Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems Security
General Purpose Utilities
Indicator of Compromise (IOC) Management
OSINT (Open Source Intelligence)
Packet Sniffing & Analysis
Password Cracking
Penetration Testing Frameworks
Phishing Tools
Privilege Escalation
Reconnaissance
Static Analysis
Vulnerability Scanners
Web Vulnerability Scanners
Wi-Fi Auditing
Bluetooth Security
Container Security
Dynamic Analysis (Sandboxing)
Encryption/Decryption Tools
Exploit Frameworks
Identity Management
iOS Security
IoT Security
Memory Forensics
Network Mapping
OSINT for Social Engineering
Password Attacks
Payload Generation
Persistence Mechanisms
Port Scanning
Static Code Analysis (SAST)
Threat Feeds & Aggregators
Vulnerability Analysis
Web Proxies & Interception
Code Analysis
DNS & Subdomain Enumeration
Dynamic Code Analysis (DAST)
Exploitation
Hash Analysis
IDS/IPS Evasion
Impersonation Tools
Lateral Movement
Mobile App Pentesting
Network Forensics
Reverse Engineering
RFID/NFC Tools
SCADA/ICS Security
Scripting & Automation
Serverless Security
Shellcode
Web Application Exploitation
API Security Testing
Configuration Auditing
Data Exfiltration
Debuggers
Forensics
Information Gathering
Mobile Forensics
Network Access Control
Post-Exploitation
Security Virtualization
Phishing
WAF Bypass
Web Security
Fuzzing
Network Security
Steganography
Wireless Security
Data Recovery
Malware Analysis
Digital Forensics
Hardware Hacking
Cryptography
CTF
Penetration Testing
Cloud Security
DevSecOps
Mobile Security
Privacy
Command and Control
Social Engineering
Hardware Security
Utilities & Frameworks
Hardware & IoT Security
Secret Detection
Binary Analysis
Threat Intelligence
Identity & Access Management (IAM)
Supply Chain Security
Authentication
Machine Learning
Intrusion Detection
Papers & Research
Misconfiguration
Subdomain Enumeration
Email Harvesting
Learning & Education
AI-Assisted Reversing
DNS Fuzzing
Red Teaming
Incident Response
Crawler
Curated Resources
Remote Access Tool
Shellcode Generation
Payload Development
Remote Access Trojan
API Security
Anti-Bot
Fingerprint Spoofing
CAPTCHA Bypass
Email Security
DNS Analysis
Chaos Engineering
Learning Paths & Courses
Container Escape
AI Security
Database Security
Firmware Analysis
Anomaly Detection
Log Analysis
Adversarial Attack
Binary Exploitation
Labs & Practice
NewestRelevanceMost popularRecently updated
41 results
Inject-PHP-to-JPG-Using-Jhead preview

Inject-PHP-to-JPG-Using-Jhead

GitHubjenderal92/inject-php-to-jpg-using-jhead

PHP script and guide for injecting PHP webshells into JPEG images using Jhead. Used to bypass file upload filters and achieve remote command…

educationpayload-developmentsteganography+1
13 months ago
tools-for-CVE-2018-1000001 preview

tools-for-CVE-2018-1000001

GitHubusernameid0/tools-for-cve-2018-1000001

Tools for get offsets and adding patch for support i386

binary-exploitationexploitationpayload-development+3
4 years ago
CVE-2025-64512 preview

CVE-2025-64512

GitHubstoic-crawler/cve-2025-64512

Exploit for CVE-2025-64512 to get a reverse shell.

educationexploitationpayload-development+3
2 months ago
CVE-2018-6574 preview

CVE-2018-6574

GitHubdevang-solanki/cve-2018-6574

Exploit for remote command execution in Golang go get command.

binary-exploitationexploitationpayload-development+3
14 years ago
CVE-2009-5147 preview

