Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Categories

Payload Generation

Tools for creating and customizing malicious code or instructions to execute after exploitation.

Kitploit recommended

Top tools

10 selected
metasploit-framework preview#1

metasploit-framework

GitHubrapid7/metasploit-framework
38.8k1 day ago
donut preview#2

donut

GitHubthewover/donut
4.7k1 year ago
sRDI preview#3

sRDI

GitHubmonoxgas/srdi
2.5k4 years ago
sgn preview#4

sgn

GitHubegebalci/sgn
2.0k1 month ago
unicorn preview#5

unicorn

GitHubtrustedsec/unicorn
3.9k3 months ago
pe_to_shellcode preview#7

pe_to_shellcode

GitHubhasherezade/pe_to_shellcode
2.8k1 year ago
SysWhispers2 preview#8

SysWhispers2

GitHubjthuraisamy/syswhispers2
1.8k4 years ago
SysWhispers3 preview#9

SysWhispers3

GitHubklezvirus/syswhispers3
1.6k2 years ago
Empire preview#10

Empire

GitHubbc-security/empire
5.2k13h 30m ago
sliver preview#11

sliver

GitHubbishopfox/sliver
11.7k4 days ago
NewestRelevanceMost popularRecently updated
3427 results
JndiLookup preview

JndiLookup

GitHubmadcdan/jndilookup

Some tools to help mitigating Apache Log4j 2 CVE-2021-44228

dynamic-analysis-sandboxingpayload-generationvulnerability-analysis+3
34 years ago
CVE-2024-4761 preview

CVE-2024-4761

GitHubmichredteam/cve-2024-4761

High CVE-2024-4761 Exploit

payload-generationvulnerability-analysisexploitation+2
42 years ago
terraMaster-CVE-2022-24990 preview

terraMaster-CVE-2022-24990

GitHubjsongmax/terramaster-cve-2022-24990

CVE-2022-24990 exploit tool with POC detection and EXP WebShell upload for TerraMaster NAS devices. Supports URL-based targeting and dual-mode…

payload-generationvulnerability-analysisexploitation+2
43 years ago
Fast-CVE-2022-22965 preview

Fast-CVE-2022-22965

GitHubiloveflag/fast-cve-2022-22965

Graphical detection tool for CVE-2022-22965 (Spring4Shell) with one-click reverse shell generation, command execution, and multi-server shell path…

vulnerability-scannerspayload-generationexploitation+3
43 years ago
CVE-2026-56291 preview

CVE-2026-56291

GitHubshinthink/cve-2026-56291

Balbooa Forms (com_baforms) < 2.4.1 — Unauthenticated File Upload to RCE via form.uploadAttachmentFile | CVSS 9.8 | CISA KEV

payload-generationvulnerability-analysisexploitation+3
21 month ago
SonLogger-vulns preview

SonLogger-vulns

GitHuberberkan/sonlogger-vulns

SonLogger Vulns (CVE-2021-27963, CVE-2021-27964)

exploit-frameworkspayload-generationvulnerability-analysis+3
15 years ago
cve-2017-2824-reverse-shell preview

cve-2017-2824-reverse-shell

GitHublistenquiet/cve-2017-2824-reverse-shell
payload-generationexploitationweb-application-exploitation+3
64 years ago
EvilAhenk preview

EvilAhenk

GitHubjackalkarlos/evilahenk

CVE-2026-6508 LiderAhenk Merkezi Yönetim Sistemi mimarisinde, uç birimler (agents) arası tüm istemcilerin birbirleri üzerinde 'root' yetkisiyle kod…

privilege-escalationpayload-generationvulnerability-analysis+7
22 months ago
CVE-2026-33017 preview

CVE-2026-33017

GitHubc0gnit00/cve-2026-33017

Python proof-of-concept exploit for CVE-2026-33017, an unauthenticated remote code execution vulnerability in Langflow. Delivers a reverse shell via…

payload-generationvulnerability-analysisexploitation+4
22 months ago
CVE-2026-27966 preview

CVE-2026-27966

GitHubshinthink/cve-2026-27966

Pre-auth RCE scanner for Langflow < 1.8.0 — Route Injection + Vertex Injection → Code Execution (CVSS 9.8)

reconnaissancevulnerability-scannerspayload-generation+5
22 months ago
CVE-2026-6815 preview

CVE-2026-6815

GitHubdanilo-dellorco/cve-2026-6815

Authenticated path traversal and arbitrary file write PoC exploit for Casdoor <3.54.1, enabling RCE via SSH key injection, web shell upload, or…

payload-generationvulnerability-analysisexploitation+3
22 months ago
CVE-2026-9277 preview

CVE-2026-9277

GitHubdylanzahedi/cve-2026-9277

Proof-of-concept exploit for CVE-2026-9277, a command injection vulnerability in shell-quote library. Performs recursive JSON traversal with…

payload-generationvulnerability-analysisexploitation+3
21 month ago
PageBuilderCK-CVE-2026-56290-Exploit preview

PageBuilderCK-CVE-2026-56290-Exploit

GitHubsagsooz/pagebuilderck-cve-2026-56290-exploit

Page Builder CK for Joomla - Unauthenticated SSRF / Remote File Write leading to PHP execution Exploiter

vulnerability-scannerspayload-generationexploitation+3
22 months ago
CVE-2019-0232 preview

CVE-2019-0232

GitHubyuzuki-ayanami/cve-2019-0232

CVE-2019-0232 - Apache Tomcat CGIServlet enableCmdLineArguments RCE - PoC Exploit

payload-generationvulnerability-analysisexploitation+2
11 month ago
zip_bomb preview

zip_bomb

GitHubjenderal92/zip_bomb

ZIP Bomb Creator is a tool used to create a ZIP file that is small in size but drastically expands when extracted.

payload-generationvulnerability-analysisexploitation+2
33 months ago
cve-2020-14008 preview

cve-2020-14008

GitHubjackhars/cve-2020-14008

Python exploit for CVE-2020-14008 in ManageEngine Applications Manager delivering a SYSTEM-level reverse shell via authenticated remote code…

privilege-escalationpayload-generationvulnerability-analysis+4
41 year ago
CVE-2025-6440-Poc-Exploit preview

CVE-2025-6440-Poc-Exploit

GitHubm2hcz/cve-2025-6440-poc-exploit

Unauthenticated remote code execution exploit for the WC Designer Pro WordPress plugin. Automates detection, file upload, and shell access via a…

payload-generationvulnerability-analysisexploitation+3
11 month ago
CVE-2014-6271 preview

CVE-2014-6271

GitHub0x00-0x00/cve-2014-6271

Shellshock exploitation script that is able to upload and RCE using any vector due to its versatility.

payload-generationexploitationweb-application-exploitation+3
38 years ago
Previous1…969798…100Next