Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Categories

Payload Generation

Tools for creating and customizing malicious code or instructions to execute after exploitation.

NewestRelevanceMost popularRecently updated
3373 results
XSS2Shell preview

XSS2Shell

GitHubwordsec/xss2shell

Wordpress Pre-auth XSS to RCE exploit PoC (xss2shell & CVE-2026-64638)

payload-generationexploitationweb-application-exploitation+4
513 days ago
CVE-2026-63077 preview

CVE-2026-63077

GitHubsfewer-r7/cve-2026-63077

Unauthenticated Remote Code Execution in JetBrains TeamCity (CVE-2026-63077)

payload-generationexploitationweb-application-exploitation+1
113 days ago
CVE-2026-64638 preview

CVE-2026-64638

GitHubhorkimhab/cve-2026-64638

CVE-2026-64638 - Draft or TODO

vulnerability-scannerspayload-generationexploitation+5
13 days ago
CVE-2026-0049 preview

CVE-2026-0049

GitHubr3n3r0/cve-2026-0049
android-securitypayload-generationvulnerability-analysis+4
13 days ago
one-multiply-too-many-cve-2026-70638-llama-cpp-android-jni-integer-overflow preview

one-multiply-too-many-cve-2026-70638-llama-cpp-android-jni-integer-overflow

GitHubhunt-benito/one-multiply-too-many-cve-2026-70638-llama-cpp-android-jni-integer-overflow
android-securitypayload-generationvulnerability-analysis+3
13 days ago
PolyEngine preview

PolyEngine

GitHublongwayhomie/polyengine

PolyEngine is an evasive PE packer designed for CTF challenges and low-level Windows security education. It focuses on bypassing EDR and AV…

payload-generationexploitationids-ips-evasion+6
15414 days ago
sliver-gui preview

sliver-gui

GitHubmr-in4inci3le/sliver-gui

A desktop operator console for Sliver C2, built with Wails. Provides a native, lightweight GUI interface for Sliver by directly interfacing with its…

penetration-testing-frameworksprivilege-escalationpayload-generation+6
18214 days ago
CVE-2026-18649 preview

CVE-2026-18649

GitHub0xsemizzz/cve-2026-18649

Proof of concept for CVE-2026-18649, a remote denial of service vulnerability in GStreamer's H.264 RTP depayloader (rtph264depay).

payload-generationvulnerability-analysisexploitation+1
114 days ago
CVE-2026-70553-PoC preview

CVE-2026-70553-PoC

GitHubwoshidashabi1126/cve-2026-70553-poc
payload-generationexploitationweb-application-exploitation+2
114 days ago
POC-CVE-2026-56164-exploit preview

POC-CVE-2026-56164-exploit

GitHubsam00/poc-cve-2026-56164-exploit

CVE-2026-56164 is a critical missing-authentication vulnerability affecting on-premises Microsoft SharePoint Server. It allows unauthenticated,…

authentication-authorizationprivilege-escalationvulnerability-scanners+5
214 days ago
CVE-2026-56158-.NET-Framework-RCE-PoC-Exploit preview

CVE-2026-56158-.NET-Framework-RCE-PoC-Exploit

GitHubsam00/cve-2026-56158-.net-framework-rce-poc-exploit
vulnerability-scannerspayload-generationstatic-code-analysis+4
114 days ago
CVE-2026-69098_exploit preview

CVE-2026-69098_exploit

GitHub0xdak/cve-2026-69098_exploit
payload-generationvulnerability-analysisexploitation+2
14 days ago
CVE-2026-64633 preview

CVE-2026-64633

GitHubtfawnies/cve-2026-64633
payload-generationvulnerability-analysispapers-research+1
15 days ago
CVE-2026-23009-DICOM-Network-Image-Injection-Without-Authentication preview

CVE-2026-23009-DICOM-Network-Image-Injection-Without-Authentication

GitHubgeorge0papasotiriou/cve-2026-23009-dicom-network-image-injection-without-authentication
payload-generationvulnerability-analysisexploitation+3
15 days ago
CVE-2026-23001-Hugging-Face-Transformers-Model-Deserialization-Arbitrary-Code-via-Pickle- preview

CVE-2026-23001-Hugging-Face-Transformers-Model-Deserialization-Arbitrary-Code-via-Pickle-

GitHubgeorge0papasotiriou/cve-2026-23001-hugging-face-transformers-model-deserialization-arbitrary-code-via-pickle-
payload-generationexploitationsupply-chain-security+1
15 days ago
HTTP-Shell preview

HTTP-Shell

GitHubjoelgmsec/http-shell

Multiplatform HTTP reverse shell providing a shell-like interface over HTTP, with file upload/download, command history, auto-reconnection, and sudo…

payload-generationpenetration-testingcommand-and-control+2
24215 days ago
PyShell preview

PyShell

GitHubjoelgmsec/pyshell

Multi-platform Python webshell providing remote shell access on web servers with command history, file upload/download, and directory traversal…

payload-generationweb-application-exploitationpenetration-testing+1
32015 days ago
CVE-2026-44024_exploit preview

CVE-2026-44024_exploit

GitHub0xdak/cve-2026-44024_exploit
payload-generationvulnerability-analysisexploitation+2
16 days ago
Previous1…345…188Next