Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

899 results

Lab-RATS-v1.6

k4n3co/lab-rats-v1.6

Lab-RATS is a powerful and lightweight Android Remote Administration Tool full of features that enables remote monitoring, management and interaction…

android-securitycommand-and-controldata-exfiltration+8

21h 7m ago

AndroRAT

karma9874/androrat

A Simple android remote administration tool using sockets. It uses java on the client side and python on the server side

android-securitycommand-and-controldata-exfiltration+7

5.2k2 years ago

SharpMemshell

a-d-team/sharpmemshell

.NET in-memory webshell (memshell) payloads implemented via HttpListener and VirtualPath, compatible with the Godzilla 4.01 post-exploitation…

command-and-controldefensive-toolspayload-development+5

3004 years ago

pfsense-l2tp-radius-mpd

abraxas/pfsense-l2tp-radius-mpd

pfSense CE 2.9.0-DEVELOPMENT - High - Remote - RCE - L2TP RADIUS mpd.conf

command-and-controlexploitationpenetration-testing+3

16 days ago

pfsense-sshguard-crlf

abraxas/pfsense-sshguard-crlf

pfSense CE 2.9.0-DEVELOPMENT - High - Remote - RCE - sshguard THRESHOLD CRLF

command-and-controlexploitationpenetration-testing+4

116 days ago

AdStrike

capture0x/adstrike

AI-powered modular Active Directory red-team framework for authorized penetration testing, AD enumeration, attack-path analysis, Kerberos/ADCS…

ai-securitycommand-and-controlexploitation+7

39114 days ago

pfsense-wireless-clone

abraxas/pfsense-wireless-clone

pfSense CE 2.9.0-DEVELOPMENT - High - Remote - RCE - wireless clone ifconfig

command-and-controlexploitationpenetration-testing+3

116 days ago

pfsense-qinq-parent-if

abraxas/pfsense-qinq-parent-if

pfSense CE 2.9.0-DEVELOPMENT - High - Remote - RCE - QinQ parent-if ifconfig

command-and-controlexploitationnetwork-security+4

193 days ago

ddossnake

vqkro/ddossnake

Go load and stress testing tool with L7 HTTP and L4 raw TCP/UDP modes, multi-threaded workers, live rate graph, and a Windows GUI plus cross-platform…

command-and-controlnetwork-securitypenetration-testing+2

18 days ago

Joomla-webshell-plugin

p0dalirius/joomla-webshell-plugin

A webshell plugin and interactive shell for pentesting a Joomla website.

command-and-controlexploitationpayload-development+6

624 years ago

CVE-2026-102607-ZoneMinder

d4kw1n/cve-2026-102607-zoneminder

Python PoC exploiting CVE-2026-102607, an authenticated OS command injection in ZoneMinder <= 1.38.1 exportEvents() enabling RCE, command output…

command-and-controlexploitationpenetration-testing+4

16 months ago

CVE-2026-22777

si13nttt/cve-2026-22777

Proof-of-concept exploit chaining CRLF injection in ComfyUI-Manager's config endpoint with an arbitrary git install to achieve unauthenticated remote…

command-and-controlexploitationpayload-development+5

1 month ago

CVE-2026-31857

0asylum/cve-2026-31857

CraftCMS has an RCE vulnerability via relational conditionals in the control panel

command-and-controlexploitationpenetration-testing+4

11 month ago

CVE-2026-44011-craftcms-auth-rce

4xura/cve-2026-44011-craftcms-auth-rce

The PoC of CVE-2026-44011: Craft CMS RCE with an authenticated user.

command-and-controlexploitationpenetration-testing+5

61 month ago

CVE-2026-44011-poc

dennisdgr/cve-2026-44011-poc

Authenticated Craft CMS RCE PoC for CVE-2026-44011

command-and-controlexploitationpenetration-testing+5

1 month ago

CVE-2026-63030

langz337/cve-2026-63030

Python exploit tool chaining CVE-2026-63030 REST batch-route confusion with CVE-2026-60137 SQL injection to achieve unauthenticated WordPress RCE,…

command-and-controlexploitationpayload-development+8

11 month ago

cve-2026-41940-PoC

hitechcloud-vietnam/cve-2026-41940-poc

Exploits CVE-2026-41940, a cPanel & WHM authentication bypass, to gain root WHM access and run post-exploitation commands, file reads, and account…

authenticationcommand-and-controlexploitation+8

25 days ago

Hexestra

absllk/hexestra

AI-native penetration testing IDE where operators and an AI agent share browser, terminals, traffic capture, shells, asset graph, tasks, and evidence…

ai-securitycommand-and-controlinformation-gathering+7

11116 days ago

Previous12…50 Next