Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

RAT analysis, detection signatures, behavioral analysis, and research frameworks.

Kitploit recommended

Top tools

10 selected

emp3r0r

jm33-m0/emp3r0r

1.7k7 days ago

merlin

ne0nd0g/merlin

5.6k8 days ago

sliver

bishopfox/sliver

11.7k1 day ago

Mythic

its-a-feature/mythic

4.7k12 days ago

Empire

bc-security/empire

5.2k1 month ago

metasploit-framework

rapid7/metasploit-framework

38.8k0 days ago

#10

kubesploit

cyberark/kubesploit

1.2k1 year ago

#12

AdaptixC2

adaptix-framework/adaptixc2

3.5k28 days ago

#13

chisel

jpillora/chisel

16.4k12 days ago

#14

ligolo-ng

nicocha30/ligolo-ng

4.8k28 days ago

Newest Relevance Most popular Recently updated

161 results

zoshrinkC2

demon-i386/zoshrinkc2

DNS over HTTPS targeted malware (only runs once)

payload-generationids-ips-evasioncryptography+3

973 years ago

rat-shell

stphivos/rat-shell

Windows Remote Access Trojan (RAT)

post-exploitationpenetration-testingcommand-and-control+3

8910 years ago

backcookie

jofpin/backcookie

Small backdoor using cookie.

payload-generationweb-application-exploitationpenetration-testing+3

6410 years ago

XeytanWin32-RAT

melardev/xeytanwin32-rat

WORK IN PROGRESS. RAT written in C++ using Win32 API

privilege-escalationpersistence-mechanismsexploitation+8

207 years ago

TospoVirus

catatonicprime/tospovirus

A WiFi Pineapple infecting worm.

persistence-mechanismsexploitationlateral-movement+5

1711 years ago

Archived

caldera-crater

mitre/caldera-crater

C# remote access trojan (RAT) implant for the Caldera adversary emulation framework, enabling post-exploitation command and control on Windows…

post-exploitationpenetration-testingcommand-and-control+3

98 years ago

Code-Roulette

sorcerio/code-roulette

Code Roulette is a terminal interface based (TUI), online multiplayer, Russian Roulette game where the loser executes the winner's Python payload…

payload-generationctfcommand-and-control+3

78 months ago

ShadowTech-Rat

retrobyte/shadowtech-rat

An example of a remote administration tool.

post-exploitationpenetration-testingcommand-and-control+3

410 years ago

xll_windows_reverse_shell

h3x0v3rl0rd/xll_windows_reverse_shell

xll windows reverse shell

phishing-toolsexploitationcommand-and-control+4

1 year ago

veritas-backup

hyderpwn/veritas-backup

Metasploit module for exploiting Veritas Backup Exec Agent SHA-auth NDMP vulnerability to achieve remote code execution.

exploit-frameworksvulnerability-analysisexploitation+2

11 month ago

TeleShadow3

eternalc0der/teleshadow3

Telegram Desktop Session Stealer

information-gatheringmalware-analysissocial-engineering+1

1787 years ago

gh0st3.6_src

igh0st/gh0st3.6_src

Remote Access Trojan (RAT) source code for learning C2 communication, payload delivery, and post-exploitation techniques in Windows environments.

persistence-mechanismsdata-exfiltrationpost-exploitation+3

16912 years ago

BloodfangC2

zarkones/bloodfangc2

Modern PIC implant for Windows (64 & 32 bit)

shellcodepost-exploitationcommand-and-control+4

1051 year ago

CVE-2026-38426

sermikr0/cve-2026-38426

CVE-2026-38426 — strcpy() Stack Buffer Overflow in Tasmota fetch_jpg() boundary[40] (Tasmota <= 15.3.0.3)

embedded-systems-securityiot-securityvulnerability-analysis+4

5 months ago

CVE-2026-5524-PoC

iicaicai/cve-2026-5524-poc

Python mass-exploit toolkit for CVE-2026-5524, an unauthenticated file upload RCE in the WordPress Divi Form Builder plugin, with webshell upload and…

reconnaissancevulnerability-scannersexploitation+8

3 months ago