Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

31 results

MacroShop

khr0x40sh/macroshop

Collection of scripts to aid in delivering payloads via Office Macros. Most are python. See http://khr0x40sh.wordpress.com for details.

payload-developmentpayload-generationpenetration-testing+2

408

10 years ago

MouseJack

securityward/mousejack

All the details and steps needed to perform tactical mousejacking using Autojack

exploitationpayload-generationred-teaming+2

157 years ago

CVE-2024-34716

aelmokhtar/cve-2024-34716

Proof-of-concept exploit for CVE-2024-34716, a PNG-driven XSS to RCE chain in PrestaShop 8.1.5, enabling remote code execution via crafted image…

code-analysisexploitationpayload-generation+3

161 year ago

sqlmap-ai

atiilla/sqlmap-ai

This script automates SQL injection testing using SQLMap with AI-powered decision making.

payload-generationpenetration-testingvulnerability-scanners+3

4497 months ago

CVE-2022-46485

nevasec/cve-2022-46485

An issue in Data Illusion Survey Software Solutions NGSurvey v2.4.28 and below allows attackers to cause a Denial of Service (DoS) via a crafted…

exploitationpayload-generationpenetration-testing+2

3 years ago

CVE-2024-24590-ClearML-RCE-Exploit

rippsec/cve-2024-24590-clearml-rce-exploit

CVE-2024-24590 – ClearML RCE via unsafe pickle artifact deserialization (0.17.0–1.14.2)

command-and-controleducationexploitation+6

65 months ago

CVE-2019-14745

xooxo/cve-2019-14745

weaponized radare2 vulnerability found by @CaptnBanana and blenk92

binary-exploitationexploitationpayload-generation+3

26 years ago

prestashop-exploits

ambionics/prestashop-exploits

Collection of exploits/POC for PrestaShop cookie vulnerabilities (CVE-2018-13784)

exploitationpayload-generationpenetration-testing+2

498 years ago

CVE-2023-23397_EXPLOIT

billskico/cve-2023-23397_exploit

Generates meeting requests taking advantage of CVE-2023-23397. This requires the outlook thick client to send.

educationexploitationlateral-movement+3

73 years ago

cve-2021-29447_auto-script

davids52/cve-2021-29447_auto-script

This repo describes about cve-2021-29447 and a small script for exploiting automatically

educationexploitationpayload-generation+3

9 months ago

watchTowr-vs-FortiWeb-CVE-2025-25257

watchtowrlabs/watchtowr-vs-fortiweb-cve-2025-25257

Detection artifact generator for FortiWeb CVE-2025-25257, exploiting unauthenticated SQL injection to achieve remote code execution via hex-encoded…

exploitationpayload-generationpenetration-testing+3

1001 year ago

watchTowr-vs-Oracle-E-Business-Suite-CVE-2025-61882

watchtowrlabs/watchtowr-vs-oracle-e-business-suite-cve-2025-61882

Generates detection artifacts for Oracle E-Business Suite CVE-2025-61882 by serving a reverse shell payload to verify pre-auth RCE.

exploitationpayload-generationpenetration-testing+3

5511 months ago

CVE-2015-1397-Magento-Shoplift

wytchwulf/cve-2015-1397-magento-shoplift

Exploit scripts for CVE-2015-1397 in Magento CMS, including a pre-auth exploit to gain admin credentials and a post-auth RCE module for reverse shell…

ctfexploitationpayload-generation+3

2 years ago