Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
3428 results
ProxyLogon preview

ProxyLogon

GitHubp0wershe11/proxylogon

ProxyLogon(CVE-2021-26855+CVE-2021-27065) Exchange Server RCE(SSRF->GetWebShell)

exploitationpayload-generationpenetration-testing+3
124
5 years ago
cve-2021-21985_exp preview

cve-2021-21985_exp

GitHubxnianq/cve-2021-21985_exp

cve-2021-21985 exploit

command-and-controlexploitationpayload-generation+3
1154 years ago
CVE-2020-11932 preview

CVE-2020-11932

GitHubprojectorbug/cve-2020-11932

Double-Free BUG in WhatsApp exploit poc.

binary-exploitationexploitationmobile-security+3
986 years ago
CVE-2021-22204-exiftool preview

CVE-2021-22204-exiftool

GitHubconvisolabs/cve-2021-22204-exiftool

Python exploit for the CVE-2021-22204 vulnerability in Exiftool

educationexploitationlabs-practice+2
975 years ago
CVE-2019-0193 preview

CVE-2019-0193

GitHubjas502n/cve-2019-0193

Apache Solr DataImport Handler RCE

exploitationpayload-generationpenetration-testing+3
907 years ago
c2-cloud preview

c2-cloud

GitHubgovindasamyarun/c2-cloud

The C2 Cloud is a robust web-based C2 framework, designed to simplify the life of penetration testers. It allows easy access to compromised…

command-and-controlexploit-frameworkspayload-generation+4
1282 years ago
react2shell-ultimate preview

react2shell-ultimate

GitHubhackersatyamrastogi/react2shell-ultimate

React2Shell Ultimate - The most comprehensive CVE-2025-66478 Scanner for Next.js RSC RCE vulnerability. Multi-mode detection, WAF bypass, local…

command-and-controlexploitationpayload-generation+4
15210 months ago
peCloakCapstone preview

peCloakCapstone

GitHubv-p-b/pecloakcapstone

Platform independent peCloak fork based on Capstone

binary-analysisids-ips-evasionmalware-analysis+2
11011 years ago
pyFUD preview

pyFUD

GitHubmachine1337/pyfud

CROSS PLATFORM REMOTE ACCESS TROJAN (RAT)

command-and-controlpayload-generationpersistence-mechanisms+3
1181 year ago
CVE-2018-2628 preview

CVE-2018-2628

GitHubjas502n/cve-2018-2628

Weblogic 反序列化漏洞(CVE-2018-2628)

exploitationpayload-generationpenetration-testing+3
1077 years ago
wordpress-shell preview

wordpress-shell

GitHubleonjza/wordpress-shell

Cheap & Nasty Wordpress Command Execution Shell

command-and-controlexploitationpayload-generation+3
927 years ago
FsquirtCPLPoC preview

FsquirtCPLPoC

GitHubmhaskar/fsquirtcplpoc

PoC for generating bthprops.cpl module designed to be loaded by Fsquirt.exe LOLBin

binary-exploitationcommand-and-controlexploitation+5
12110 months ago
mousejack_transmit preview

mousejack_transmit

GitHubiamckn/mousejack_transmit

Wireless mouse/keyboard attack with replay/transmit poc

exploitationhardware-securitynetwork-mapping+5
9310 years ago
CVE-2023-36664-Ghostscript-command-injection preview

CVE-2023-36664-Ghostscript-command-injection

GitHubjakabakos/cve-2023-36664-ghostscript-command-injection

Ghostscript command injection vulnerability PoC (CVE-2023-36664)

educationexploitationpapers-research+2
1303 years ago
fudshell preview

fudshell

GitHubmachine1337/fudshell

An efficent Script To Generate FUD Persistent Reverse Shell For Red Teaming. Don't Upload Generated Stub On Virustotal

payload-generationshellcode-generation
763 years ago
Shelly preview

Shelly

GitHubtegal1337/shelly

Simple Backdoor Manager with Python (based on weevely)

payload-generationpenetration-testingremote-access-tool+1
961 year ago
CVE-2019-15107 preview

CVE-2019-15107

GitHubjas502n/cve-2019-15107

Python exploit for CVE-2019-15107, an unauthenticated remote code execution vulnerability in Webmin <=1.920 via the password_change.cgi endpoint.

command-and-controlexploitationpayload-generation+3
667 years ago
DFShell preview

DFShell

GitHubd3ext/dfshell

Python-based forward shell tool that creates a TTY-like interactive shell over HTTP using named pipes, enabling command execution on firewalled…

payload-generationpenetration-testingshellcode+1
1223 years ago
Previous1…9899100Next