Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Custom payload crafting, obfuscation, AV evasion, and delivery mechanism tools.

Kitploit recommended

Top tools

10 selected

donut

thewover/donut

4.7k2 years ago

sRDI

monoxgas/srdi

2.5k4 years ago

pe_to_shellcode

hasherezade/pe_to_shellcode

2.8k1 year ago

sgn

egebalci/sgn

2.0k3 months ago

unicorn

trustedsec/unicorn

3.9k1 month ago

SysWhispers2

jthuraisamy/syswhispers2

1.8k4 years ago

SysWhispers3

klezvirus/syswhispers3

1.6k2 years ago

#10

libpeconv

hasherezade/libpeconv

1.4k6 months ago

#11

metasploit-framework

rapid7/metasploit-framework

38.8k9h 28m ago

#12

pwntools

gallopsled/pwntools

13.6k1 day ago

Newest Relevance Most popular Recently updated

3751 results

exploits

staz0t/exploits

Exploits for some of the vulnerabilities I have discovered

vulnerability-analysisexploitationweb-application-exploitation+2

176 years ago

CVE-2025-9491_POC

amperclock/cve-2025-9491_poc

Proof-of-Concept of the CVE-2025-9491 using invisible characters in the arguments of a Windows shortcut file (.lnk)

exploitationpenetration-testingbinary-analysis+3

1811 months ago

CVE-2026-57827

shinthink/cve-2026-57827

CVE-2026-57827 — RSFiles! Joomla Component Unauthenticated File Upload RCE. Split-controller upload bypass. CVSS 9.8 | CWE-434 | com_rsfiles < 1.17.12

vulnerability-analysisexploitationweb-application-exploitation+6

153 months ago

rcm-modchips

reswitched/rcm-modchips

Collection of "modchip" designs for launching payloads via the Tegra RCM bug (CVE-2018-6242)

embedded-systems-securityexploitationhardware-hacking+3

218 years ago

CVE-2024-38063

patchpoint/cve-2024-38063

Proof-of-concept exploit for CVE-2024-38063, a Windows TCP/IP remote code execution vulnerability triggered by sending two crafted IPv6 packets with…

vulnerability-analysisexploitationnetwork-security+3

202 years ago

CVE-2024-0015

umvfx1bvaw50/cve-2024-0015

a demo poc for CVE-2024-0015

vulnerability-analysisexploitationweb-application-exploitation+2

182 years ago

GhostLock-for-OnePlus15T

cuteaplane/ghostlock-for-oneplus15t

（CVE-2026-43499）内核漏洞利用程序，适用于未解锁 Bootloader 的一加15T.

android-securityprivilege-escalationvulnerability-analysis+4

123 months ago

CVE-2026-40003

rva3/cve-2026-40003

Exploit for CVE-2026-40003, an arbitrary memory write vulnerability in ZXIC/Sanechips ZX297520V3 SoC BootROM, enabling code execution via USB…

embedded-systems-securityexploitationreverse-engineering+4

165 months ago

CVE-2019-5624

voidsec/cve-2019-5624

A proof of concept for Metasploit's CVE-2019-5624 vulnerability (Rubyzip insecure ZIP handling RCE)

exploit-frameworksvulnerability-analysisexploitation+3

137 years ago

CVE-2018-16119

hdbreaker/cve-2018-16119

TP-Link TL-WR1043ND - Authenticated Remote Code Execution

embedded-systems-securityiot-securityexploitation+6

161 year ago

PhantomFS

s1lkys/phantomfs

Serving payloads only to allowed processes using Windows projected file system feature

encryption-decryption-toolspayload-generationred-teaming+1

258 months ago

PHPStudy-Backdoor

jas502n/phpstudy-backdoor

phpstudy dll backdoor for v2016 and v2018

vulnerability-analysisreverse-engineeringweb-application-exploitation+4

197 years ago

CVE-2026-32710

dinosn/cve-2026-32710

Heap OOB write in MariaDB JSON_SCHEMA_VALID() → persistent privilege escalation (lab-assisted)

privilege-escalationexploit-frameworksvulnerability-analysis+4

165 months ago

R2C-CVE-2025-55182-66478

cybertechajju/r2c-cve-2025-55182-66478

🔥 React2Shell Toolkit - CVE-2025-55182 & CVE-2025-66478

reconnaissancevulnerability-scannerspayload-generation+8

2410 months ago

Debuggable-App-Exploit

cleov2/debuggable-app-exploit

CVE-2024-31317 Debuggable App Exploit

android-securityvulnerability-analysisexploitation+5

128 months ago

CVE-2022-42889-RCE

cryxnet/cve-2022-42889-rce

Proof of Concept for CVE-2022-42889 (Text4Shell Vulnerability)

vulnerability-analysisexploitationweb-application-exploitation+3

153 years ago

iDevice_ZH

pxx917144686/idevice_zh

CVE-2025-24203漏洞

ios-securityvulnerability-analysisexploitation+3

241 year ago

CaddySmith

icecubesandwich/caddysmith

Generate Caddy redirector configs from Cobalt Strike or Sliver C2 profiles.

penetration-testing-frameworksweb-proxies-interceptionids-ips-evasion+3

233 months ago

Previous 1…686970…100 Next