Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

418 results

siemframework

elevenpaths/siemframework

Modular Python3 attack framework for automating exploitation of SIEM platforms (Splunk, Graylog, OSSIM, QRadar, McAfee) via credential theft, payload…

exploit-frameworksinformation-gatheringnetwork-mapping+7

6 years ago

Overthrone

karmanya03/overthrone

All-Rust Active Directory exploitation framework: LDAP/SMB/Kerberos enumeration, attack-graph pathfinding, Kerberoasting, NTLM relay, ticket forging,…

command-and-controlexploit-frameworksinformation-gathering+8

3111 days ago

CVE-2021-24155.rb

0dayninja/cve-2021-24155.rb

WordPress Backup Guard Authenticated Remote Code Execution Exploit

exploit-frameworkspayload-developmentpenetration-testing+3

105 years ago

cobaltstrike_swing_xss2rce

hluwa/cobaltstrike_swing_xss2rce

Exploit for CVE-2022-39197, a cross-site scripting vulnerability in Cobalt Strike's Swing GUI that enables remote code execution on team servers.

command-and-controlexploit-frameworkspenetration-testing+3

74 years ago

ProxyLogon-CVE-2021-26855-metasploit

taroballzchen/proxylogon-cve-2021-26855-metasploit

CVE-2021-26855 proxyLogon metasploit exploit script

exploit-frameworkspayload-developmentpenetration-testing+3

45 years ago

Sudo-CVE-2021-3156

maalfer/sudo-cve-2021-3156

Exploit para explotar la vulnerabilidad CVE-2025-32463

exploitationexploit-frameworkspenetration-testing+3

81 year ago

drupalgeddon2

jirojo2/drupalgeddon2

MSF exploit module for Drupalgeddon 2 (CVE-2018-7600 / SA-CORE-2018-002)

exploit-frameworkspayload-developmentpenetration-testing+3

58 years ago

CVE-2021-1675

andrewtrube/cve-2021-1675

Local privilege escalation exploit for CVE-2021-1675 (PrintNightmare) that installs a malicious DLL to gain SYSTEM access on vulnerable Windows…

exploitationexploit-frameworkspayload-development+3

54 years ago

blackarmy-framework

black-army-security/blackarmy-framework

Modular Python-based penetration testing framework for automated security assessments, exploitation, and red team operations. Includes modules for…

exploit-frameworkspenetration-testing-frameworksred-teaming

61 year ago

CVE-2017-0199

n1shant-sinha/cve-2017-0199

Exploit toolkit CVE-2017-0199 - v2.0 is a handy python script which provides a quick and effective way to exploit Microsoft RTF RCE. It could…

exploitationexploit-frameworkspayload-generation+3

29 years ago

CVE-2025-66177

ang3ll/cve-2025-66177

CVE-2025-66177 Metasploit exploit for Hikvision NVR firmware v4.72 and v4.83

exploitationexploit-frameworkspenetration-testing+3

25 months ago

CVE-2026-68820_Mass_Exploit

maxprog-svg/cve-2026-68820_mass_exploit

Automated local privilege escalation exploit for Windows 10/11 targeting AFD.sys use-after-free to gain SYSTEM, with PPL bypass and EDR evasion for…

exploitationexploit-frameworkslateral-movement+5

2 months ago

Exploit-Chain-CVE-2025-6018-6019

0rioncollector/exploit-chain-cve-2025-6018-6019

Exploit Chain of CVE-2025-6018 to CVE-2025-6019

exploitationexploit-frameworkspenetration-testing+3

48 months ago

CVE-2026-4692-trust-me-im-in-rdm

sneakynachos/cve-2026-4692-trust-me-im-in-rdm

Proof-of-concept exploit for Firefox BrowsingContext authorization bypass (CVE-2026-4692), demonstrating forged IPC messages to set InRDMPane and…

exploitationexploit-frameworkspayload-development+4

12 months ago

CVE-2024-49112

ccievoice2009/cve-2024-49112

Exploit for CVE-2024-49112, a critical Windows LDAP RCE vulnerability, triggering a crash via crafted Netlogon and LDAP interactions.

exploitationexploit-frameworkspayload-development+3

31 year ago

CVE-2026-31431-REVSHELL

danimrtzp/cve-2026-31431-revshell

Weaponized Python exploit for CVE-2026-31431, chaining Linux kernel privilege escalation to a daemonized root reverse shell with full PTY, patching…

exploitationexploit-frameworkspayload-development+5

6 months ago

CVE-2026-31431

mfloresdacunha/cve-2026-31431

Local privilege escalation exploit for CVE-2026-31431 in Linux kernel's algif_aead, using splice to overwrite page cache and gain root. Includes a…

exploitationexploit-frameworkspenetration-testing+3

16 months ago

MikroTik-RouterOS-6.49.18-Exploit-Kit

alzeer711/mikrotik-routeros-6.49.18-exploit-kit

Exploit kit targeting MikroTik RouterOS 6.49.18 with seven exploit scripts and support for CVE-2023-30799, featuring an Arabic interface and detailed…

exploitationexploit-frameworksnetwork-security+3

11 year ago

Previous 1 234…24 Next