Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

109 results

CVE-2022-39197

its-arun/cve-2022-39197

Proof-of-concept exploit for CVE-2022-39197, enabling remote code execution against CobaltStrike <= 4.7.1 via malicious SVG payload served over HTTP.

command-and-controlexploitationpayload-development+3

385

3 years ago

CVE-2024-3400

h4x0r-dz/cve-2024-3400

Proof-of-concept exploit for CVE-2024-3400, a Palo Alto OS command injection in GlobalProtect VPN. Demonstrates file creation and outbound command…

command-and-controlexploitationpenetration-testing+2

1622 years ago

SliverKeylogger

trustedsec/sliverkeylogger

Windows keylogging module for the Sliver C2 implant framework, using Raw Input to capture keystrokes and expose start, stop, and retrieval commands…

command-and-controldata-exfiltrationpayload-development+2

1734 years ago

IIS-Backdoor

nu11secur1ty/iis-backdoor

Stealthy IIS backdoor using hidden ISAPI filter for persistent remote access, data exfiltration, and on-the-fly exploit injection via custom HTTP…

command-and-controlexploitationids-ips-evasion+4

346 years ago

CVE-2018-3191-Rce-Exploit

mackleadmire/cve-2018-3191-rce-exploit

Exploit for CVE-2018-3191 targeting Oracle WebLogic servers. Generates a malicious payload via RMI, deploys reverse shell classes on an HTTP server,…

command-and-controlexploitationpayload-generation+3

177 years ago

CVE-2024-29973

nanowraith/cve-2024-29973

Proof-of-concept exploit for CVE-2024-29973, a command injection vulnerability in Zyxel NAS devices. Executes arbitrary OS commands via a crafted…

command-and-controlexploitationpenetration-testing+2

102 years ago

Weblogic_Unauthorized-bypass-RCE

ludy-dev/weblogic_unauthorized-bypass-rce

Python-based exploit script for Oracle WebLogic CVE-2020-14882 unauthorized bypass RCE. Tests authentication bypass and remote code execution via…

command-and-controlexploitationpayload-generation+3

85 years ago

CVE-2019-16278

ianxtianxt/cve-2019-16278

Python exploit script for CVE-2019-16278, a remote command execution vulnerability in Nostromo httpd. Executes arbitrary commands on vulnerable…

command-and-controlexploitationpenetration-testing+2

36 years ago

CVE-2019-0232-EXP

cyy95/cve-2019-0232-exp

Exploit for Apache Tomcat CGI Servlet command injection (CVE-2019-0232) enabling remote code execution via crafted HTTP requests on affected versions.

command-and-controlexploitationpayload-generation+2

37 years ago

Confluence-CVE-2022-26134

y000o/confluence-cve-2022-26134

Proof-of-concept exploit for CVE-2022-26134 in Confluence Server, using OGNL injection to execute commands via crafted HTTP requests.

command-and-controlexploitationreconnaissance+2

44 years ago

CVE-2023-45158

yifanzhg/cve-2023-45158

Proof-of-concept exploit for CVE-2023-45158, a command injection vulnerability in web2py. Demonstrates remote code execution via crafted HTTP…

command-and-controlexploitationpayload-generation+3

42 years ago

cve-2022-30525

iveresk/cve-2022-30525

Proof-of-concept exploit for CVE-2022-30525 enabling unauthenticated remote command injection on Zyxel firewalls via HTTP POST requests to the…

command-and-controlexploitationpenetration-testing+2

34 years ago

CVE-2024-29973

aerchy/cve-2024-29973

Proof-of-concept exploit for CVE-2024-29973, a remote command injection in Zyxel NAS devices, demonstrating arbitrary command execution via crafted…

command-and-controlexploitationpenetration-testing+2

22 years ago

CVE-2026-21962_Java_GUI_Exploit_Tool

naozibuhao/cve-2026-21962_java_gui_exploit_tool

Java GUI tool for exploiting CVE-2026-21962, an unauthenticated RCE in Oracle WebLogic Proxy Plug-In, enabling multi-target command execution via…

command-and-controlexploitationpenetration-testing+3

27 months ago

MCPJam-Inspector-1.4.2-Remote-Code-Execution-CVE-2026-23744

afifudinmtop/mcpjam-inspector-1.4.2-remote-code-execution-cve-2026-23744

Python exploit for CVE-2026-23744 in MCPJam Inspector 1.4.2, enabling remote code execution via reverse shell on target HTTP servers.

command-and-controlexploitationpayload-generation+3

4 months ago

CVE-2023-27216_D-Link_DSL-3782_Router_command_injection

fzbacon/cve-2023-27216_d-link_dsl-3782_router_command_injection

Proof-of-concept exploit for CVE-2023-27216, a command injection vulnerability in D-Link DSL-3782 routers, enabling remote code execution via crafted…

command-and-controlexploitationiot-security+2

23 years ago

CVE-2026-22553-InSAT-MasterSCADA-BUK-TS-MMadmServ

mbanyamer/cve-2026-22553-insat-masterscada-buk-ts-mmadmserv

Unauthenticated OS command injection exploit for InSAT MasterSCADA BUK-TS MMadmServ web interface. Delivers reverse shell with root privileges via…

command-and-controlexploitationpayload-generation+3

5 months ago

CVE-2024-46658

jackalkarlos/cve-2024-46658

Proof-of-concept exploit for a command injection vulnerability in Syrotech SY-GOPON-8OLT-L3, allowing arbitrary command execution via HTTP request…

command-and-controlexploitationpenetration-testing+3

12 years ago

Previous 1 234 5 6 7 Next