Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
887 results
AndroidClient preview

AndroidClient

GitHubrev-code/androidclient

Android remote administration client

android-securitycommand-and-controlmobile-security+3
118 years ago
MalConfig preview

MalConfig

GitHubjacobsoo/malconfig

This is part of a module for the framework that i'm constantly developing. Currently only information of the C2 are disclosed here.

android-securitycommand-and-controlinformation-gathering+3
77 years ago
CVE-2024-31317-Deployer preview

CVE-2024-31317-Deployer

GitHubfcy10012/cve-2024-31317-deployer

CVE-2024-31317 Android Zygote命令注入漏洞研究与部署工具 | Android 9-13 漏洞利用框架

android-securitybinary-exploitationcommand-and-control+4
610 months ago
CVE-2022-22947 preview

CVE-2022-22947

GitHubgreetdawn/cve-2022-22947

PoC exploit for CVE-2022-22947: SpEL injection in Spring Cloud Gateway enabling remote command execution via crafted Actuator API routes.

api-security-testingcommand-and-controlexploitation+2
54 years ago
silverboxcc preview

silverboxcc

GitHubbizdak/silverboxcc

Reverse engineered android malware, and this is a C&C server for it

android-securitycommand-and-controlmalware-analysis+3
28 years ago
Rootsmart-v2.0 preview

Rootsmart-v2.0

GitHubcrackercat/rootsmart-v2.0

Android Ransomware Development - AES256 encryption + CVE-2019-2215 (reverse root shell) + Data Exfiltration

android-securitycommand-and-controldata-exfiltration+8
24 years ago
cve-2019-14514 preview

cve-2019-14514

GitHubseqred-s-a/cve-2019-14514

Remote code execution in Microvirt MEmu

android-securitybinary-exploitationcommand-and-control+3
36 years ago
CVE-2024-23700-C2-Server preview

CVE-2024-23700-C2-Server

GitHubkaitokidc500/cve-2024-23700-c2-server

Source code minh họa máy chủ c2 demo kịch bản thực thi của CVE-2024-23700

android-securitycommand-and-controldata-exfiltration+9
2 months ago
mcpshield preview

mcpshield

GitHubcsinexus/mcpshield

Drop-in fix for the unpatched MCP STDIO command-injection flaw (CVE-2026-30623 family)

api-security-testingcode-analysiscommand-and-control+3
3 months ago
CVE-2024-31317-Deployer preview

CVE-2024-31317-Deployer

GitHubkalibb/cve-2024-31317-deployer

Automated deployment tool for CVE-2024-31317, a command injection vulnerability in Android 9-13. Includes reverse shell payload, compile script, and…

android-securitybinary-exploitationcommand-and-control+5
19 months ago
AhMyth-Android-RAT preview
Archived

AhMyth-Android-RAT

GitHubahmyth/ahmyth-android-rat

Android Remote Administration Tool

android-securitycommand-and-controlpayload-generation+3
5.2k5 years ago
Lab-RATS-v1.6 preview

Lab-RATS-v1.6

GitHubk4n3co/lab-rats-v1.6

Lab-RATS is a powerful and lightweight Android Remote Administration Tool full of features that enables remote monitoring, management and interaction…

android-securitycommand-and-controldata-exfiltration+8
804 days ago
OffensiveNotion preview
Archived

OffensiveNotion

GitHubmttaggart/offensivenotion

Notion as a platform for offensive operations

command-and-controlpayload-developmentpenetration-testing-frameworks+6
1.2k3 years ago
pupy preview
Archived

pupy

GitHubn1nj4sec/pupy

Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) C2 and post-exploitation framework written in python and C

android-securitycommand-and-controllateral-movement+5
9k2 years ago
Rootsmart-v2.0 preview
Archived

Rootsmart-v2.0

GitHubnicchongwb/rootsmart-v2.0

Android Ransomware Development - AES256 encryption + CVE-2019-2215 (reverse root shell) + Data Exfiltration

android-securitycommand-and-controldata-exfiltration+8
14 years ago
metasploit-javapayload preview
Archived

metasploit-javapayload

GitHubrapid7/metasploit-javapayload

Obsolete Java payload library for Metasploit, providing Java and Android Meterpreter agents built with Maven. Merged into metasploit-payloads.

android-securitycommand-and-controlexploitation+7
943 years ago
DuplexSpyCS preview

DuplexSpyCS

GitHubiss4cf0ng/duplexspycs

An open-source, C#-based remote administration tool (RAT), enabling complete control of a remote Windows machine, designed for legitimate remote…

command-and-controleducationpayload-development+5
2178 months ago
c2-cloud preview

c2-cloud

GitHubgovindasamyarun/c2-cloud

The C2 Cloud is a robust web-based C2 framework, designed to simplify the life of penetration testers. It allows easy access to compromised…

command-and-controlexploit-frameworkspayload-generation+4
1282 years ago
Previous1…484950Next