Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Shellcode generation, encoding, obfuscation, and testing frameworks.

Newest Relevance Most popular Recently updated

160 results

CVE-2014-4113

johnjohnsp1/cve-2014-4113

PowerShell CVE-2014-4113

privilege-escalationpayload-generationvulnerability-analysis+3

311 years ago

CVE-2022-28672

hacksysteam/cve-2022-28672

Foxit PDF Reader Remote Code Execution Exploit

exploitationshellcodeweb-application-exploitation+3

1212 years ago

CVE-2023-2255

elweth-sec/cve-2023-2255

CVE-2023-2255 Libre Office

payload-generationvulnerability-analysisexploitation+2

653 years ago

CVE-2018-19323

blueisbeautiful/cve-2018-19323

An exploitation framework for CVE-2018-19323 - GIGABYTE GDrv privilege escalation vulnerability with multi-architecture support and framework…

penetration-testing-frameworksprivilege-escalationexploit-frameworks+5

11 months ago

CVE-2018-2893

bigsizeme/cve-2018-2893

反弹shell生成器

payload-generationexploitationpenetration-testing+2

178 years ago

DbgNexum

dis0rder0x00/dbgnexum

Shellcode injection using the Windows Debugging API

payload-generationexploitationshellcode+6

1837 months ago

PSForgot2kEyXCHANGE

justin-p/psforgot2keyxchange

PoC for Forgot2kEyXCHANGE (CVE-2020-0688) written in PowerShell

payload-generationvulnerability-analysisexploitation+3

56 years ago

cve-2019-11707

flabbergastedbd/cve-2019-11707

https://bugs.chromium.org/p/project-zero/issues/detail?id=1820

vulnerability-analysisexploitationshellcode+4

26 years ago

CVE-2022-28368-handler

that-guy-steve/cve-2022-28368-handler

This repository contains a python script that will handle the majority of the dompdf cached font exploit (CVE-2022-28368), all you need to do is…

payload-generationvulnerability-analysisexploitation+3

3 years ago

CVE-2025-3969-Exploit

stuub/cve-2025-3969-exploit

CVE-2025-3969: Exploit PoC (OS CMD injection, Web Shell, Interactive Shell)

payload-generationexploitationweb-application-exploitation+3

21 year ago

byvalver

umpolungfish/byvalver

takes shellcode bad-bytes and banishes them, returning cleaned shellcode with preserved functionalities

exploitationshellcodemalware-analysis+6

635 months ago

Archived

CVE-2015-8522.RCE

damariion/cve-2015-8522.rce

Tivoli FastBack Server (6.1.4) is vulnerable to a stack-based buffer overflow allowing threat-actors to gain Arbitrary Code Execution (ACE) via a…

exploit-frameworksvulnerability-analysisexploitation+8

4 months ago

dameflare

boydhacks/dameflare

Python 3 exploit for CVE-2019-3980. Unauthenticated RCE as SYSTEM via SolarWinds Dameware MRC smart card authentication bypass.

payload-generationvulnerability-analysisexploitation+6

35 months ago

OpenSTAManager_RCE_Exploit-CVE-2026-38751-

hackthem/openstamanager_rce_exploit-cve-2026-38751-

OpenSTAManager RCE Exploit (CVE-2026-38751)

payload-generationvulnerability-analysisexploitation+4

11 month ago

Neo

stillbigjosh/neo

The NeoC2 Framework

privilege-escalationexploit-frameworkspersistence-mechanisms+8

341 month ago

anamnesis-release

seanheelan/anamnesis-release

Evaluation framework for studying LLM agents that automatically generate working exploits from vulnerability reports, bypassing modern security…

penetration-testing-frameworksexploit-frameworksvulnerability-analysis+9

6286 months ago

static_asm

mahmoudimus/static_asm

Header-only C++2x compile-time assembler for x86/x86-64 instruction encoding

payload-generationcode-analysisexploitation+6

316 months ago

malasada

sliverarmory/malasada

Linux Shared Library to Shellcode Loader

exploitationshellcodepost-exploitation+5

1016 months ago

Previous 1…345…9 Next