerability-analysisexploitation+4
4814 years ago
Shellcode-Encryptor preview

Shellcode-Encryptor

GitHubplackyhacker/shellcode-encryptor

A simple shell code encryptor/decryptor/executor to bypass anti virus.

encryption-decryption-toolsexploit-frameworkspayload-generation+2
4684 years ago
DeathSleep preview

DeathSleep

GitHubjanoglezcampos/deathsleep

A PoC implementation for an evasion technique to terminate the current thread and restore it before resuming execution, while implementing page…

exploitationmalware-analysisred-teaming+1
5384 years ago
evil-winrm-py preview

evil-winrm-py

GitHubadityatelange/evil-winrm-py

Execute commands interactively on remote Windows machines using the WinRM protocol (just faster)

password-attackslateral-movementscripting-automation+7
41211 days ago
Cronos preview

Cronos

GitHubidov31/cronos

PoC for a sleep obfuscation technique leveraging waitable timers to evade memory scanners.

ids-ips-evasionpost-exploitationcryptography+2
6273 years ago
Homework-of-Python preview

Homework-of-Python

GitHub3gstudent/homework-of-python

Python codes of my blog.

vulnerability-scannerspassword-attacksexploitation+5
4123 years ago
ScreenshotBOF preview

ScreenshotBOF

GitHubcodextf2/screenshotbof

An alternative screenshot capability for Cobalt Strike that uses WinAPI and does not perform a fork & run. Screenshot downloaded in memory.

post-exploitationpenetration-testingcommand-and-control+2
5032 months ago
Previous1…141516…100Next