Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

77 results

Invisi-Shell

omerya/invisi-shell

Hide your Powershell script in plain sight. Bypass all Powershell security features

defensive-toolsexploitationids-ips-evasion+9

1.3k

7 years ago

process_overwriting

hasherezade/process_overwriting

PE injection technique that overwrites a suspended process's executable with a payload, enabling code execution under a benign process identity.

binary-exploitationexploitationpayload-development+1

4751 year ago

rpef

mncoppola/rpef

Abstracts and expedites the process of backdooring stock firmware images for consumer/SOHO routers

embedded-systems-securityexploitationfirmware-analysis+6

12412 years ago

SindriKit

youssefnoob003/sindrikit

A foundational C library for building operationally credible offensive capabilities

binary-exploitationcode-analysiseducation+6

891 day ago

SlackShell

bkup/slackshell

PowerShell to Slack C2

command-and-controlpayload-developmentpenetration-testing+3

1078 years ago

python-hacklib

lazorfuzz/python-hacklib

hacklib - pentesting, port scanning, and logging in anywhere with Python

exploitationinformation-gatheringpassword-attacks+4

1007 years ago

nginx-rift-private-lab

hamid-k/nginx-rift-private-lab

Private Nginx Rift ASLR lab, exploit chain, and demo recordings

binary-exploitationctfeducation+8

774 months ago

CVE-2024-54152

math-x-io/cve-2024-54152

PoC exploit for Angular Expressions sandbox escape (CVE-2024-54152) achieving RCE via malicious expression. Includes Docker environment and payload…

educationexploitationpayload-development+2

121 year ago

CVE-2021-24155.rb

0dayninja/cve-2021-24155.rb

WordPress Backup Guard Authenticated Remote Code Execution Exploit

exploit-frameworkspayload-developmentpenetration-testing+3

105 years ago

CVE-2023-30990

silentsignal/cve-2023-30990

CVE-2023-30990 exploits

command-and-controlexploitationpayload-development+3

61 year ago

CVE-2025-48703

skynoxk/cve-2025-48703

Remote Code execution in CentOS web panel

command-and-controlexploitationpayload-development+3

31 year ago

Rootsmart-v2.0

crackercat/rootsmart-v2.0

Android Ransomware Development - AES256 encryption + CVE-2019-2215 (reverse root shell) + Data Exfiltration

android-securitycommand-and-controldata-exfiltration+8

24 years ago

CVE-2025-57819-FreePBX-RCE2Root

ozcanpng/cve-2025-57819-freepbx-rce2root

Full-chain CVE-2025-57819 PoC for FreePBX 15, 16, and 17: unauthenticated SQLi to RCE and root takeover.

exploitationpayload-developmentpenetration-testing+4

23 months ago

CVE-2025-50286

x1o3/cve-2025-50286

Metasploit exploit for the CVE-2025-50286.

educationexploit-frameworkspayload-development+3

5 months ago

FreePBX-CVE-2025-57819

yuvrajshad/freepbx-cve-2025-57819

Unauthenticated SQL Injection to Remote Code Execution in FreePBX — CVE-2025-57819

command-and-controlexploitationpayload-development+5

13 months ago

CVE-2022-31491

ready2disclose/cve-2022-31491

CVE-2022-31491

command-and-controlexploitationexploit-frameworks+4

5 months ago

CVE-2025-4517-Python-tarfile-filter-data-Bypass-PoC

estebanzarate/cve-2025-4517-python-tarfile-filter-data-bypass-poc

Proof-of-concept exploit for CVE-2025-4517, a path traversal vulnerability in Python's tarfile filter='data' sandbox, enabling arbitrary file writes…

exploitationpayload-developmentpenetration-testing+3

16 months ago

CVE-2025-52385

kov404/cve-2025-52385

Studio 3T v.2025.1.0

code-analysisexploitationpayload-development+3

1 year ago

Previous 1 2 345 Next