Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
88 results
NTP_Trojan preview

NTP_Trojan

GitHubahhh/ntp_trojan

Reverse NTP remote access trojan in python, for penetration testers

command-and-controlpayload-developmentpenetration-testing+3
62
10 years ago
chalumeau preview

chalumeau

GitHubcyberstruggle/chalumeau

Chalumeau is automated,extendable and customizable credential dumping tool based on powershell and python.

command-and-controlpassword-attackspayload-development+3
1026 years ago
Coldroot preview

Coldroot

GitHubxlinshan/coldroot

Mac OS Trojan (RAT) made with love <3

command-and-controlexploitationpayload-development+4
8910 years ago
CS_COFFLoader preview

CS_COFFLoader

GitHubtrustedsec/cs_coffloader
command-and-controlpayload-developmentpenetration-testing+2
1382 years ago
SlackShell preview

SlackShell

GitHubbkup/slackshell

PowerShell to Slack C2

command-and-controlpayload-developmentpenetration-testing+3
1078 years ago
rustbof preview

rustbof

GitHubjoaoviictorti/rustbof

A Rust template for writing Beacon Object Files (BOFs)

command-and-controlpayload-developmentpost-exploitation+1
1327 months ago
BloodfangC2 preview

BloodfangC2

GitHubzarkones/bloodfangc2

Modern PIC implant for Windows (64 & 32 bit)

adversarial-attackcommand-and-controlpayload-development+4
1051 year ago
Gh0st-light preview

Gh0st-light

GitHubholmesian/gh0st-light

精简之后的老东西

command-and-controlpayload-developmentpenetration-testing+3
3610 years ago
PoC-Malware-TTPs preview

PoC-Malware-TTPs

GitHubknight0x07/poc-malware-ttps

PoC-Malware-TTPs

adversarial-attackcommand-and-controlpayload-development+4
483 years ago
C2 preview

C2

GitHubet0x/c2

Methods of C2

command-and-controlpayload-developmentpayload-generation+3
2111 years ago
DarkFox preview

DarkFox

GitHubfedericochieregato/darkfox

Remote access trojan created using WinRar with firefox installer and python Reverse Shell embedded.

command-and-controlmalware-analysispayload-development+2
256 years ago
freeMetsrvLoader preview

freeMetsrvLoader

GitHubattl4s/freemetsrvloader

freeBokuLoader fork which targets and frees Metsrv's initial reflective DLL package

command-and-controlpayload-developmentpost-exploitation+1
353 years ago
wp2shell preview

wp2shell

GitHubmcipekci/wp2shell

Pre-auth RCE PoC for WordPress core — chains CVE-2026-63030 (REST /batch/v1 route-confusion desync) with CVE-2026-60137 (author__not_in SQLi) into an…

command-and-controlexploitationpayload-development+7
151 month ago
async-pico-hub preview

async-pico-hub

GitHubnccgroup/async-pico-hub

Async PICO Hub is a work-in-progress framework to extend Cobalt Strike with custom event monitoring and in-process Asynchronous BOFs

command-and-controlpayload-developmentpenetration-testing-frameworks+2
273 months ago
D-RAT_VB.NET_MySQL_PHP preview

D-RAT_VB.NET_MySQL_PHP

GitHubmr-wolf-gb/d-rat_vb.net_mysql_php

D-RAT [VB.NET]+[MySQL]+[PHP]

command-and-controlpayload-developmentpenetration-testing+3
146 years ago
refreshing-soap-exploit preview

refreshing-soap-exploit

GitHubrbowes-r7/refreshing-soap-exploit

A PoC exploit for CVE-2022-41622 - a CSRF in F5 BIG-IP control plane that leads to remote root

command-and-controlexploitationpayload-development+7
223 years ago
CVE-2026-65643-PoC-Toolkit preview

CVE-2026-65643-PoC-Toolkit

GitHubtc4dy/cve-2026-65643-poc-toolkit

Red/Blue team toolkit for CVE-2026-65643, a cPanel domain parking RCE. Includes exploit with reverse shell, webshell, persistence, and mass scanning,…

command-and-controlexploitationpayload-development+7
1113 days ago
CcmMessagingBackdoor preview

CcmMessagingBackdoor

GitHubsynacktiv/ccmmessagingbackdoor

Proof-of-concept backdoor for SCCM Management Point using rogue COM service for persistent remote command execution as SYSTEM.

command-and-controlpayload-developmentpersistence-mechanisms+3
191 year ago
Previous12345Next