Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Custom payload crafting, obfuscation, AV evasion, and delivery mechanism tools.

Newest Relevance Most popular Recently updated

3295 results

geacon

darkr4y/geacon

Practice Go programming and implement CobaltStrike's Beacon in Go

penetration-testing-frameworksexploit-frameworksreverse-engineering+2

1.3k5 years ago

DarkLoadLibrary

bats3c/darkloadlibrary

LoadLibrary for offensive operations

defensive-toolsexploitationbinary-analysis+2

1.2k4 years ago

rogue-jndi

veracode-research/rogue-jndi

A malicious LDAP server for JNDI injection attacks

exploitationweb-application-exploitationctf+4

1.1k2 years ago

CVE-2021-3156

blasty/cve-2021-3156

privilege-escalationvulnerability-analysisexploitation+3

1.0k5 years ago

ProtectMyTooling

mgeeky/protectmytooling

Multi-Packer wrapper letting us daisy-chain various packers, obfuscators and other Red Team oriented weaponry. Featured with artifacts watermarking,…

ioc-managementpenetration-testing-frameworksexploit-frameworks+5

1.1k10 months ago

PackMyPayload

mgeeky/packmypayload

A PoC that packages payloads into output containers to evade Mark-of-the-Web flag & demonstrate risks associated with container file formats.…

phishing-toolscontainer-securityexploit-frameworks+3

1.2k2 years ago

charlotte

9emin1/charlotte

c++ fully undetected shellcode launcher ;)

exploitationids-ips-evasionshellcode+6

9765 years ago

Remote-Access-Trojan

malwares/remote-access-trojan

Windows Remote-Access-Trojan

persistence-mechanismsdata-exfiltrationpost-exploitation+3

7489 years ago

inception

carmaa/inception

Inception is a physical memory manipulation and hacking tool exploiting PCI-based DMA. The tool can attack over FireWire, Thunderbolt, ExpressCard,…

privilege-escalationmemory-forensicsexploitation+6

1.6k1 year ago

FilelessPELoader

saadahla/filelesspeloader

Loading Remote AES Encrypted PE in memory , Decrypted it and run it

ids-ips-evasionpost-exploitationpenetration-testing+3

1.0k2 years ago

EternalBlueC

bhassani/eternalbluec

EternalBlue suite remade in C/C++ which includes: MS17-010 Exploit, EternalBlue vulnerability detector, DoublePulsar detector and DoublePulsar…

exploit-frameworksvulnerability-analysisexploitation+7

6131 month ago

liffy

mzfr/liffy

Local file inclusion exploitation tool

vulnerability-analysisweb-application-exploitationwaf-bypass+2

9783 months ago

PowerShell-Obfuscation-Bible

t3l3machus/powershell-obfuscation-bible

A collection of techniques, examples and a little bit of theory for manually obfuscating PowerShell scripts to achieve AV evasion, compiled for…

ids-ips-evasionpenetration-testingeducation+3

1.2k2 years ago

Ninja

ahmedkhlief/ninja

Open source C2 server created for stealth red team operations

penetration-testing-frameworksprivilege-escalationexploitation+6

8413 years ago

WeblogicScan

dr0op/weblogicscan

增强版WeblogicScan、检测结果更精确、插件化、添加CVE-2019-2618，CVE-2019-2729检测，Python3支持

vulnerability-scannersexploitationweb-application-exploitation+3

9642 years ago

Loki

boku7/loki

🧙‍♂️ Node.js Command & Control for Script-Jacking Vulnerable Electron Applications

persistence-mechanismsexploitationids-ips-evasion+5

1.4k4 months ago

React2Shell-CVE-2025-55182-original-poc

lachlan2k/react2shell-cve-2025-55182-original-poc

Original Proof-of-Concepts for React2Shell CVE-2025-55182

exploit-frameworksvulnerability-analysiscode-analysis+3

1.1k8 months ago

twittor

paulsec/twittor

A fully featured backdoor that uses Twitter as a C&C server

exploitationshellcodepost-exploitation+4

80610 years ago

Previous 1…678…184 Next