Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

134 results

MySQL-Fu.rb

hood3drob1n/mysql-fu.rb

MySQL-Fu is a Ruby based MySQL Client Script I wrote. It does most of the stuff a normal MySQL client might do: SQL Shell, Update/Delete/Drop…

database-securityexploitationpayload-generation+3

13 years ago

nimcrypt

icyguider/nimcrypt

PE Crypter written in Nim

binary-analysiscode-analysiseducation+9

1025 years ago

CVE-2025-64512

matesz44/cve-2025-64512

CVE-2025-64512: pdfminer.six pickle deserialization rce; .pickle.gz + pdf generator w/ custom payloads

code-analysisexploitationpayload-generation+3

42 months ago

CVE-2021-46703

benedridge/cve-2021-46703

Simple payload builder

code-analysisexploitationpayload-generation+2

3 years ago

sshimpanzee

lexfo/sshimpanzee

SSHD Based implant supporting tunneling mecanisms to reach the C2 (DNS, ICMP, HTTP Encapsulation, HTTP/Socks Proxies, UDP...)

command-and-controldns-analysisnetwork-security+4

2941 year ago

ppsx-file-generator

temesgeny/ppsx-file-generator

ppsx file generator for cve-2017-8570 (based on bhdresh/cve-2017-8570)

exploitationpayload-generationpenetration-testing+3

668 years ago

PRTG-Network-Monitor-18.2.38---Authenticated-Remote-Code-Execution-CVE-2018-9276

ac8999/prtg-network-monitor-18.2.38---authenticated-remote-code-execution-cve-2018-9276

Python Exploit for CVE: 2018-9276

command-and-controlexploitationpayload-generation+3

5 months ago

CVE-2021-40964

z3r0space/cve-2021-40964

Tiny File Manager <= 2.4.6 - Remote Code Execution (RCE)

exploitationpayload-generationpenetration-testing+3

1 year ago

CVE-2021-34527

m8sec/cve-2021-34527

PrintNightmare (CVE-2021-34527) PoC Exploit

exploitationlateral-movementpayload-generation+3

1183 years ago

cve-2006-6184

shauntdergrigorian/cve-2006-6184

This is a python-based standalone exploit for CVE-2006-6184. This exploit triggers a stack-based buffer overflows in Allied Telesyn TFTP Server…

binary-exploitationexploitationpayload-generation+3

115 years ago

FOXCMS-CVE-2025-29306-POC

inok009/foxcms-cve-2025-29306-poc

Python PoC for CVE-2025-29306, a parameter injection RCE in FOXCMS v1.2. Injects PHP code via the id parameter on /images/index.html for authorized…

educationexploitationpayload-generation+3

11 year ago

Code-Roulette

sorcerio/code-roulette

Code Roulette is a terminal interface based (TUI), online multiplayer, Russian Roulette game where the loser executes the winner's Python payload…

command-and-controlctfeducation+3

78 months ago

CVE-2020-24186_reverse_shell_upload

substing/cve-2020-24186_reverse_shell_upload

Exploit for CVE-2020-24186 in WordPress wpDiscuz 7.0.4 that uploads a reverse PHP shell for remote code execution.

exploitationpayload-generationpenetration-testing+3

142 years ago

PISmith

albert-y1n/pismith

PISmith: Reinforcement Learning-based Red Teaming for Prompt Injection Defenses

adversarial-attackai-securitymachine-learning+3

332 days ago

CVE-2021-40444

lockedbyte/cve-2021-40444

Generates malicious DOCX documents exploiting CVE-2021-40444 (Microsoft Office RCE) with a hosted server for DLL payload delivery, based on…

exploitationmalware-analysispayload-generation+1

1.8k5 years ago

CVE-2021-40444

hqdat809/cve-2021-40444

Malicious DOCX generator exploiting CVE-2021-40444 for remote code execution via crafted Office documents, with integrated hosting server for payload…

exploitationmalware-analysispayload-generation+3

3 years ago

Exploit-PoC-CVE-2021-40444-inject-ma-doc-vao-docx

w1kyri3/exploit-poc-cve-2021-40444-inject-ma-doc-vao-docx

Generates malicious DOCX files exploiting CVE-2021-40444 to achieve remote code execution via crafted Office documents, with an integrated hosting…

command-and-controlexploitationmalware-analysis+3

5 years ago

CVE-2021-40444

alexcot25051999/cve-2021-40444

Generates malicious DOCX files exploiting CVE-2021-40444 to achieve remote code execution via crafted CAB and HTML payloads, with a built-in hosting…

command-and-controlexploitationmalware-analysis+3

4 years ago

Previous12…8 Next