Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

223 results

PhantomCtx

r3xmax/phantomctx

Activation Context Hijacking Evasion Tool

binary-exploitationexploitationpayload-development+3

3052 months ago

CVE-2017-11882

rip1s/cve-2017-11882

Exploit for CVE-2017-11882 (Microsoft Office Equation Editor buffer overflow) supporting shellcode injection and command execution with payloads up…

binary-exploitationexploitationpayload-generation+4

3318 years ago

ZeroHVCI

zer0condition/zerohvci

Achieve arbitrary kernel read/writes/function calling in Hypervisor-Protected Code Integrity (HVCI) protected environments calling without admin…

binary-exploitationexploitationpayload-development+2

2925 months ago

CVE-2018-8120

rip1s/cve-2018-8120

Windows local privilege escalation exploit for CVE-2018-8120 supporting x32 and x64 architectures, tested on multiple Windows 7 and 2008 variants.

binary-exploitationexploitationpayload-generation+1

4988 years ago

qq-tim-elevation

vi3t1/qq-tim-elevation

Exploit for CVE-2023-34312: local privilege escalation in Tencent QQ/TIM via arbitrary address write vulnerabilities in QQProtect.exe, enabling…

binary-exploitationexploitationpayload-development+4

4193 years ago

Fritter

0xrootpls/fritter

Polymorphic shellcode generator for in-memory execution of EXE, DLL, .NET, VBScript, and JScript with per-output and per-build randomization for…

binary-exploitationexploitationpayload-development+5

24920 days ago

collateral-damage

exploits-forsale/collateral-damage

Kernel exploit for Xbox SystemOS using CVE-2024-30088

binary-exploitationexploitationhardware-iot-security+3

5281 year ago

PINKPANTHER

winterknife/pinkpanther

Windows x64 handcrafted token stealing kernel-mode shellcode

binary-exploitationpayload-developmentpost-exploitation+2

5192 years ago

hacking-team-windows-kernel-lpe

vlad902/hacking-team-windows-kernel-lpe

Previously-0day exploit from the Hacking Team leak, written by Eugene Ching/Qavar.

binary-exploitationexploitationpayload-generation+2

20311 years ago

CVE-2020-0674-Exploit

maxpl0it/cve-2020-0674-exploit

This is an exploit for CVE-2020-0674 that runs on the x64 version of IE 8, 9, 10, and 11 on Windows 7.

binary-exploitationexploitationpayload-generation+3

2226 years ago

Exploit-Development

voidsec/exploit-development

Weaponized exploit and proof-of-concept repository for Windows kernel and user-mode exploits, featuring ROP chains, ASLR bypass, and privilege…

binary-exploitationexploitationpayload-development+3

2383 years ago

DropSpawn_BOF

octoberfest7/dropspawn_bof

CobaltStrike BOF to spawn Beacons using DLL Application Directory Hijacking

binary-exploitationexploitationpayload-development+4

2873 years ago

DbgNexum

dis0rder0x00/dbgnexum

Shellcode injection using the Windows Debugging API

binary-exploitationexploitationpayload-development+6

1827 months ago

AirBorne-PoC

ekomssavior/airborne-poc

Proof-of-concept framework for CVE-2025-24252 and CVE-2025-24132, providing mDNS crash trigger and heap overflow reverse shell with multiple payload…

binary-exploitationcommand-and-controlexploitation+6

1647 months ago

CVE-2025-11001

pacbypass/cve-2025-11001

Python exploit for CVE-2025-11001/11002 targeting 7-Zip on Windows, leveraging symlink creation to achieve code execution when 7-Zip runs with admin…

binary-exploitationexploitationpayload-generation+1

1519 months ago

shellme

hatriot/shellme

Python script that wraps nasm/objdump to quickly generate shellcode bytes from assembly instructions or compiled ELF binaries, supporting multiple…

binary-exploitationexploitationpayload-development+3

1139 years ago

CVE-2020-1066-EXP

cbwang505/cve-2020-1066-exp

Local privilege escalation exploit for CVE-2020-1066 targeting Windows 7 and Server 2008 R2. Leverages arbitrary file replacement via Windows…

binary-exploitationexploitationpayload-development+3

1866 years ago

DataInject-BOF

iilegacyyii/datainject-bof

Hijacks code execution via overwriting Control Flow Guard pointers in combase.dll

binary-exploitationexploitationpayload-development+3

1551 year ago

Previous 1 234…13 Next