Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

253 results

caldera

apache/caldera

Automated Adversary Emulation Platform

adversarial-attackcommand-and-controlctf+7

7.2k7 days ago

OSRipper

noahoksuz/osripper

AV evading cross platform Backdoor and Crypter Framework with a integrated lightweight webUI

command-and-controleducationexploit-frameworks+5

3306 months ago

RansomwareSim

halildeniz/ransomwaresim

Educational ransomware simulator demonstrating file encryption, C2 communication, and decryption for cybersecurity training and malware analysis.

command-and-controleducationencryption-decryption-tools+3

1762 years ago

Stealth-Kid-RAT

artbitrage/stealth-kid-rat

Stealth Kid RAT (SKR) is an open-source multi-platform Remote Access Trojan (RAT) written in C#. Released under MIT license. The SKR project is fully…

command-and-controleducationpayload-development+3

244 years ago

-CVE-2014-6271

kaleth4/-cve-2014-6271

Educational repository detailing the Shellshock (CVE-2014-6271) vulnerability, including technical analysis, attack vectors, proof-of-concept…

command-and-controleducationexploitation+3

2 months ago

CVE-2026-39866

abhayclasher/cve-2026-39866

Proof-of-concept lab demonstrating command injection in GitHub Actions workflow dispatch (CVE-2026-39866). Runs vulnerable and patched versions…

command-and-controleducationexploitation+3

4 months ago

ToolShell-CVE-2025-53770-SharePoint-Exploit-Lab-LetsDefend

cyprianatsyor/toolshell-cve-2025-53770-sharepoint-exploit-lab-letsdefend

Step-by-step walkthrough of exploiting CVE-2025-53770 (ToolShell) in a LetsDefend lab, covering RCE, web shell deployment, and incident response…

command-and-controlctfdigital-forensics+9

1 year ago

CVE-2020-17530

al1ex/cve-2020-17530

S2-061 CVE-2020-17530

command-and-controleducationexploitation+3

295 years ago

CVE-2026-59734-POC

cybertechajju/cve-2026-59734-poc

OS Command Injection in Health Check → Remote Code Execution

command-and-controleducationexploitation+4

1 month ago

CVE-2022-30190

shndnth/cve-2022-30190

Educational Proof-of-Concept for the CVE-2022-30190 (Follina) vulnerability.

command-and-controleducationexploitation+8

4 months ago

SOC336-Windows-OLE-Zero-Click-RCE-Exploitation-Detected-CVE-2025-21298

abc1230940/soc336-windows-ole-zero-click-rce-exploitation-detected-cve-2025-21298

SOC336 - Windows OLE Zero-Click RCE Exploitation Detected (CVE-2025-21298) Walkthrough

command-and-controleducationemail-security+9

3 months ago

CVE-2025-68613

h3raklez/cve-2025-68613

Proof-of-concept exploit for CVE-2025-68613, a critical RCE vulnerability in n8n workflow automation via expression injection in the executeCommand…

command-and-controleducationexploitation+3

6 months ago

n8n-cve-2025-68613

gagaltotal/n8n-cve-2025-68613

Authenticated RCE exploit PoC and vulnerability scanner for CVE-2025-68613 in n8n. Supports command execution, file operations, and reverse shell…

command-and-controleducationexploitation+5

8 months ago

cve-2023-1671

csffs/cve-2023-1671

Python-based exploit for CVE-2023-1671 with test and exploitation functions. Tests vulnerability via DNS ping, then executes arbitrary commands on…

command-and-controleducationexploitation+3

3 years ago

byob

malwaredllc/byob

An open-source post-exploitation framework for students, researchers and developers.

command-and-controleducationpacket-sniffing-analysis+6

9.5k14 days ago

Decepticon

purpleailab/decepticon

Autonomous Hacking Agent for Red Team

ai-securitycommand-and-controlctf+9

5.4k8 days ago

SocialFish

undeadsec/socialfish

Modern dynamic phishing toolkit for authorized red team exercises. Clones login pages, captures credentials, cookies, and 2FA codes with a live…

command-and-controleducationids-ips-evasion+9

4.9k3 months ago

penelope

brightio/penelope

Penelope Shell Handler

command-and-controlctfpayload-generation+5

2.0k1 day ago

Previous12…15 Next