Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

RAT analysis, detection signatures, behavioral analysis, and research frameworks.

Kitploit recommended

Top tools

10 selected

emp3r0r

jm33-m0/emp3r0r

1.7k6 days ago

merlin

ne0nd0g/merlin

5.6k8 days ago

sliver

bishopfox/sliver

11.7k13h 44m ago

Mythic

its-a-feature/mythic

4.7k11 days ago

Empire

bc-security/empire

5.2k1 month ago

metasploit-framework

rapid7/metasploit-framework

38.8k9h 28m ago

#10

kubesploit

cyberark/kubesploit

1.2k1 year ago

#12

AdaptixC2

adaptix-framework/adaptixc2

3.5k28 days ago

#13

chisel

jpillora/chisel

16.4k11 days ago

#14

ligolo-ng

nicocha30/ligolo-ng

4.8k27 days ago

Newest Relevance Most popular Recently updated

161 results

njRAT-0.7d-Stub-CSharp

nyan-x-cat/njrat-0.7d-stub-csharp

njRAT C# Stub - Fixed For PowerShell

payload-generationpersistence-mechanismsexploitation+5

577 years ago

ImgBackdoor

tsuyoken/imgbackdoor

Hide your payload into .jpg file

payload-generationexploitationcommand-and-control+3

3944 years ago

CVE-2026-75604-poc

rafabd1/cve-2026-75604-poc

Proof-of-concept exploit for CVE-2026-75604, an unauthenticated remote code execution in Windows-hosted Next.js apps, with callback-based command…

vulnerability-analysisexploitationweb-application-exploitation+2

1051 month ago

Research-CVE-2026-21858

bannt08/research-cve-2026-21858

Technical analysis and proof-of-concept for CVE-2026-21858, an authentication bypass and RCE in n8n, demonstrating LFI, session forgery, and full…

vulnerability-analysisexploitationweb-application-exploitation+2

5 months ago

Powershell-RAT

viralmaniar/powershell-rat

Python based backdoor that uses Gmail to exfiltrate data through attachment. This RAT will help during red team engagements to backdoor any Windows…

payload-generationpersistence-mechanismsdata-exfiltration+4

1.2k7 years ago

PixelCode-Attack

s3n4t0r-0x0/pixelcode-attack

Malicious PixelCode is a security research project that demonstrates a covert technique for encoding executable files into pixel data and storing…

reverse-engineeringdata-exfiltrationpost-exploitation+8

1718 months ago

spyrat

m4sc3r4n0/spyrat

Python Remote Access Trojan

persistence-mechanismspost-exploitationcommand-and-control+3

1489 years ago

CVE-2026-63030

langz337/cve-2026-63030

Python exploit tool chaining CVE-2026-63030 REST batch-route confusion with CVE-2026-60137 SQL injection to achieve unauthenticated WordPress RCE,…

privilege-escalationvulnerability-scannersexploitation+8

126 days ago

CVE-2026-33017

maxprog-svg/cve-2026-33017

CVE-2025-62593 — Ray Unauthenticated RCE Exploit is an unauthenticated remote code execution vulnerability in the Ray distributed AI compute engine.

reconnaissancevulnerability-scannersexploitation+3

1 month ago

Archived

antnium

dobin/antnium

A C2 framework for initial access in Go

data-exfiltrationpost-exploitationcommand-and-control+3

2004 years ago

DarkAgent

ilikenwf/darkagent

DarkAgent Remote Administration Tool RAT by DragonHunter

post-exploitationpenetration-testingcommand-and-control+3

14213 years ago

Archived

remcos-decoder

cisco-talos/remcos-decoder

Talos Decryptor POC for Remcos RAT version 2.0.5 and earlier

encryption-decryption-toolsreverse-engineeringmalware-analysis+2

248 years ago

SillyRAT

hash3lizer/sillyrat

A Python based RAT 🐀 (Remote Access Trojan) for getting reverse shell 🖥️

payload-generationpost-exploitationcommand-and-control+1

9373 years ago

EvilOSX

marten4n6/evilosx

An evil RAT (Remote Administration Tool) for macOS / OS X.

password-crackingprivilege-escalationpayload-generation+6

2.4k5 years ago

BetterAndroRAT

mwsrc/betterandrorat

Android Remote Access Trojan

android-securityprivilege-escalationpersistence-mechanisms+8

5399 years ago

PyIris

not-sekiun/pyiris

PyIris is a modular remote access trojan toolkit written in python targeting Windows and Linux systems.

payload-generationexploitationpost-exploitation+4

3251 month ago

CVE-2019-2107

infiniteloopers/cve-2019-2107

Proof-of-concept exploit for CVE-2019-2107, demonstrating remote code execution via crafted HEVC video on Android media framework. Includes crash…

android-securityvulnerability-analysisexploitation+4

47 years ago

zeek-asyncrat-detector

corelight/zeek-asyncrat-detector

A Zeek based AsyncRAT malware detector.

network-securitymalware-analysiscommand-and-control+3

31 year ago

Previous 1…345…9 Next