Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

1048 results

velociraptor_CVE-2025-6264_PoC

mauzy0x00/velociraptor_cve-2025-6264_poc

Proof-of-concept exploit for CVE-2025-6264 in Velociraptor, demonstrating privilege escalation via missing permission checks to redirect clients to a…

command-and-controleducationexploitation+3

4 months ago

CVE-2023-0830

xbz0n/cve-2023-0830

Exploit for EasyNAS version 1.1.0. The vulnerability exploited is a command injection flaw, which requires authentication.

command-and-controlexploitationpayload-generation+3

11 year ago

EternalBlue-Exploit-Demonstration-MS17-010

ichhyak22/eternalblue-exploit-demonstration-ms17-010

Cybersecurity lab demonstrating exploitation of CVE-2017-0144 (EternalBlue) using Metasploit against a vulnerable Windows 7 VM, achieving…

command-and-controleducationexploitation+8

4 months ago

CVE-2024-7591-PoC

butyraldehyde/cve-2024-7591-poc

These PoC python scripts test the Kemp LoadMaster for remote code execution.

command-and-controlexploitationpayload-generation+3

9 months ago

jboss-autopwn-1

1872892142/jboss-autopwn-1

JBoss Autopwn as featured at BlackHat Europe 2010 - this version incorporates CVE-2010-0738 the JBoss authentication bypass VERB manipulation…

authenticationcommand-and-controlexploitation+5

11 years ago

PHP-REVERSE-SHELL

s_r_e_e_r_a_j/php-reverse-shell

This is a powerful and stealthy PHP reverse shell designed for ethical hacking and penetration testing. It establishes a reliable and quiet…

command-and-controleducationids-ips-evasion+6

10 years ago

PoC-CVE-2025-62222

sadisticnight/poc-cve-2025-62222

Proof-of-concept demonstrating remote code execution via prompt injection in GitHub Copilot Chat, using a crafted Python file to trigger a…

command-and-controleducationexploit-frameworks+7

16 months ago

CVE-2024-7120-Exploit-by-Dark-07x

jokeir07x/cve-2024-7120-exploit-by-dark-07x

Proof-of-concept exploit for CVE-2024-7120 command injection in RAISECOM Gateway devices. Executes arbitrary commands via the template parameter in…

command-and-controlexploitationpenetration-testing+2

11 year ago

log4j-vulnerability

marceloleite2604/log4j-vulnerability

Presents how to exploit CVE-2021-44228 vulnerability.

command-and-controleducationexploitation+5

14 years ago

cve-2017-5123

nabilboudra/cve-2017-5123

Educational demonstration of CVE-2017-5123 kernel exploit, ICMP-based rootkit command-and-control, and OS command injection vulnerable web…

binary-exploitationcommand-and-controleducation+5

9 months ago

CVE-2022-25226

krill-x7/cve-2022-25226

Python exploit script for ThinVNC 1.0b1 authentication bypass (CVE-2022-25226) that chains unauthenticated /cmd endpoint access with AMSI bypass and…

authenticationcommand-and-controleducation+4

11 year ago

Simulation_CVE-2024-46256

trandonga3/simulation_cve-2024-46256

Step-by-step, image-backed proof-of-concept simulation of OS command injection vulnerabilities (CVE-2024-46256 and CVE-2024-46257) in Nginx Proxy…

command-and-controleducationexploitation+3

10 months ago

CVE-2024-4577

r0otk3r/cve-2024-4577

Scanner and exploit tool for CVE-2024-4577, a PHP CGI argument injection vulnerability enabling remote code execution on Windows systems. Includes…

command-and-controleducationexploitation+3

1 year ago

CVE-2025-24893-RCE-PoC

gmh5225/cve-2025-24893-rce-poc

This is a small script for the rce vulnerability for CVE-2025-24893. It supports basic input/output

command-and-controlexploitationpenetration-testing+2

1 year ago

CVE-2022-46169

hpt-intern-task-submission/cve-2022-46169

Step-by-step analysis of CVE-2022-46169: unauthenticated remote code execution in Cacti via authentication bypass and command injection, with Docker…

authenticationcommand-and-controleducation+4

2 years ago

CVE-2024-31317-Deployer

kalibb/cve-2024-31317-deployer

Automated deployment tool for CVE-2024-31317, a command injection vulnerability in Android 9-13. Includes reverse shell payload, compile script, and…

android-securitybinary-exploitationcommand-and-control+5

7 months ago

CVE-2021-46422

kelemaoya/cve-2021-46422

PoC exploit for CVE-2021-46422, an OS command injection vulnerability in Korean wireless routers. Includes a Python script for single or batch URL…

command-and-controlexploitationpenetration-testing+2

3 years ago

CVE-2021-26700

june-in-exile/cve-2021-26700

Educational RCE exploit for CVE-2021-26700 in VS Code npm extension, demonstrating DNS tunneling to a Caldera C2 server via malicious package.json…

command-and-controldns-analysiseducation+4

3 years ago

Previous 1…404142…59 Next