Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
2142 results
CVE-2017-0199 preview

CVE-2017-0199

GitHubphantomlancer123/cve-2017-0199

Python exploit toolkit for CVE-2017-0199 (Microsoft Office RCE) that generates malicious RTF/PPSX files and delivers Metasploit or custom payloads to…

educationexploitationpayload-generation+3
1
8 years ago
CVE-2017-0199 preview

CVE-2017-0199

GitHublikekabin/cve-2017-0199

Python script to generate malicious RTF/PPSX files exploiting CVE-2017-0199 for remote code execution, delivering Metasploit or custom payloads with…

educationexploitationpayload-generation+3
8 years ago
EFS_CVE-2021-43217 preview

EFS_CVE-2021-43217

GitHubjolynngsc/efs_cve-2021-43217

Educational lab demonstrating EFS bypass (CVE-2021-43217) on Windows 10 using Kali Linux, Metasploit, and custom Python shellcode for penetration…

educationexploitationlabs-practice+3
2 years ago
CVE-2006-6184 preview

CVE-2006-6184

GitHubb03902043/cve-2006-6184

Python exploit for CVE-2006-6184, a stack-based buffer overflow in Allied Telesyn TFTP Server 1.9, enabling remote code execution or DoS. Generates…

binary-exploitationexploitationpayload-generation+2
6 years ago
discover preview

discover

GitHubleebaird/discover

Custom Bash and Python scripts used to automate various penetration testing tasks including recon, scanning, enumeration, and malicious payload…

api-security-testingcloud-securitycontainer-security+9
3.9k5 days ago
ImgBackdoor preview

ImgBackdoor

GitHubtsuyoken/imgbackdoor

Builds a trojanized .jpg.exe agent that downloads and executes a user-supplied PowerShell, Batch, or Metasploit payload, then opens a Meterpreter…

command-and-controlexploitationpayload-development+3
3944 years ago
Dr.DLL-CVE-2018-18333 preview

Dr.DLL-CVE-2018-18333

GitHubmrx04programmer/dr.dll-cve-2018-18333

Python-based exploit tool for CVE-2018-18333 targeting Windows systems, with integrated Metasploit payload generation and automated exploitation…

exploitationpayload-generationpenetration-testing
13 years ago
backdoorme preview

backdoorme

GitHubkkevsterrr/backdoorme

SSH-based post-exploitation framework deploying persistent backdoors (bash, Python, Metasploit) with modules for cron, startup, and privilege…

command-and-controlpayload-generationpenetration-testing+5
7478 years ago
OverThruster preview

OverThruster

GitHubredlectroid/overthruster

Generates Arduino HID attack payloads with customizable UAC bypass, notification spoofing, and Metasploit integration for physical penetration…

hardware-iot-securitypayload-generationpenetration-testing+1
1652 years ago
nodexp preview

nodexp

GitHubesmog/nodexp

Automated Server-Side JavaScript Injection detection and exploitation tool for Node.js services, supporting blind and results-based injection with…

exploitationpayload-generationpenetration-testing+2
1071 year ago
CVE-2018-2628 preview

CVE-2018-2628

GitHub0xmj/cve-2018-2628

Exploit for Oracle WebLogic CVE-2018-2628 that tests vulnerable servers, uploads webshells, and executes remote commands via JRMP deserialization and…

command-and-controlexploitationpayload-generation+3
127 years ago
CVE-2017-0199 preview

CVE-2017-0199

GitHubexploit-install/cve-2017-0199

Python-based exploit toolkit for CVE-2017-0199 (Microsoft RTF RCE) that generates malicious RTF files and delivers Metasploit/meterpreter payloads…

command-and-controlexploitationpayload-development+3
79 years ago
cve-2019-0227 preview

cve-2019-0227

GitHubianxtianxt/cve-2019-0227

Exploit for Apache Axis 1.4 remote code execution (CVE-2019-0227) with Metasploit listener integration and JSP payload deployment.

exploitationpayload-generationpenetration-testing+3
46 years ago
CVE-2017-8570 preview

CVE-2017-8570

GitHubdrac0nids/cve-2017-8570

Automated exploit generator for CVE-2017-8570 that creates malicious PPSX files and configures Metasploit listeners for remote shell access.

command-and-controlexploitationpayload-generation+3
27 years ago
CVE-2018-4878 preview

CVE-2018-4878

GitHubkathoden/cve-2018-4878

Exploit generation script for CVE-2018-4878 (Flash Player zero-day) with Metasploit shellcode integration, producing SWF and HTML attack pages for…

exploitationpayload-generationpenetration-testing+3
8 years ago
CVE-2018-11770 preview

CVE-2018-11770

GitHubivanitlearning/cve-2018-11770

Python RCE exploit for Apache Spark rewritten from Metasploit module

exploitationpayload-generationpenetration-testing+3
16 years ago
CVE-2009-3103 preview

CVE-2009-3103

GitHubafifudinmtop/cve-2009-3103

Exploit for CVE-2009-3103, a Windows SMB remote code execution vulnerability, with a Python script and Metasploit handler for reverse shell.

command-and-controlexploitationpayload-generation+3
7 months ago
CVE-2017-8759 preview

CVE-2017-8759

GitHubadeljck/cve-2017-8759

Python script to generate malicious RTF files exploiting CVE-2017-8759 (Microsoft .NET Framework RCE) and deliver Metasploit payloads for penetration…

exploitationpayload-generationpenetration-testing+3
7 years ago
Previous12…100Next