Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools for creating and customizing malicious code or instructions to execute after exploitation.

Newest Relevance Most popular Recently updated

3373 results

CarbonCopy

paranoidninja/carboncopy

A tool which creates a spoofed certificate of any online website and signs an Executable for AV Evasion. Works for both Windows and Linux

payload-generationred-teaming

1.4k7 years ago

PowerSharpPack

s3cur3th1ssh1t/powersharppack

privilege-escalationexploit-frameworkspayload-generation+5

1.7k1 year ago

demiguise

nccgroup/demiguise

HTA encryption tool for RedTeams

phishing-toolspayload-generationids-ips-evasion+2

1.4k4 years ago

SysWhispers3

klezvirus/syswhispers3

SysWhispers on Steroids - AV/EDR evasion via direct system calls.

defensive-toolspayload-generationexploitation+2

1.6k2 years ago

CrossC2

gloxec/crossc2

generate CobaltStrike's cross-platform payload

penetration-testing-frameworksexploit-frameworkspayload-generation+4

2.6k3 years ago

AutoRDPwn

joelgmsec/autordpwn

The Shadow Attack Framework

password-crackingprivilege-escalationpayload-generation+5

1.1k4 years ago

Brutal

screetsec/brutal

Payload for teensy like a rubber ducky but the syntax is different. this Human interfaes device ( HID attacks ). Penetration With Teensy . Brutal is…

password-crackingprivilege-escalationpayload-generation+5

1.3k6 years ago

venom

r00t-3xp10it/venom

venom - C2 shellcode generator/compiler/handler

penetration-testing-frameworksexploit-frameworkspayload-generation+5

2.0k4 years ago

PoshC2

nettitude/poshc2

A proxy aware C2 framework used to aid red teamers with post-exploitation and lateral movement.

penetration-testing-frameworkspayload-generationlateral-movement+3

2.1k9 months ago

redsnarf

nccgroup/redsnarf

RedSnarf is a pen-testing / red-teaming tool for Windows environments

password-crackingprivilege-escalationpayload-generation+9

1.2k9 years ago

Anti-Virus-Evading-Payloads

rosesecurity/anti-virus-evading-payloads

During the exploitation phase of a pen test or ethical hacking engagement, you will ultimately need to try to cause code to run on target system…

payload-generationexploitationpenetration-testing+4

75028 days ago

weaponised-XSS-payloads

hakluke/weaponised-xss-payloads

XSS payloads designed to turn alert(1) into P1

payload-generationexploitationweb-application-exploitation+3

1.4k2 years ago

JYso

qi4l/jyso

Dual-purpose JNDI injection and Java deserialization exploitation framework with advanced bypass capabilities for WAF, RASP, and high JDK versions.…

penetration-testing-frameworksexploit-frameworksmemory-forensics+5

1.8k2 months ago

log4shell-vulnerable-app

christophetd/log4shell-vulnerable-app

Spring Boot web application vulnerable to Log4Shell (CVE-2021-44228).

payload-generationvulnerability-analysisexploitation+3

1.1k3 years ago

C2concealer

redsiege/c2concealer

Generates randomized, lint-validated C2 malleable profiles for Cobalt Strike, automating HTTP/S, DNS, SMB, and SSH beacon configuration with…

penetration-testing-frameworkspayload-generationcommand-and-control+1

1.1k4 months ago

Ares

sweetsoftware/ares

Python botnet and backdoor

payload-generationpersistence-mechanismspost-exploitation+2

1.6k8 years ago

shad0w

bats3c/shad0w

A post exploitation framework designed to operate covertly on heavily monitored environments

exploit-frameworkspayload-generationpost-exploitation+2

2.2k5 years ago

Supershell

tdragon6/supershell

Supershell C2 远控平台，基于反向SSH隧道获取完全交互式Shell

payload-generationpersistence-mechanismslateral-movement+5

1.8k4 months ago

Previous 1…456…188 Next