Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

341 results

metasploit-payloads

rapid7/metasploit-payloads

Unified repository for different Metasploit Framework payloads

command-and-controlexploitationexploit-frameworks+9

2.1k

2 days ago

GreeDoS_V2

mrechofi/greedos_v2

A Multi-vector DoS tool for Cybersecurity Red Teamers' .

exploitationnetwork-securitypayload-generation+4

178 months ago

Koi

b3rt1ng/koi

Multi-session reverse shell handler with PTY upgrade, post-exploitation modules, Layer 3 tunneling, payload obfuscation for EDR evasion, session…

command-and-controlids-ips-evasionlateral-movement+9

392 days ago

EmbedXPL-Forge

mrhenrike/embedxpl-forge

Embedded Device Security Assessment Framework — 700 modules, 350 CVEs, 55 vendors, APT Group Engine. Covers routers, IP cameras, GPON ONTs, ISP CPEs,…

embedded-systems-securityexploitationexploit-frameworks+9

529 days ago

waybend

principlebreach/waybend

Self-hosted SSRF redirect, payload, callback, and DNS workbench

command-and-controldns-analysisinformation-gathering+9

51 month ago

CVE-2025-22457-vulnserver-lab

donofly/cve-2025-22457-vulnserver-lab

Hands-on lab reproducing CVE-2025-22457: sets up Docker attacker/victim containers, finds stack addresses with GDB, and delivers a msfvenom reverse…

binary-exploitationctfeducation+6

22 days ago

CVE-2009-2265-fix

hd-exe/cve-2009-2265-fix

fix for not working exploit script on exploitdb (50057.py)

exploitationpayload-generationpenetration-testing+3

1 month ago

CVE-2023-45866_WIP

v3ilsm1th/cve-2023-45866_wip

Simulates a Bluetooth keyboard to exploit CVE-2023-45866, injecting keystrokes via DuckyScript on vulnerable Android, iOS, macOS, and Linux devices…

bluetooth-securityexploitationhardware-iot-security+4

1 year ago

-CVE-2026-26215-manga-image-translator-RCE

mbanyamer/-cve-2026-26215-manga-image-translator-rce

Proof-of-concept exploit for CVE-2026-26215, an unauthenticated remote code execution vulnerability in manga-image-translator via unsafe pickle…

exploitationpayload-generationpenetration-testing+3

8 months ago

CVE-2021-4034

joeammond/cve-2021-4034

Python exploit for CVE-2021-4034 (PwnKit) that escalates privileges to root via pkexec, generating a root shell with msfvenom payloads.

binary-exploitationexploitationpayload-generation+2

1804 years ago

CVE-2025-59287

garvitv14/cve-2025-59287

Automated exploit for CVE-2025-59287, an unauthenticated RCE in WSUS, featuring payload generation, reverse shell listener, and AES encryption with…

command-and-controlexploitationpayload-generation+4

1611 months ago

WEAPONIZING-CVE-2024-4367

exfil0/weaponizing-cve-2024-4367

CVE-2024-4367 is a critical vulnerability (CVSS 9.8) in PDF.js, allowing arbitrary JavaScript code execution due to insufficient type checks on the…

educationexploitationpayload-generation+3

31 year ago

CVE-2021-4034

g01d3nw01f/cve-2021-4034

Automates the compilation and serving of the PwnKit exploit for CVE-2021-4034, enabling local privilege escalation on vulnerable Linux systems.

exploitationexploit-frameworkspayload-generation+2

4 years ago

keystone

keystone-engine/keystone

Multi-architecture assembler framework that converts assembly source into machine code for Arm, x86, MIPS, PowerPC, RISC-V, and more, with a…

binary-analysisbinary-exploitationgeneral-purpose-utilities+4

2.6k2 months ago

ImgBackdoor

tsuyoken/imgbackdoor

Hide your payload into .jpg file

command-and-controlexploitationpayload-development+3

3944 years ago

sc2pe

dump-guy/sc2pe

Simple dotnet Native AOT app that uses AsmResolver to convert shellcode to PE

payload-developmentpayload-generationshellcode

673 years ago

Supershell

tdragon6/supershell

Supershell C2 远控平台，基于反向SSH隧道获取完全交互式Shell

command-and-controllateral-movementpayload-generation+5

1.8k6 months ago

IronSharpPack

bc-security/ironsharppack

IronSharpPack is a repo of popular C# projects that have been embedded into IronPython scripts that execute an AMSI bypass and then reflective load…

ids-ips-evasionpayload-developmentpayload-generation+2

1222 years ago

Previous12…19 Next