Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

79 results

Nginx-Rift

depthfirstdisclosures/nginx-rift

NGINX RCE exploits

binary-exploitationexploitationpayload-development+3

9173 months ago

process_overwriting

hasherezade/process_overwriting

PE injection technique that overwrites a suspended process's executable with a payload, enabling code execution under a benign process identity.

binary-exploitationexploitationpayload-development+1

4721 year ago

rpef

mncoppola/rpef

Abstracts and expedites the process of backdooring stock firmware images for consumer/SOHO routers

embedded-systems-securityexploitationfirmware-analysis+6

12413 years ago

SlackShell

bkup/slackshell

PowerShell to Slack C2

command-and-controlpayload-developmentpenetration-testing+3

1078 years ago

python-hacklib

lazorfuzz/python-hacklib

hacklib - pentesting, port scanning, and logging in anywhere with Python

exploitationinformation-gatheringpassword-attacks+4

1017 years ago

nginx-rift-private-lab

hamid-k/nginx-rift-private-lab

Private Nginx Rift ASLR lab, exploit chain, and demo recordings

binary-exploitationctfeducation+8

765 months ago

ReflectivePluginLoader

racoten/reflectivepluginloader

Minimal Windows x64 reflective PE mapper that loads DLLs from memory without LoadLibrary, resolves exports, and dispatches calls through a…

binary-exploitationdefensive-toolseducation+7

515 days ago

CVE-2024-54152

math-x-io/cve-2024-54152

PoC exploit for Angular Expressions sandbox escape (CVE-2024-54152) achieving RCE via malicious expression. Includes Docker environment and payload…

educationexploitationpayload-development+2

121 year ago

CVE-2021-24155.rb

0dayninja/cve-2021-24155.rb

WordPress Backup Guard Authenticated Remote Code Execution Exploit

exploit-frameworkspayload-developmentpenetration-testing+3

105 years ago

CVE-2026-100721

murrez/cve-2026-100721

Python PoC for CVE-2026-100721: detects and exploits vm2 <3.12.2 NodeVM external allowlist bypass, achieving sandbox escape and host RCE via local…

exploitationpayload-developmentpenetration-testing+6

1 month ago

CVE-2023-30990

silentsignal/cve-2023-30990

CVE-2023-30990 exploits

command-and-controlexploitationpayload-development+3

61 year ago

ghostlock-app

ariyanpegu/ghostlock-app

GhostLock One-Tap Execution App (CVE-2026-43499)

android-securitybinary-analysisbinary-exploitation+8

1 month ago

CVE-2025-48703

skynoxk/cve-2025-48703

Remote Code execution in CentOS web panel

command-and-controlexploitationpayload-development+3

31 year ago

Rootsmart-v2.0

crackercat/rootsmart-v2.0

Android Ransomware Development - AES256 encryption + CVE-2019-2215 (reverse root shell) + Data Exfiltration

android-securitycommand-and-controldata-exfiltration+8

24 years ago

CVE-2025-57819-FreePBX-RCE2Root

ozcanpng/cve-2025-57819-freepbx-rce2root

Full-chain CVE-2025-57819 PoC for FreePBX 15, 16, and 17: unauthenticated SQLi to RCE and root takeover.

exploitationpayload-developmentpenetration-testing+4

14 months ago

FreePBX-CVE-2025-57819

yuvrajshad/freepbx-cve-2025-57819

Unauthenticated SQL Injection to Remote Code Execution in FreePBX — CVE-2025-57819

command-and-controlexploitationpayload-development+5

14 months ago

CVE-2025-4517-Python-tarfile-filter-data-Bypass-PoC

estebanzarate/cve-2025-4517-python-tarfile-filter-data-bypass-poc

Proof-of-concept exploit for CVE-2025-4517, a path traversal vulnerability in Python's tarfile filter='data' sandbox, enabling arbitrary file writes…

exploitationpayload-developmentpenetration-testing+3

18 months ago

CVE-2025-50286

x1o3/cve-2025-50286

Metasploit exploit for the CVE-2025-50286.

educationexploit-frameworkspayload-development+3

6 months ago

Previous 1 2 345 Next