Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems Security
General Purpose Utilities
Indicator of Compromise (IOC) Management
OSINT (Open Source Intelligence)
Packet Sniffing & Analysis
Password Cracking
Penetration Testing Frameworks
Phishing Tools
Privilege Escalation
Reconnaissance
Static Analysis
Vulnerability Scanners
Web Vulnerability Scanners
Wi-Fi Auditing
Bluetooth Security
Container Security
Dynamic Analysis (Sandboxing)
Encryption/Decryption Tools
Exploit Frameworks
Identity Management
iOS Security
IoT Security
Memory Forensics
Network Mapping
OSINT for Social Engineering
Password Attacks
Payload Generation
Persistence Mechanisms
Port Scanning
Static Code Analysis (SAST)
Threat Feeds & Aggregators
Vulnerability Analysis
Web Proxies & Interception
Code Analysis
DNS & Subdomain Enumeration
Dynamic Code Analysis (DAST)
Exploitation
Hash Analysis
IDS/IPS Evasion
Impersonation Tools
Lateral Movement
Mobile App Pentesting
Network Forensics
Reverse Engineering
RFID/NFC Tools
SCADA/ICS Security
Scripting & Automation
Serverless Security
Shellcode
Web Application Exploitation
API Security Testing
Configuration Auditing
Data Exfiltration
Debuggers
Forensics
Information Gathering
Mobile Forensics
Network Access Control
Post-Exploitation
Security Virtualization
Phishing
WAF Bypass
Web Security
Fuzzing
Network Security
Steganography
Wireless Security
Data Recovery
Malware Analysis
Digital Forensics
Hardware Hacking
Cryptography
CTF
Penetration Testing
Cloud Security
DevSecOps
Mobile Security
Privacy
Command and Control
Social Engineering
Hardware Security
Utilities & Frameworks
Hardware & IoT Security
Secret Detection
Binary Analysis
Threat Intelligence
Identity & Access Management (IAM)
Supply Chain Security
Authentication
Machine Learning
Intrusion Detection
Papers & Research
Misconfiguration
Subdomain Enumeration
Email Harvesting
Learning & Education
AI-Assisted Reversing
DNS Fuzzing
Red Teaming
Incident Response
Crawler
Curated Resources
Remote Access Tool
Shellcode Generation
Payload Development
Remote Access Trojan
API Security
Anti-Bot
Fingerprint Spoofing
CAPTCHA Bypass
Email Security
DNS Analysis
Chaos Engineering
Learning Paths & Courses
Container Escape
AI Security
Database Security
Firmware Analysis
Anomaly Detection
Log Analysis
Adversarial Attack
Binary Exploitation
Labs & Practice
NewestRelevanceMost popularRecently updated
715 results
VMware-CVE-2022-22954-Command-Injector preview

VMware-CVE-2022-22954-Command-Injector

GitHubemilyastranova/vmware-cve-2022-22954-command-injector

Python PoC for exploiting VMware CVE-2022-22954 via Freemarker template injection in the catalog-portal UI, enabling remote command execution on…

command-and-controlexploitationpenetration-testing+2
14 years ago
CVE-2019-15107-Webmin-RCE-PoC preview

CVE-2019-15107-Webmin-RCE-PoC

GitHubmattb709/cve-2019-15107-webmin-rce-poc

A Python proof-of-concept exploit for CVE-2019-15107 - an unauthenticated remote code execution vulnerability in Webmin versions 1.890 through 1.920.

command-and-controleducationexploitation+3
11 year ago
CVE-2021-36260-hikvision preview

CVE-2021-36260-hikvision

GitHubshubtheone/cve-2021-36260-hikvision

Python exploit for CVE-2021-36260 command injection in Hikvision web servers. Supports safe/unsafe vulnerability verification, remote command…

command-and-controlexploitationiot-security+3
7 months ago
CVE-Exploit-Research-Development preview

