Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems Security
General Purpose Utilities
Indicator of Compromise (IOC) Management
OSINT (Open Source Intelligence)
Packet Sniffing & Analysis
Password Cracking
Penetration Testing Frameworks
Phishing Tools
Privilege Escalation
Reconnaissance
Static Analysis
Vulnerability Scanners
Web Vulnerability Scanners
Wi-Fi Auditing
Bluetooth Security
Container Security
Dynamic Analysis (Sandboxing)
Encryption/Decryption Tools
Exploit Frameworks
Identity Management
iOS Security
IoT Security
Memory Forensics
Network Mapping
OSINT for Social Engineering
Password Attacks
Payload Generation
Persistence Mechanisms
Port Scanning
Static Code Analysis (SAST)
Threat Feeds & Aggregators
Vulnerability Analysis
Web Proxies & Interception
Code Analysis
DNS & Subdomain Enumeration
Dynamic Code Analysis (DAST)
Exploitation
Hash Analysis
IDS/IPS Evasion
Impersonation Tools
Lateral Movement
Mobile App Pentesting
Network Forensics
Reverse Engineering
RFID/NFC Tools
SCADA/ICS Security
Scripting & Automation
Serverless Security
Shellcode
Web Application Exploitation
API Security Testing
Configuration Auditing
Data Exfiltration
Debuggers
Forensics
Information Gathering
Mobile Forensics
Network Access Control
Post-Exploitation
Security Virtualization
Phishing
WAF Bypass
Web Security
Fuzzing
Network Security
Steganography
Wireless Security
Data Recovery
Malware Analysis
Digital Forensics
Hardware Hacking
Cryptography
CTF
Penetration Testing
Cloud Security
DevSecOps
Mobile Security
Privacy
Command and Control
Social Engineering
Hardware Security
Utilities & Frameworks
Hardware & IoT Security
Secret Detection
Binary Analysis
Threat Intelligence
Identity & Access Management (IAM)
Supply Chain Security
Authentication
Machine Learning
Intrusion Detection
Papers & Research
Misconfiguration
Subdomain Enumeration
Email Harvesting
Learning & Education
AI-Assisted Reversing
DNS Fuzzing
Red Teaming
Incident Response
Crawler
Curated Resources
Remote Access Tool
Shellcode Generation
Payload Development
Remote Access Trojan
API Security
Anti-Bot
Fingerprint Spoofing
CAPTCHA Bypass
Email Security
DNS Analysis
Chaos Engineering
Learning Paths & Courses
Container Escape
AI Security
Database Security
Firmware Analysis
Anomaly Detection
Log Analysis
Adversarial Attack
Binary Exploitation
Labs & Practice
NewestRelevanceMost popularRecently updated
25 results
discover preview

discover

GitHubleebaird/discover

Custom Bash and Python scripts used to automate various penetration testing tasks including recon, scanning, enumeration, and malicious payload…

api-security-testingcloud-securitycontainer-security+9
3.9k14h 35m ago
FalconFlank preview

FalconFlank

GitHubmsnightmare/falconflank

Crowdstrike Falcon 0day Privilege Escalation Vulnerability

exploitationexploit-frameworkspayload-development+2
4104 days ago
BadAssMacros preview

BadAssMacros

GitHubinf0secrabbit/badassmacros

C# tool that generates malicious VBA macros with shellcode injection, VBA purging, and sandbox detection for red team operations.

exploit-frameworkspayload-generationred-teaming+1
4455 years ago
Android-Privilege-Escalation-Remote-Access-Vulnerability-CVE-2015-1805 preview

Android-Privilege-Escalation-Remote-Access-Vulnerability-CVE-2015-1805

GitHubireshchaminda1/android-privilege-escalation-remote-access-vulnerability-cve-2015-1805

AndroRAT is a capability that can be used to inject a root exploit as a silent installation to perform a malicious task on the device. This AndroRAT…

android-securityexploitationexploit-frameworks+5
53 years ago
CVE-2018-8174-msf preview

CVE-2018-8174-msf

GitHub0x09al/cve-2018-8174-msf

CVE-2018-8174 - VBScript memory corruption exploit.

exploitationexploit-frameworkspayload-generation+3
1678 years ago
CapTipper preview

