Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools for maintaining long-term access to compromised systems, even after reboots.

Kitploit recommended

Top tools

10 selected

Empire

bc-security/empire

5.2k1 month ago

sliver

bishopfox/sliver

11.7k6h 34m ago

Mythic

its-a-feature/mythic

4.7k10 days ago

Seatbelt

ghostpack/seatbelt

4.7k1 year ago

SharpDPAPI

ghostpack/sharpdpapi

1.4k2 years ago

NetExec

pennyw0rth/netexec

5.8k14h 24m ago

#10

impacket

fortra/impacket

16.0k16h 7m ago

#11

mimikatz

gentilkiwi/mimikatz

21.8k6 months ago

#13

emp3r0r

jm33-m0/emp3r0r

1.7k5 days ago

#14

merlin

ne0nd0g/merlin

5.6k7 days ago

Newest Relevance Most popular Recently updated

508 results

CVE-2026-Discord

nicetop1027/cve-2026-discord

Critical vulnerability report detailing zero-day Remote Debugging Port exposure in Discord macOS client leading to account takeover, spyware, worm…

persistence-mechanismsvulnerability-analysisexploitation+3

9 months ago

Agent-Tesla-APC-Injection-Token-Manipulation-Registry-Persistence-Analysis

kaandemir993/agent-tesla-apc-injection-token-manipulation-registry-persistence-analysis

"Reverse engineering analysis of Agent Tesla, a .NET-based info-stealer that uses APC injection, token manipulation, and registry persistence.…

privilege-escalationpersistence-mechanismsreverse-engineering+4

32 months ago

CVE-2026-6875-PoC-Exploit

tc4dy/cve-2026-6875-poc-exploit

CVE-2026-6875 ServiceNow Pre-Auth RCE Framework 🔥 JS Injection → Sandbox Escape → RCE → Root. Features: --detect, --exec, reverse/interactive shell,…

privilege-escalationvulnerability-scannerspersistence-mechanisms+7

39 days ago

s9180-rootmygalaxy

deancyl/s9180-rootmygalaxy

RootMyGalaxy for Galaxy S23 Ultra SM-S9180 (FZG1) - temp root via CVE-2026-43499, KernelSU late-load, no partition flashing, no Knox

android-securityprivilege-escalationpersistence-mechanisms+5

23 days ago

tesla-security-research

analyticeth/tesla-security-research

Vulnerability research on Tesla Model 3/Y infotainment systems. 6 vulnerabilities, 4 CVEs (CVE-2022-42005 through CVE-2022-42008). Root shell,…

embedded-systems-securityprivilege-escalationpersistence-mechanisms+7

54 months ago

CVE-2025-52691-APT-PoC

deathshotxd/cve-2025-52691-apt-poc

An enhanced proof-of-concept exploit for CVE-2025-52691 (SmarterMail Arbitrary File Upload RCE) with APT-level features like stealth obfuscation,…

persistence-mechanismsexploitationweb-application-exploitation+6

39 months ago

CVE-2026-65400

horkimhab/cve-2026-65400

Proof-of-concept exploit for CVE-2026-65400 enabling authenticated file read/write, reverse shells, and persistence on macOS via Apple ScreenSharing.

privilege-escalationpersistence-mechanismsexploitation+4

32 months ago

langflow-rce-exploit

0-d3y/langflow-rce-exploit

Remote Code Execution Exploit for Langflow (CVE-2025-3248) - [ By S4Tech ]

privilege-escalationpersistence-mechanismsvulnerability-analysis+8

71 year ago

GhostLock-NVIDIA-Shield-9.2.4

cyberbalsa/ghostlock-nvidia-shield-9.2.4

Validated GhostLock CVE-2026-43499 port for NVIDIA Shield TV Pro mdarcy 9.2.4

android-securityprivilege-escalationexploit-frameworks+5

41 month ago

CVE-2025-8088

lennertdefauw/cve-2025-8088

WinRAR < 7.13 path traversal for persistency

payload-generationpersistence-mechanismsvulnerability-analysis+3

57 months ago

Gozi

pr0xylife/gozi

persistence-mechanismsreverse-engineeringdata-exfiltration+4

54 years ago

CVE-2025-54914-PoC

ash1996x/cve-2025-54914-poc

Exploit for CVE-2025-54914 in Azure Networking, creating malicious routes with evasion, persistence, multi-target scanning, and reporting for…

reconnaissancepersistence-mechanismsvulnerability-analysis+4

41 year ago

CVE-2026-65660-Poc

shadowforge-cyber/cve-2026-65660-poc

Malicious Register Directive Code Injection Exploit

privilege-escalationpersistence-mechanismsexploitation+8

126 days ago

glimmer

linnemanlabs/glimmer

Adversary emulation and C2 framework for security research

penetration-testing-frameworkspersistence-mechanismsids-ips-evasion+8

55 months ago

CVE-2025-49144

vr00mm/cve-2025-49144

PoC CVE-2025-49144

privilege-escalationpersistence-mechanismsexploitation+6

61 year ago

glass-cage-i18-2025-24085-and-cve-2025-24201

5ky9uy/glass-cage-i18-2025-24085-and-cve-2025-24201

Glass Cage is a zero-click PNG-based RCE chain in iOS 18.2.1, exploiting WebKit (CVE-2025-24201) and Core Media (CVE-2025-24085) to achieve sandbox…

privilege-escalationios-securitypersistence-mechanisms+9

51 year ago

npm-incident-response

securest8/npm-incident-response

Scanner for the keyv/cacheable supply-chain attack: detects compromised npm packages, verifies payload hashes, and finds persistence implants in repo…

vulnerability-scannerspersistence-mechanismsmalware-analysis+3

22 months ago

CVE-2025-47827

zedeldi/cve-2025-47827

PoC and vulnerability report for CVE-2025-47827.