Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Shellcode generation, encoding, obfuscation, and testing frameworks.

Kitploit recommended

Top tools

10 selected

metasploit-framework

rapid7/metasploit-framework

38.8k14h 33m ago

donut

thewover/donut

4.7k1 year ago

sRDI

monoxgas/srdi

2.5k4 years ago

sgn

egebalci/sgn

2.0k2 months ago

unicorn

trustedsec/unicorn

3.9k29 days ago

pe_to_shellcode

hasherezade/pe_to_shellcode

2.8k1 year ago

SysWhispers2

jthuraisamy/syswhispers2

1.8k4 years ago

SysWhispers3

klezvirus/syswhispers3

1.6k2 years ago

#10

Empire

bc-security/empire

5.2k1 month ago

#11

sliver

bishopfox/sliver

11.7k5h 46m ago

Newest Relevance Most popular Recently updated

179 results

xeca

postrequest/xeca

PowerShell payload generator

payload-generationexploitationshellcode+6

1205 years ago

CVE-2024-6387

l-urk/cve-2024-6387

Proof of concept python script for regreSSHion exploit.

vulnerability-analysisexploitationshellcode+6

122 years ago

Archived

CVE-2015-8522.RCE

damariion/cve-2015-8522.rce

Exploit for CVE-2015-8522 targeting Tivoli FastBack Server with stack-based buffer overflow, ASLR/DEP bypass, and automated reverse-shell…

exploit-frameworksvulnerability-analysisexploitation+8

6 months ago

Invisi-Shell

omerya/invisi-shell

Hide your Powershell script in plain sight. Bypass all Powershell security features

defensive-toolsprivilege-escalationexploitation+9

1.3k7 years ago

frostbyte

pwn1sher/frostbyte

Combines AppDomain Manager injection with shellcode embedding in signed binaries to evade EDR/AV detection for red team payloads.

shellcodeshellcode-generation

3834 years ago

micr0_shell

senzee1984/micr0_shell

micr0shell is a Python script that dynamically generates Windows X64 PIC Null-Free reverse shell shellcode.

payload-generationexploitationshellcode+2

2226 months ago

OWASP-mth3l3m3nt-framework

alienwithin/owasp-mth3l3m3nt-framework

OWASP Mth3l3m3nt Framework is a penetration testing aiding tool and exploitation framework. It fosters a principle of attack the web using the web as…

exploit-frameworkspayload-generationweb-application-exploitation+3

1645 years ago

shellme

hatriot/shellme

simple shellcode generator

payload-generationexploitationshellcode+3

1139 years ago

static_asm

mahmoudimus/static_asm

Header-only C++2x compile-time assembler for x86/x86-64 instruction encoding

payload-generationcode-analysisexploitation+6

3113 days ago

MsfMania

lepotekil/msfmania

Python AV Evasion Tools

encryption-decryption-toolspayload-generationexploitation+9

5151 year ago

Clematis

cblabresearch/clematis

PE to shellcode

payload-generationexploitationshellcode+3

2831 year ago

NimGetSyscallStub

s3cur3th1ssh1t/nimgetsyscallstub

Dynamically extracts fresh syscall stubs from ntdll.dll to evade signature-based detection, with a shellcode execution template for Nim-based…

payload-generationexploitationshellcode+2

2324 years ago

KrayinCRM-RCE-Exploit-CVE-2026-38526

cerberusmrxi/krayincrm-rce-exploit-cve-2026-38526

CVE-2026-38526 exploit for Krayin CRM v2.2.x - Authenticated RCE via TinyMCE file upload bypass. Features interactive shell, multi-type payloads,…

payload-generationvulnerability-analysisexploitation+4

33 months ago

ASWCrypter

abedalqaderswedan1/aswcrypter

An Bash&Python Script For Generating Payloads that Bypasses All Antivirus so far [FUD]

exploit-frameworkspayload-generationshellcode+4

2918 years ago

SharpProxyLogon

flangvik/sharpproxylogon

C# POC for CVE-2021-26855 aka ProxyLogon, supports the classically semi-interactive web shell as well as shellcode injection

exploitationshellcodeweb-application-exploitation+3

2485 years ago

shellcide

zer0x64/shellcide

Shellcode IDE

encryption-decryption-toolsexploitationreverse-engineering+6

154 months ago

OpenSTAManager_RCE_Exploit-CVE-2026-38751-

hackthem/openstamanager_rce_exploit-cve-2026-38751-

OpenSTAManager RCE Exploit (CVE-2026-38751)