CVE-2009-5147

GitHubvpereira/cve-2009-5147

poc for CVE-2009-5147

binary-exploitationexploitationpayload-development+2
9 years ago
POC-CVE-2016-10033 preview

POC-CVE-2016-10033

GitHubastrowmist/poc-cve-2016-10033

Proof Of Concept for the CVE-2016-10033 (PHPMailer)

educationexploitationlabs-practice+4
2 years ago
php_filter_chain_generator preview

php_filter_chain_generator

GitHubsynacktiv/php_filter_chain_generator

CLI to generate PHP filter chains for remote code execution via controlled include/require parameters. Produces complex iconv-based filter bypasses…

exploitationpayload-developmentpayload-generation+2
1.1k3 years ago
ManualRsrcDataFetching preview

ManualRsrcDataFetching

GitHubnul0x4c/manualrsrcdatafetching

Get your data from the resource section manually, with no need for windows apis

binary-analysispayload-developmentred-teaming+1
661 year ago
Kautilya preview

Kautilya

GitHubsamratashok/kautilya

Kautilya - Tool for easy use of Human Interface Devices for offensive security and penetration testing.

command-and-controldata-exfiltrationhardware-iot-security+6
8719 years ago
GoPurple preview

GoPurple

GitHubsh4hin/gopurple

Yet another shellcode runner consists of different techniques for evaluating detection capabilities of endpoint security solutions

defensive-toolseducationexploitation+6
4965 years ago
MalleableC2Profiles preview

MalleableC2Profiles

GitHubbluscreenofjeff/malleablec2profiles

Malleable C2 profiles for Cobalt Strike

command-and-controlexploit-frameworksnetwork-security+3
779 years ago
Microsoft-Office-Word-MSHTML-Remote-Code-Execution-Exploit preview

Microsoft-Office-Word-MSHTML-Remote-Code-Execution-Exploit

GitHub34zy/microsoft-office-word-mshtml-remote-code-execution-exploit

Exploits CVE-2021-40444 in Microsoft Office Word to achieve remote code execution through the MSHTML engine by injecting malicious content into a…

exploitationexploit-frameworkspayload-development+4
654 years ago
libenom preview

libenom

GitHubbounteous17/libenom

CLI wrapper for MSFvenom that streamlines payload creation with profile management, automated listener generation, and organized output for…

exploit-frameworkspayload-developmentpayload-generation+1
2110 years ago
CVE-2015-3224 preview

CVE-2015-3224

GitHub0x00-0x00/cve-2015-3224

Modification of Metasploit module for RCE in Ruby-On-Rails Console CVE-2015-3224

exploit-frameworkspayload-developmentpenetration-testing+3
28 years ago
CVE-2021-38666-poc preview

CVE-2021-38666-poc

GitHubdarksprings/cve-2021-38666-poc

Proof-of-concept exploit for CVE-2021-38666, a Windows Remote Code Execution vulnerability. Demonstrates exploitation techniques for security testing…

exploitationpayload-developmentpenetration-testing+2
24 years ago
ivanti-automationmanager-exploit preview

ivanti-automationmanager-exploit

GitHubrweijnen/ivanti-automationmanager-exploit

Exploit for Ivanti Automation Manager CVE-2022-44569

exploitationpayload-developmentpenetration-testing+2
12 years ago
CVE-2021-21300 preview

CVE-2021-21300

GitHubfengzhouc/cve-2021-21300

Proof-of-concept exploit for CVE-2021-21300, demonstrating remote code execution via malicious git repository cloning with symlink and filter abuse…

command-and-controlexploitationlateral-movement+6
5 years ago
CVE-2022-1565 preview

CVE-2022-1565

GitHubphanthibichtram12/cve-2022-1565

Authenticated remote code execution exploit for WordPress WP All Import plugin <= 3.6.7 (CVE-2022-1565). Uploads arbitrary files via insecure file…

exploitationpayload-developmentpenetration-testing+3
2 years ago
Previous123Next