CapTipper

GitHubomriher/captipper

Malicious HTTP traffic explorer

digital-forensicsexploit-frameworksforensics+5
7265 years ago
avet preview

avet

GitHubgovolution/avet

AntiVirus Evasion Tool

adversarial-attackeducationencryption-decryption-tools+8
1.8k1 year ago
iOS-Attack-Chain-CVE-2025-31200-CVE-2025-31201 preview

iOS-Attack-Chain-CVE-2025-31200-CVE-2025-31201

GitHubjgoyd/ios-attack-chain-cve-2025-31200-cve-2025-31201

CVE-2025-31200 is a zero-day, zero-click RCE in iOS CoreAudio’s AudioConverterService, triggered by a malicious audio file via iMessage/SMS.…

binary-exploitationbluetooth-securityexploitation+8
2024 months ago
macro_pack preview
Archived

macro_pack

GitHubsevagas/macro_pack

macro_pack is a tool by @EmericNasi used to automatize obfuscation and generation of Office documents, VB scripts, shortcuts, and other formats for…

exploit-frameworkslateral-movementpayload-generation+6
2.3k2 years ago
PrintNightmare-CVE-2021-1675-CVE-2021-34527 preview

PrintNightmare-CVE-2021-1675-CVE-2021-34527

GitHubgaloget/printnightmare-cve-2021-1675-cve-2021-34527

CVE-2021-1675 / CVE-2021-34527 - PrintNightmare Python, C# and PowerShell Exploits Implementations (LPE & RCE)

exploitationexploit-frameworkslateral-movement+5
5 years ago
REW-sploit preview

REW-sploit

GitHubrew-sploit/rew-sploit

Emulate and Dissect MSF and *other* attacks

bluetooth-securitydebuggersdefensive-tools+6
1442 years ago
kimi preview

kimi

GitHubchaitanyaharitash/kimi

Script to generate malicious debian packages (debain trojans).

command-and-controlexploit-frameworksmalware-analysis+5
1237 years ago
CVE-2021-1675 preview

CVE-2021-1675

GitHubandrewtrube/cve-2021-1675

Local privilege escalation exploit for CVE-2021-1675 (PrintNightmare) that installs a malicious DLL to gain SYSTEM access on vulnerable Windows…

exploitationexploit-frameworkspayload-development+3
54 years ago
morphHTA preview

morphHTA

GitHubvysecurity/morphhta

morphHTA - Morphing Cobalt Strike's evil.HTA

exploit-frameworkspayload-generationpenetration-testing
5326 years ago
Microsoft-Office-Word-MSHTML-Remote-Code-Execution-Exploit preview

Microsoft-Office-Word-MSHTML-Remote-Code-Execution-Exploit

GitHub34zy/microsoft-office-word-mshtml-remote-code-execution-exploit

Exploits CVE-2021-40444 in Microsoft Office Word to achieve remote code execution through the MSHTML engine by injecting malicious content into a…

exploitationexploit-frameworkspayload-development+4
654 years ago
CVE-2021-36260-metasploit preview

CVE-2021-36260-metasploit

GitHubtaroballzchen/cve-2021-36260-metasploit

the metasploit script(POC) about CVE-2021-36260

command-and-controlexploitationexploit-frameworks+3
204 years ago
CVE-2025-65018-Heap-buffer-overflow-in-libpng-ps4-ps5- preview

CVE-2025-65018-Heap-buffer-overflow-in-libpng-ps4-ps5-

GitHubneo-neo6/cve-2025-65018-heap-buffer-overflow-in-libpng-ps4-ps5-

Proof-of-concept exploit for a heap buffer overflow in libpng on PS4/PS5. Generates a malicious PNG that triggers the vulnerability when opened in…

binary-exploitationexploitationexploit-frameworks+3
109 months ago
windows-smb-vulnerability-framework-cve-2025-33073 preview

windows-smb-vulnerability-framework-cve-2025-33073

GitHubsfrdevelopment/windows-smb-vulnerability-framework-cve-2025-33073

Research framework for CVE-2025-33073, a Windows SMB Client privilege escalation vulnerability. Provides malicious SMB server and client exploit…

exploitationexploit-frameworkspenetration-testing+2
610 months ago
Previous12Next