Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Categories

Payload Generation

Tools for creating and customizing malicious code or instructions to execute after exploitation.

Kitploit recommended

Top tools

10 selected
metasploit-framework preview#1

metasploit-framework

GitHubrapid7/metasploit-framework
38.8k13h 4m ago
donut preview#2

donut

GitHubthewover/donut
4.7k2 years ago
sRDI preview#3

sRDI

GitHubmonoxgas/srdi
2.5k4 years ago
sgn preview#4

sgn

GitHubegebalci/sgn
2.0k3 months ago
unicorn preview#5

unicorn

GitHubtrustedsec/unicorn
3.9k7 days ago
pe_to_shellcode preview#7

pe_to_shellcode

GitHubhasherezade/pe_to_shellcode
2.8k1 year ago
SysWhispers2 preview#8

SysWhispers2

GitHubjthuraisamy/syswhispers2
1.8k4 years ago
SysWhispers3 preview#9

SysWhispers3

GitHubklezvirus/syswhispers3
1.6k2 years ago
Empire preview#10

Empire

GitHubbc-security/empire
5.2k1 month ago
sliver preview#11

sliver

GitHubbishopfox/sliver
11.7k11 days ago
NewestRelevanceMost popularRecently updated
3475 results
RAT-via-Telegram preview

RAT-via-Telegram

GitHubdviros/rat-via-telegram

Windows Remote Post Breach Tool via Telegram

phishing-toolsprivilege-escalationpayload-generation+7
1358 years ago
C99Shell-PHP7 preview

C99Shell-PHP7

GitHubpinoywh1z/c99shell-php7

PHP 7 and safe-build Update of the popular C99 variant of PHP Shell.

payload-generationweb-application-exploitationpost-exploitation+2
1513 years ago
Scanner-and-Patcher preview

Scanner-and-Patcher

GitHubmalwareman007/scanner-and-patcher

A Web Vulnerability Scanner and Patcher

reconnaissancevulnerability-scannersweb-vulnerability-scanners+8
1731 year ago
CVE-2019-11580 preview

CVE-2019-11580

GitHubjas502n/cve-2019-11580

Python exploit for CVE-2019-11580, a remote code execution vulnerability in Atlassian Crowd and Crowd Data Center. Uploads a malicious plugin to…

payload-generationvulnerability-analysisexploitation+3
1057 years ago
Swego preview

Swego

GitHubnodauf/swego

Swiss army knife Webserver in Golang. Keep simple like the python SimpleHTTPServer but with many features

payload-generationweb-securitypenetration-testing+2
1981 year ago
CVE-2020-14882_ALL preview

CVE-2020-14882_ALL

GitHubggyao/cve-2020-14882_all

CVE-2020-14882_ALL综合利用工具,支持命令回显检测、批量命令回显、外置xml无回显命令执行等功能。

payload-generationvulnerability-analysisexploitation+3
1444 years ago
Shellcrypt preview

Shellcrypt

GitHubiilegacyyii/shellcrypt

A QoL tool to obfuscate shellcode. In the future will be able to chain encoding/encryption/compression methods.

encryption-decryption-toolspayload-generationshellcode+3
2163 years ago
Vm4J preview

Vm4J

GitHubns-sp4ce/vm4j

A tool for detect&exploit vmware product log4j(cve-2021-44228) vulnerability.Support VMware HCX/vCenter/NSX/Horizon/vRealize Operations Manager

vulnerability-scannerspayload-generationexploitation+3
2094 years ago
Metadata-Attacker preview

Metadata-Attacker

GitHubrub-nds/metadata-attacker

A tool to generate media files with malicious metadata

payload-generationinformation-gatheringweb-security+1
1287 years ago
shellcode2assembly preview

shellcode2assembly

GitHubblacknbunny/shellcode2assembly

💻 ARCH : ARM, ARM64, MIPS, PPC, X86

payload-generationreverse-engineeringshellcode+1
868 years ago
EventViewerUAC_BOF preview

EventViewerUAC_BOF

GitHuboctoberfest7/eventvieweruac_bof

Beacon Object File implementation of Event Viewer deserialization UAC bypass

privilege-escalationpayload-generationexploitation+2
1334 years ago
Remot3d preview

Remot3d

GitHubkeepwannabe/remot3d

Remot3d: is a simple tool created for large pentesters as well as just for the pleasure of defacers to control server by backdoors

payload-generationexploitationweb-application-exploitation+2
2826 years ago
ADCSDevilCOM preview

ADCSDevilCOM

GitHub7hepr0fess0r/adcsdevilcom

A C# tool for requesting certificates from ADCS using DCOM over SMB. This tool allows you to remotely request X.509 certificates from CA server using…

authentication-authorizationprivilege-escalationpayload-generation+5
1681 year ago
AutomatedRoot preview

AutomatedRoot

GitHubr0rt1z2/automatedroot

Root your MediaTek device with CVE-2020-0069

android-securityprivilege-escalationpayload-generation+3
1883 years ago
http-terminator preview

http-terminator

GitHubportswigger/http-terminator

AI-assisted research pipeline that extracts HTTP desync techniques, generates malformed request test-cases, validates them via Burp, and confirms…

web-vulnerability-scannerspayload-generationvulnerability-analysis+8
1253 months ago
WeBaCoo preview

WeBaCoo

GitHubanestisb/webacoo

Web Backdoor Cookie Script-Kit

payload-generationweb-securitypenetration-testing+2
18614 years ago
nmap-log4shell preview

nmap-log4shell

GitHubgiterlizzi/nmap-log4shell

Nmap NSE script for detecting Apache Log4j RCE (CVE-2021-44228) by injecting JNDI exploit payloads via HTTP headers or TCP/UDP sockets across…

vulnerability-scannerspayload-generationexploitation+4
784 years ago
vRealizeLogInsightRCE preview

vRealizeLogInsightRCE

GitHubhorizon3ai/vrealizeloginsightrce

POC for RCE using vulnerabilities described in VMSA-2023-0001

payload-generationvulnerability-analysisexploitation+2
1473 years ago
Previous1…313233…100Next