Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

68 results

mkPIVM

d7ead/mkpivm

Generate polymorphic, position-independent virtual machines (PIVMs) from arbitrary x86/x64 shellcode.

exploitationmalware-analysispayload-generation+3

3861 month ago

CVE-2026-53595_exploit

0xdak/cve-2026-53595_exploit

Exploit script chaining CVE-2026-53595 (anonymous account takeover) and CVE-2026-53593 (.pht upload) for unauthenticated remote code execution on…

authenticationexploitationpayload-generation+4

2 months ago

CVE-2026-15282

shinthink/cve-2026-15282

Instant Appointment <= 1.2 — Unauthenticated Arbitrary File Upload to RCE via add_service_front AJAX | CVSS 9.8

educationexploitationpayload-generation+5

2 months ago

wasmforge

praetorian-inc/wasmforge

WasmForge — compile Go and C# programs to single-binary, WASM-sandboxed native executables with polymorphic output.

binary-analysiscommand-and-controlexploit-frameworks+9

1313 months ago

CVE-2025-32433-available-for-windows

blackcat4347/cve-2025-32433-available-for-windows

CVE-2025-32433-available-for-windows-victims

command-and-controleducationexploitation+3

7 months ago

FlaskCache_CVE-2021-33026_POC

agilevatester/flaskcache_cve-2021-33026_poc

PoC exploit for CVE-2021-33026 that poisons Redis cache in Flask-Cache to achieve remote code execution via malicious pickle deserialization.

exploitationpayload-generationpenetration-testing+4

18 months ago

Next.js-RCE-Scanner-BurpSuite-Extension-

cr4at0r/next.js-rce-scanner-burpsuite-extension-

使用burp自动检测CVE-2025-55182 Next.js RCE 漏洞

command-and-controlexploitationpayload-generation+3

289 months ago

moukthar

tomiwa-ot/moukthar

Android remote administration tool

android-securitycommand-and-controldata-exfiltration+6

68010 months ago

CVE-2025-25257

thestingr/cve-2025-25257

Public PoC for CVE-2025-25257: FortiWeb pre-auth SQLi to RCE

command-and-controlexploitationpayload-generation+3

510 months ago

CVE-2025-53770-Exploit

udyz/cve-2025-53770-exploit

Exploit for CVE-2025-53770, a SharePoint ViewState deserialization vulnerability, enabling remote code execution via crafted payloads.

command-and-controldata-exfiltrationexploitation+3

11 year ago

CVE-2025-47812-poC

0xcan1337/cve-2025-47812-poc

Simple exploit for Wing FTP Server RCE (CVE-2025-47812) to run commands and get a reverse shell. For educational use only.

educationexploitationpayload-generation+3

131 year ago

cve-2020-14008

jackhars/cve-2020-14008

Python exploit for CVE-2020-14008 in ManageEngine Applications Manager delivering a SYSTEM-level reverse shell via authenticated remote code…

exploitationpayload-generationpenetration-testing+4

51 year ago

go-get-RCE

saptaktdk/go-get-rce

This is the exploit of CVE-2018-6574: go get RCE

exploitationpayload-generationpenetration-testing+2

1 year ago

CVE-2025-24071_PoC

marcejr117/cve-2025-24071_poc

A PoC of CVE-2025-24071 / CVE-2025-24054, A windows vulnerability that allow get NTMLv2 hashes

exploitationinformation-gatheringpassword-cracking+2

241 year ago

Exploit-CVE-2025-24801

r1beirin/exploit-cve-2025-24801

Python exploit for CVE-2025-24801 achieving Remote Code Execution via Local File Inclusion in GLPI 10.0.17. Includes command execution mode for…

exploitationpayload-generationpenetration-testing+3

11 year ago

CVE-2025-24813-PoC

tonyarris/cve-2025-24813-poc

A PoC for CVE-2025-24813

command-and-controlexploitationpayload-generation+4

11 year ago

Kitsune

joelgmsec/kitsune

Polymorphic C2 framework with graphical interface, automatic reconnection, payload generation, and integrated hacking tools for red team operations…

command-and-controlexploit-frameworkspayload-generation+2

1051 year ago

Keylogger

aydinnyunus/keylogger

Get Keyboard,Mouse,ScreenShot,Microphone Inputs from Target Computer and Send to your Mail.

data-exfiltrationinformation-gatheringmalware-analysis+5

2.8k2 years ago

Previous12 3 4 Next