Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
25 results
poc-CVE-2026-64638- preview

poc-CVE-2026-64638-

GitHubmohwahyudi/poc-cve-2026-64638-

PoC exploit chain for WordPress pre-auth XSS to RCE via DOM clobbering, REST JSONP/SOME, and plugin upload, with Docker lab verification and…

exploitationpayload-generationpenetration-testing+5
16 days ago
Mystikal preview

Mystikal

GitHubd00mfist/mystikal

Generates macOS initial access payloads for Mythic C2: installer packages, Office macros, armed PDFs, disk images, and weaponized PIP/Ruby/NPM…

adversarial-attackcommand-and-controlpayload-development+4
3262 years ago
CVE-2017-8759 preview

CVE-2017-8759

GitHubsythass/cve-2017-8759

Exploit for CVE-2017-8759 with HTA payload generation and phishing callback server for remote code execution via crafted Office documents.

command-and-controlexploitationpayload-generation+2
8 years ago
C2 preview

C2

GitHubet0x/c2

Generate C2 payloads embedded in favicon files, executed via PowerShell for covert command-and-control operations.

command-and-controlpayload-developmentpayload-generation+3
2111 years ago
CVE-2023-44763_ConcreteCMS-Arbitrary-file-upload-Thumbnail preview

CVE-2023-44763_ConcreteCMS-Arbitrary-file-upload-Thumbnail

GitHubsromanhu/cve-2023-44763_concretecms-arbitrary-file-upload-thumbnail

ConcreteCMS v.9.2.1 is affected by Arbitrary File Upload vulnerability that allows Cross-Site Scriting (XSS) Stored.

exploitationpayload-generationphishing-tools+3
2 years ago
evil-winrar preview

evil-winrar

GitHubyoumulijiang/evil-winrar

Automated framework for CVE-2023-38831 exploitation with payload generation, email delivery, and download link creation for social engineering…

exploitationpayload-generationphishing-tools+3
102 years ago
CVE-2024-25293 preview

CVE-2024-25293

GitHubeqstlab/cve-2024-25293

Proof-of-concept exploit for CVE-2024-25293 demonstrating remote code execution in mjml-app via crafted mj-button href attributes, with a Python…

exploitationmisconfigurationpayload-generation+3
1 year ago
CVE-2025-1015 preview

CVE-2025-1015

GitHubr3m0t3nu11/cve-2025-1015

Proof-of-concept exploit for CVE-2025-1015 demonstrating unsanitized URI fields in Thunderbird Address Book leading to unprivileged JavaScript…

exploitationpayload-generationphishing-tools+3
31 year ago
CSRF-via-stored-XSS-for-PrivEsc preview

CSRF-via-stored-XSS-for-PrivEsc

GitHubmexeck88/csrf-via-stored-xss-for-privesc

Proof-of-concept exploit for CVE-2025-26153: stored XSS in Chamilo LMS forum threads enabling privilege escalation from regular user to admin via…

educationexploitationpayload-development+4
6 months ago
CVE-2022-30190-follina-Office-MSDT-Fixed preview

CVE-2022-30190-follina-Office-MSDT-Fixed

GitHubkomomon/cve-2022-30190-follina-office-msdt-fixed

Modified CVE-2022-30190 exploit tool for MS-MSDT Office RCE with custom docx template support, binary/command execution modes, and embedded HTTP…

command-and-controlexploitationpayload-generation+3
3903 years ago
7-Zip-CVE-2025-0411-POC preview

7-Zip-CVE-2025-0411-POC

GitHubcesarbtakeda/7-zip-cve-2025-0411-poc

Proof-of-concept exploit for CVE-2025-0411, demonstrating Mark-of-the-Web bypass in 7-Zip to enable arbitrary code execution via crafted archives…

exploitationmalware-analysispayload-generation+3
21 year ago
CVE-2025-22131-PoC preview

CVE-2025-22131-PoC

GitHubzzn1nj4/cve-2025-22131-poc

Proof-of-concept exploit for CVE-2025-22131, an XSS vulnerability in PhpSpreadsheet, demonstrating cookie exfiltration via crafted XLSX files.

exploitationpayload-generationphishing-tools+2
111 months ago
CVE-2024-21413 preview

CVE-2024-21413

GitHubthemehackers/cve-2024-21413

Proof-of-concept exploit for CVE-2024-21413, a Microsoft Outlook RCE vulnerability, demonstrating email-based attack with configurable templates and…

email-securityexploitationpayload-generation+3
251 year ago
CVE-2023-41425 preview

CVE-2023-41425

GitHubraffli-dev/cve-2023-41425

Exploit for Wonder CMS XSS to RCE (CVE-2023-41425) with theme upload and reverse shell payloads.

exploitationpayload-generationphishing-tools+2
11 year ago
SignHere preview

SignHere

GitHubretr0-code/signhere

Generates malicious RTF documents exploiting CVE-2017-11882 to execute arbitrary commands or payloads via embedded Equation objects and VBScript.

command-and-controlexploitationpayload-generation+3
65 years ago
MacroShop preview

MacroShop

GitHubkhr0x40sh/macroshop

Scripts for generating Office macro payloads to deliver executables and PowerShell commands, aiding in red team engagements and phishing simulations.

payload-developmentpayload-generationpenetration-testing+2
40810 years ago
EmbedInHTML preview

EmbedInHTML

GitHubarno0x/embedinhtml

Encrypts and embeds any file into an HTML page with automatic decryption and download simulation for social engineering and payload delivery.

payload-generationphishing-toolssocial-engineering+1
4908 years ago
FakeImageExploiter preview

FakeImageExploiter

GitHubr00t-3xp10it/fakeimageexploiter

Use a Fake image.jpg to exploit targets (hide known file extensions)

command-and-controlexploitationpayload-development+5
9461 year ago
Previous12Next