CVE-Exploit-Research-Development

GitHubfaizan8232403/cve-exploit-research-development

A professional Python tool designed for educational penetration testing, demonstrating SSH vulnerabilities (CVE-2008-0166 / CVE-2008-1657) with…

command-and-controleducationexploitation+2
5 months ago
CVE-2017-4490-install-Script-Python-in-Terminal- preview

CVE-2017-4490-install-Script-Python-in-Terminal-

GitHubhomjxi0e/cve-2017-4490-install-script-python-in-terminal-

Post-exploitation script leveraging .bashrc for persistent payload delivery and terminal manipulation, including destructive display and terminal…

command-and-controlexploitationpersistence-mechanisms+2
9 years ago
CVE-2014-6271 preview

CVE-2014-6271

GitHubmritunjay-k/cve-2014-6271

Python exploit for CVE-2014-6271 (ShellShock) enabling remote code execution via crafted environment variables in GNU Bash, targeting web servers and…

command-and-controlexploitationpayload-generation+3
3 years ago
Atlassian-Bitbucket-CVE-2022-36804 preview

Atlassian-Bitbucket-CVE-2022-36804

GitHubimbas007/atlassian-bitbucket-cve-2022-36804

Python exploit for CVE-2022-36804 command injection in Atlassian Bitbucket Server, enabling remote code execution and reverse shell with customizable…

command-and-controlexploitationlabs-practice+3
3 years ago
CVE-2022-25765 preview

CVE-2022-25765

GitHubinnocentx0/cve-2022-25765

Python proof-of-concept for CVE-2022-25765, a command injection vulnerability in pdfkit, enabling remote code execution via crafted PDF generation.

command-and-controlctfeducation+4
4 days ago
CaddySmith preview

CaddySmith

GitHubicecubesandwich/caddysmith

Generate Caddy redirector configs from Cobalt Strike or Sliver C2 profiles.

command-and-controlids-ips-evasionpayload-development+3
231 month ago
CVE-2024-6387-Updated-x64bit preview

CVE-2024-6387-Updated-x64bit

GitHubprincipalanthony/cve-2024-6387-updated-x64bit

Private x64 RCE exploit for CVE-2024-6387 [02.07.2024] from exploit.in

command-and-controlexploitationpayload-generation+3
32 years ago
cromos preview

cromos

GitHubjimywork/cromos

Cromos is a tool for downloading legitimate extensions of the Chrome Web Store and inject codes in the background of the application.

command-and-controldata-exfiltrationlateral-movement+5
1248 years ago
google_socks preview
Archived

google_socks

GitHublukebaggett/google_socks

A proof of concept demonstrating the use of Google Drive for command and control.

cloud-securitycommand-and-controldata-exfiltration+3
888 years ago
NetExec preview

NetExec

GitHubpennyw0rth/netexec

Post-exploitation framework for automated network authentication testing, credential harvesting, and lateral movement across Windows/AD environments…

command-and-controldatabase-securityexploitation+14
5.8k4h 47m ago
AutoSploit preview

AutoSploit

GitHubnullarray/autosploit

Automated Mass Exploiter

command-and-controlexploit-frameworksinformation-gathering+5
5.3k6 years ago
meterssh preview

meterssh

GitHubtrustedsec/meterssh

MeterSSH is a way to take shellcode, inject it into memory then tunnel whatever port you want to over SSH to mask any type of communications as a…

command-and-controlexploitationpayload-development+4
5299 years ago
DBC2 preview

DBC2

GitHubarno0x/dbc2

DBC2 (DropboxC2) is a modular post-exploitation tool, composed of an agent running on the victim's machine, a controler, running on any machine,…

command-and-controlpayload-generationpenetration-testing-frameworks+2
3268 years ago
paragon preview

paragon

GitHubkcarretto/paragon

Red Team engagement platform with the goal of unifying offensive tools behind a simple UI

command-and-controlexploit-frameworkspayload-development+4
3042 years ago
Insanity-Framework preview

Insanity-Framework

GitHub4w4k3/insanity-framework

Generate Payloads and Control Remote Machines. [Discontinued]

command-and-controlexploitationids-ips-evasion+7
2259 years ago
Previous1…345…40Next