Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Categories

Payload Generation

Tools for creating and customizing malicious code or instructions to execute after exploitation.

Kitploit recommended

Top tools

10 selected
metasploit-framework preview#1

metasploit-framework

GitHubrapid7/metasploit-framework
38.8k1 day ago
donut preview#2

donut

GitHubthewover/donut
4.7k1 year ago
sRDI preview#3

sRDI

GitHubmonoxgas/srdi
2.5k4 years ago
sgn preview#4

sgn

GitHubegebalci/sgn
2.0k1 month ago
unicorn preview#5

unicorn

GitHubtrustedsec/unicorn
3.9k3 months ago
pe_to_shellcode preview#7

pe_to_shellcode

GitHubhasherezade/pe_to_shellcode
2.8k1 year ago
SysWhispers2 preview#8

SysWhispers2

GitHubjthuraisamy/syswhispers2
1.8k4 years ago
SysWhispers3 preview#9

SysWhispers3

GitHubklezvirus/syswhispers3
1.6k2 years ago
Empire preview#10

Empire

GitHubbc-security/empire
5.2k11h 3m ago
sliver preview#11

sliver

GitHubbishopfox/sliver
11.7k4 days ago
NewestRelevanceMost popularRecently updated
3427 results
CVE-2020-29134 preview

CVE-2020-29134

GitHubls4ss/cve-2020-29134

Exploit CVE-2020-29134 - TOTVS Fluig Platform - Path Traversal

payload-generationvulnerability-analysisexploitation+3
34 years ago
Golang-CVE-2021-22205-POC preview

Golang-CVE-2021-22205-POC

GitHubpizza-power/golang-cve-2021-22205-poc

A CVE-2021-22205 Gitlab RCE POC written in Golang

payload-generationvulnerability-analysisexploitation+3
34 years ago
xwiki-cve-2025-24893-poc preview

xwiki-cve-2025-24893-poc

GitHub570rmbr3ak3r/xwiki-cve-2025-24893-poc

PoC for CVE-2025-24893

payload-generationvulnerability-analysisexploitation+3
31 year ago
wp2shell preview

wp2shell

GitHubiqbalx7/wp2shell

unauthenticated RCE in WordPress core (CVE-2026-63030 + CVE-2026-60137)

password-crackingprivilege-escalationpayload-generation+4
1 month ago
react2shell preview

react2shell

GitHubgrp-ops/react2shell

Lightweight scanner and Nuclei templates for identifying React and Next.js deserialization RCEs (CVE-2025-55182 / CVE-2025-66478).

vulnerability-scannerspayload-generationexploitation+3
49 months ago
CVE-2025-2005 preview

CVE-2025-2005

GitHubmrmtwoj/cve-2025-2005

WordPress FEUP Arbitrary File Upload Exploit (CVE-2025-2005)

payload-generationvulnerability-analysisexploitation+3
31 year ago
CVE-2020-14871-Exploit preview

CVE-2020-14871-Exploit

GitHubrobidev/cve-2020-14871-exploit

This is a basic ROP based exploit for CVE 2020-14871. CVE 2020-14871 is a vulnerability in Sun Solaris systems libpam library, and exploitable over…

payload-generationvulnerability-analysisexploitation+3
24 years ago
CVE-2021-44228 preview

CVE-2021-44228

GitHubkr0ff/cve-2021-44228

Log4Shell Proof of Concept (CVE-2021-44228)

payload-generationvulnerability-analysisexploitation+3
44 years ago
CVE-2020-5752-Druva-inSync-Windows-Client-6.6.3---Local-Privilege-Escalation-PowerShell- preview

CVE-2020-5752-Druva-inSync-Windows-Client-6.6.3---Local-Privilege-Escalation-PowerShell-

GitHubyevh/cve-2020-5752-druva-insync-windows-client-6.6.3---local-privilege-escalation-powershell-

Druva inSync Windows Client 6.6.3 - Local Privilege Escalation (PowerShell) RCE

privilege-escalationpayload-generationvulnerability-analysis+2
43 years ago
Spring-Cloud-Function-Vulnerability-CVE-2022-22963-RCE preview

Spring-Cloud-Function-Vulnerability-CVE-2022-22963-RCE

GitHubrandallbanner/spring-cloud-function-vulnerability-cve-2022-22963-rce

Python exploit for CVE-2022-22963 (Spring4Shell) targeting Spring Cloud Function RCE. Automates reverse shell delivery via wget and bash one-liner…

payload-generationvulnerability-analysisexploitation+3
43 years ago
CVE-2026-4631-cockpit-RCE preview

CVE-2026-4631-cockpit-RCE

GitHubexdev994/cve-2026-4631-cockpit-rce

Unauthenticated Remote Code Execution via SSH Command-Line Argument Injection Cockpit versions 327 – 359 | CVSS 9.8 Critical | CWE-78

vulnerability-scannerspayload-generationexploitation+6
1 month ago
CVE-2022-24637 preview

CVE-2022-24637

GitHubpflegusch/cve-2022-24637

Open Web Analytics 1.7.3 - Remote Code Execution

payload-generationvulnerability-analysisexploitation+3
43 years ago
CVE-2023-21716 preview

CVE-2023-21716

GitHubfeatherstark/cve-2023-21716

Technical analysis and proof-of-concept exploit for CVE-2023-21716, a heap corruption vulnerability in Microsoft Word's RTF font table parser…

payload-generationvulnerability-analysisexploitation+2
43 years ago
CVE-2022-22963-PoC preview

CVE-2022-22963-PoC

GitHublemmyz4n3771/cve-2022-22963-poc

CVE-2022-22963 RCE PoC in python

payload-generationvulnerability-analysisexploitation+2
43 years ago
CVE-2018-2628 preview

CVE-2018-2628

GitHubvictor0013/cve-2018-2628

CVE-2018-2628

payload-generationvulnerability-analysisexploitation+3
18 years ago
watchTowr-vs-JunosEvolved-CVE-2026-21902 preview

watchTowr-vs-JunosEvolved-CVE-2026-21902

GitHubwatchtowrlabs/watchtowr-vs-junosevolved-cve-2026-21902

Generates detection artifacts for CVE-2026-21902 on Juniper Junos Evolved, enabling verification of unauthenticated remote code execution via command…

payload-generationvulnerability-analysisexploitation+4
46 months ago
CVE-2026-61424 preview

CVE-2026-61424

GitHubshinthink/cve-2026-61424

DJ-Classifieds Joomla Component Unauthenticated File Upload RCE. 3-string filter bypass via PHP short tags. CVSS 10.0 | CWE-434 | com_djclassifieds <…

payload-generationvulnerability-analysisexploitation+5
1 month ago
CVE-2026-15981 preview

CVE-2026-15981

GitHubnxploited/cve-2026-15981

SAML Single Sign On <= 5.4.4 - Unauthenticated Authentication Bypass via SAMLResponse Parameter

authentication-authorizationpayload-generationvulnerability-analysis+4
1 month ago
Previous1…99100Next