Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
93 results
CVE-2023-33246_RocketMQ_RCE_EXPLOIT preview

CVE-2023-33246_RocketMQ_RCE_EXPLOIT

GitHubmalayke/cve-2023-33246_rocketmq_rce_exploit

CVE-2023-33246 RocketMQ RCE Detect By Version and Exploit

command-and-controlexploitationinformation-gathering+6
104
3 years ago
PPEnum preview

PPEnum

GitHubrasta-mouse/ppenum

Simple BOF to read the protection level of a process

command-and-controlinformation-gatheringpenetration-testing+2
1203 years ago
YAPS preview

YAPS

GitHubnickguitar/yaps

Yet Another PHP Shell - The most complete PHP reverse shell

command-and-controlexploitationinformation-gathering+7
844 years ago
Daily-dose-of-malware preview

Daily-dose-of-malware

GitHubwoj-ciech/daily-dose-of-malware

Script lets you gather malicious software and c&c servers from open source platforms like Malshare, Malcode, Google, Cymon - vxvault, cybercrime…

command-and-controlinformation-gatheringmalware-analysis+2
408 years ago
f5-bigip-rce-cve-2020-5902 preview

f5-bigip-rce-cve-2020-5902

GitHubthelsa/f5-bigip-rce-cve-2020-5902

F5 BIG-IP RCE CVE-2020-5902 automatic check tool

command-and-controlexploitationinformation-gathering+3
626 years ago
TornadoRevC2 preview

TornadoRevC2

GitHubkamalx06/tornadorevc2

Modular post-exploitation framework managing reverse-shell sessions over TCP/TLS/mTLS with plugins for enumeration, in-memory execution, SOCKS5…

command-and-controlinformation-gatheringlateral-movement+8
3927 days ago
chkdfront preview

chkdfront

GitHubkingsabri/chkdfront

Check Domain Fronting (chkdfront) - It checks if your domain fronting is working

command-and-controlinformation-gatheringpenetration-testing+1
445 years ago
Xenotix-xBOT preview

Xenotix-xBOT

GitHubajinabraham/xenotix-xbot

Xenotix xBOT is a Cross Platform PoC Bot that abuse certain Google Services to implement it's C&C

command-and-controlexploitationinformation-gathering+4
288 years ago
OllamaHound preview

OllamaHound

GitHub7h30th3r0n3/ollamahound

Mass reconnaissance, version fingerprinting, CVE tester and live exploitation framework for Ollama open instances.

command-and-controlexploitationinformation-gathering+6
629 months ago
telegram-c2 preview

telegram-c2

GitHubtomiwa-ot/telegram-c2

Control a system remotely via telegram

command-and-controlinformation-gatheringpersistence-mechanisms+4
501 year ago
vger preview

vger

GitHubjosephtlucas/vger

An interactive CLI application for interacting with authenticated Jupyter instances.

ai-securitycommand-and-controlexploitation+8
581 year ago
bothan preview

bothan

GitHubaudibleblink/bothan

Is this IP a C2 server?

command-and-controldefensive-toolsinformation-gathering+3
276 years ago
cua-kit preview

cua-kit

GitHubpreludeorg/cua-kit

Tools for attacking Computer Use Agents

ai-securitycommand-and-controlexploitation+7
339 months ago
Social-media-c2 preview

Social-media-c2

GitHubwoj-ciech/social-media-c2

Script is a proof of concept how to control your machine by using social media sites.

command-and-controlinformation-gatheringosint-social-engineering+3
238 years ago
UltraRealy_with_CVE-2019-1040 preview

UltraRealy_with_CVE-2019-1040

GitHublazaars/ultrarealy_with_cve-2019-1040

Updated version for the tool UltraRealy with support of the CVE-2019-1040 exploit

authenticationcommand-and-controlexploitation+7
207 years ago
fronthunter preview

fronthunter

GitHubst3rven/fronthunter

FrontHunter is a tool for testing large lists of domains to identify candidates for domain fronting.

command-and-controlinformation-gatheringreconnaissance+2
221 year ago
CVE-2024-29973 preview

CVE-2024-29973

GitHubbigb0x/cve-2024-29973

POC for CVE-2024-29973

command-and-controlexploitationinformation-gathering+3
102 years ago
PhaseHack preview

PhaseHack

GitHubmalwaretech/phasehack

Phase C&C Blind SQL Injection

command-and-controlinformation-gatheringvulnerability-analysis+1
911 years ago
Previous123456Next