Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Custom payload crafting, obfuscation, AV evasion, and delivery mechanism tools.

Kitploit recommended

Top tools

10 selected

donut

thewover/donut

4.7k1 year ago

sRDI

monoxgas/srdi

2.5k4 years ago

pe_to_shellcode

hasherezade/pe_to_shellcode

2.8k1 year ago

sgn

egebalci/sgn

2.0k2 months ago

unicorn

trustedsec/unicorn

3.9k1 month ago

SysWhispers2

jthuraisamy/syswhispers2

1.8k4 years ago

SysWhispers3

klezvirus/syswhispers3

1.6k2 years ago

#10

libpeconv

hasherezade/libpeconv

1.4k6 months ago

#11

metasploit-framework

rapid7/metasploit-framework

38.8k2h 55m ago

#12

pwntools

gallopsled/pwntools

13.6k5 days ago

Newest Relevance Most popular Recently updated

3738 results

wp2shell-poc2

attackercan/wp2shell-poc2

CVE-2026-63030

exploit-frameworksvulnerability-analysisweb-application-exploitation+5

63 months ago

ghostsplice

asset-group/ghostsplice

Ghostsplice repository: PoC for Cross-Channel Trust Fragmentation Attack

data-exfiltrationsocial-engineeringred-teaming+3

92 months ago

CVE-2024-8353

eqstlab/cve-2024-8353

GiveWP PHP Object Injection exploit

vulnerability-analysiscode-analysisexploitation+3

122 years ago

CVE-2026-61511-PoC-Exploit

tc4dy/cve-2026-61511-poc-exploit

CVE-2026-61511 – vBulletin Pre-Auth RCE (CVSS 9.8). Vuln 5.x/6.x (unpatched). Multi-exploit via Endpoint Pool, AJAX, PHPFuck WAF bypass. Full…

network-mappingvulnerability-analysisexploitation+7

412 days ago

CVE-2015-5119

jvazquez-r7/cve-2015-5119

Proof-of-concept exploit for CVE-2015-5119, a Flash Player zero-day vulnerability enabling remote code execution via crafted SWF files.

vulnerability-analysisexploitationweb-application-exploitation+2

1111 years ago

opace6-cve-2026-64560

wangs-official/opace6-cve-2026-64560

Temporary root tool for OnePlus Ace 6 that exploits the CVE-2026-64560 Linux kernel POSIX CPU timer use-after-free to gain root until reboot, without…

android-securityprivilege-escalationvulnerability-analysis+6

327 days ago

ghostlock-kit

zhubaohe123/ghostlock-kit

One-click root kit for vivo iQOO Neo9S Pro (MT6989) exploiting CVE-2026-43499 futex PI UAF via MCAST transport, with scripts and analysis docs.

android-securityprivilege-escalationexploitation+7

61 month ago

exch_CVE-2021-42321

7bitsteam/exch_cve-2021-42321

Modified .NET deserialization payload for CVE-2021-42321, based on ysoserial.net, that writes files and bypasses Windows Defender to target Microsoft…

vulnerability-analysisexploitationweb-application-exploitation+3

104 years ago

CVE-2026-43499-aristotle-apk

soralis0912/cve-2026-43499-aristotle-apk

Android kernel exploit for CVE-2026-43499 (Futex-PI use-after-free) that gains temporary root on Xiaomi XIG04 to enable ADB. Includes automated…

android-securityprivilege-escalationvulnerability-analysis+5

52 months ago

CVE-2026-25243

dinosn/cve-2026-25243

CVE-2026-25243 — Redis RESTORE zipmap double-free → remote code execution (ASLR on).

memory-forensicsvulnerability-analysisexploitation+5

134 months ago

badepoll-selinux-disabler

perongh/badepoll-selinux-disabler

Use CVE-2026-43074 to disable SELinux on Android (Linux 6.6/6.12)

android-securityprivilege-escalationexploit-frameworks+4

63 months ago

CVE-2024-21378

d0rb/cve-2024-21378

This repository contains an exploit for targeting Microsoft Outlook through Exchange Online, leveraging a vulnerability to execute arbitrary code via…

exploitationweb-application-exploitationphishing+4

92 years ago