Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
57 results
SHGenOb preview

SHGenOb

GitHuboldboy21/shgenob

Python based tool for generating Shellcode from PIC C

binary-analysiseducationencryption-decryption-tools+5
43
10 months ago
CVE-2025-55182-React2Shell-RCE preview

CVE-2025-55182-React2Shell-RCE

GitHubsyrins/cve-2025-55182-react2shell-rce

A modern, user-friendly GUI application for detecting and exploiting the CVE-2025-55182 vulnerability in React Server Components. Built with Python…

command-and-controleducationexploitation+4
39 months ago
CVE-2025-15368-Exploit preview

CVE-2025-15368-Exploit

GitHubkazehere4you/cve-2025-15368-exploit

Exploit tool for SportsPress Plugin LFI & RCE (CVE-2025-15368) - Proof of Concept

educationexploitationpayload-generation+3
6 months ago
CVE-2025-8088-Winrar-Tool-Gui preview

CVE-2025-8088-Winrar-Tool-Gui

GitHubsyrins/cve-2025-8088-winrar-tool-gui

A Windows GUI tool demonstrating a proof-of-concept archive traversal technique related to CVE-2025-8088 using WinRAR’s CLI. Allows building crafted…

binary-exploitationeducationencryption-decryption-tools+3
41 year ago
Cve-2025-8088-WinRar-vulnerability preview

Cve-2025-8088-WinRar-vulnerability

GitHubshinkirou789/cve-2025-8088-winrar-vulnerability

Python tool that crafts malicious RAR archives to exploit CVE-2025-8088 in WinRAR, enabling path traversal and arbitrary file overwrite via NTFS ADS.…

binary-exploitationeducationexploitation+3
111 months ago
CVE-2022-4616-POC preview

CVE-2022-4616-POC

GitHubahanel13/cve-2022-4616-poc

This Python script aids in exploiting CVE-2022-46169 by automating payload delivery and response handling. It starts an HTTP server, listens for…

educationexploitationpayload-generation+2
3 years ago
CVE-2024-44871 preview

CVE-2024-44871

GitHubvances25/cve-2024-44871

Python exploit for MoziloCMS <= 3.0.1 that uploads a PHP web shell via authenticated admin access, renames the file, and executes system commands on…

educationexploitationpayload-generation+2
1 year ago
Autopwn preview

Autopwn

GitHubrpranshu/autopwn

A simple bash based metasploit automation tool!

educationexploit-frameworkspayload-generation+2
1266 years ago
POC_react2shell_CVE-2025-55182 preview

POC_react2shell_CVE-2025-55182

GitHubnkwenti-severian-ndongtsop/poc_react2shell_cve-2025-55182

Exploit for CVE-2025-55182 targeting Next.js React Server Components via prototype pollution, enabling remote code execution with command execution…

ctfeducationexploitation+4
28 months ago
Kage preview
Archived

Kage

GitHubzerx0r/kage

Kage is Graphical User Interface for Metasploit Meterpreter and Session Handler

command-and-controleducationexploit-frameworks+9
1.2k3 years ago
CVE-2024-28397-Exploit-Automation preview

CVE-2024-28397-Exploit-Automation

GitHubl1337xi/cve-2024-28397-exploit-automation

A Python automation script for exploiting the **js2py Sandbox Escape** vulnerability (CVE-2024-28397). This tool automates the payload generation and…

ctfeducationexploitation+3
29 months ago
ROPgadget preview

ROPgadget

GitHubjonathansalwan/ropgadget

Search for ROP gadgets in ELF, PE, Mach-O, and Raw binaries across x86, ARM, MIPS, and RISC-V architectures. Supports automated ROP chain generation…

binary-analysisbinary-exploitationctf+3
4.5k2 months ago
ysoserial preview

ysoserial

GitHubfrohoff/ysoserial

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

educationexploit-frameworkspayload-generation+3
9.0k9 months ago
Hack-Tool preview

Hack-Tool

GitHubrevanmalang/hack-tool

ALL IN ONE Hacking Tool For Hackers

ctfexploit-frameworksforensics+9
513 years ago
ysoserial preview

ysoserial

GitHubal1ex/ysoserial

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization

educationexploitationpayload-generation+3
21 year ago
CVE-2025-55182-React2Shell-Exploit preview

CVE-2025-55182-React2Shell-Exploit

GitHubm4rgs/cve-2025-55182-react2shell-exploit

A proof-of-concept tool for demonstrating the critical React2Shell vulnerability

educationexploitationpayload-generation+3
18 months ago
LAZYPARIAH preview
Archived

LAZYPARIAH

GitHuboctetsplicer/lazypariah

A tool for generating reverse shell payloads on the fly.

command-and-controlctfexploitation+5
15 months ago
react2shell-CVE-2025-55182-full-rce-script preview

react2shell-CVE-2025-55182-full-rce-script

GitHubchrahman/react2shell-cve-2025-55182-full-rce-script

React2Shell vulnerability (CVE-2025-55182 / CVE-2025-66478) Full Script

command-and-controleducationexploitation+5
38 months ago
Previous1234Next