Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Custom payload crafting, obfuscation, AV evasion, and delivery mechanism tools.

Kitploit recommended

Top tools

10 selected

donut

thewover/donut

4.7k1 year ago

sRDI

monoxgas/srdi

2.5k4 years ago

pe_to_shellcode

hasherezade/pe_to_shellcode

2.8k1 year ago

sgn

egebalci/sgn

2.0k2 months ago

unicorn

trustedsec/unicorn

3.9k27 days ago

SysWhispers2

jthuraisamy/syswhispers2

1.8k4 years ago

SysWhispers3

klezvirus/syswhispers3

1.6k2 years ago

#10

libpeconv

hasherezade/libpeconv

1.4k6 months ago

#11

metasploit-framework

rapid7/metasploit-framework

38.8k1 day ago

#12

pwntools

gallopsled/pwntools

13.6k3 days ago

Newest Relevance Most popular Recently updated

3740 results

CVE-2020-14008

0x0d3ad/cve-2020-14008

CVE-2020-14008 - ManageEngine Applications Manager RCE

vulnerability-analysisexploitationweb-application-exploitation+3

35 months ago

CVE-2024-23222-Coruna-Exploit-Kit-Deobfuscated

rohitberiwala/cve-2024-23222-coruna-exploit-kit-deobfuscated

Comprehensive deobfuscated research of the Coruna iOS exploit kit targeting CVE-2024-23222. Analysis of WebKit Type Confusion, PAC Bypass, and…

ios-securityexploitationreverse-engineering+6

57 months ago

wp2shell-poc

colere-sys/wp2shell-poc

Analysis and end-to-end implementation of the patched wordpress RCE vulnerability - CVE-2026-60137 and CVE-2026-63030

exploit-frameworksvulnerability-analysisweb-application-exploitation+5

23 months ago

coactionbrittlemaidenhair51.github.io

coactionbrittlemaidenhair51/coactionbrittlemaidenhair51.github.io

Explore and validate CVE-2026-42978 PoC with an integrated AI security tool, multi-protocol terminal, and autonomous agent suite for Windows Push…

vulnerability-analysisexploitationpenetration-testing+4

22 days ago

cve-2023-51467

vulncheck-oss/cve-2023-51467

A go-exploit for Apache OFBiz CVE-2023-51467

vulnerability-analysisexploitationweb-application-exploitation+5

61 year ago

Fastjson-1.2.47-rce

ianxtianxt/fastjson-1.2.47-rce

version<1.2.51 远程命令执行

vulnerability-analysisexploitationweb-application-exploitation+2

46 years ago

CVE-2026-87902

hassham1/cve-2026-87902

WordPress Core <= 7.1.1 unauthenticated LFI to RCE - validation lab, PoC, nuclei template (GHSA-7hp8-65ch-5whp)

vulnerability-scannersvulnerability-analysisexploitation+7

227 days ago

Intel-CVE-2015-2291

tare05/intel-cve-2015-2291

PoC exploit for CVE-2015-2291

memory-forensicsvulnerability-analysisexploitation+2

56 years ago

log4j-cve-2021-44228

manuel-alvarez-alvarez/log4j-cve-2021-44228

Log4j CVE-2021-44228 examples: Remote Code Execution (through LDAP, RMI, ...), Forced DNS queries, ...

vulnerability-analysisexploitationweb-application-exploitation+3

54 years ago

Exploits

hussienmisbah/exploits

Repository containing exploit scripts for various CVEs, targeting web applications, binaries, and network services, suitable for penetration testing…

vulnerability-analysisexploitationshellcode+2

51 year ago

CVE-2018-0959

pwndorei/cve-2018-0959

Exploit CVE-2018-0959

vulnerability-analysisexploitationpenetration-testing+2

32 years ago

GhostLock-NVIDIA-Shield-9.2.4

cyberbalsa/ghostlock-nvidia-shield-9.2.4

Validated GhostLock CVE-2026-43499 port for NVIDIA Shield TV Pro mdarcy 9.2.4

android-securityprivilege-escalationexploit-frameworks+5

41 month ago

ghost_exploit

arm13/ghost_exploit

CVE-2015-0235 EXIM ESTMP GHOST Glibc Gethostbyname() DoS Exploit/PoC

exploit-frameworksvulnerability-analysisexploitation+2

411 years ago

cve-2016-7190

0xcl/cve-2016-7190

ChakraCore exploitation techniques

vulnerability-analysisexploitationshellcode+5

98 years ago

CVE-2026-6951

eqstlab/cve-2026-6951

Proof-of-concept exploit for CVE-2026-6951, a simple-git --config filter bypass enabling RCE via the Git ext protocol, with a Docker lab and reverse…

vulnerability-analysisexploitationweb-application-exploitation+4

221 days ago

CVE-2026-34990-poc

khush-613/cve-2026-34990-poc

Proof-of-concept exploit for CVE-2026-34990, a CUPS 2.4.16 local privilege escalation via arbitrary file write through CUPS_CREATE_LOCAL_PRINTER and…

privilege-escalationvulnerability-analysisexploitation+4

222 days ago

CVE-2025-49844

zain3311/cve-2025-49844

Exploit CVE-2025-49844 Redis Lua UAF vulnerability to execute arbitrary shellcode and establish persistent backdoor access on vulnerable Redis…

vulnerability-analysisexploitationpenetration-testing+3

28 days ago

cve-2026-43499-m3q-azf1

bugel/cve-2026-43499-m3q-azf1

This package is not a complete root. It flips SELinux to Permissive and holds reclaim long enough for follow-on work. Host `uid=0` is not achieved…

android-securityprivilege-escalationreconnaissance+4

42 months ago

Previous 1…939495…100 Next