Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

460 results

Remote

zibility/remote

参考Gh0st源码，实现的一款PC远程协助软件，拥有远程Shell、文件管理、桌面管理、消息发送等功能。

command-and-controlpayload-developmentpenetration-testing+3

23110 years ago

CVE-2023-30547

junnythemarksman/cve-2023-30547

Python exploit for CVE-2023-30547 vm2 sandbox escape vulnerability. Generates base64-encoded JSON payload to open a reverse shell from vulnerable…

exploitationpayload-generationpenetration-testing+2

2 years ago

evil-winrm

hackplayers/evil-winrm

The ultimate WinRM shell for hacking/pentesting

authenticationexploitationpayload-generation+3

5.4k8 months ago

CHAOS

tiagorlampert/chaos

🔥 CHAOS is a free and open-source Remote Administration Tool that allow generate binaries to control remote operating systems.

command-and-controlpayload-generationpost-exploitation+3

2.8k1 year ago

Ares

sweetsoftware/ares

Python-based RAT with a web-based C2 server and cross-platform agent builder. Supports remote shell execution, file transfer, screenshot capture,…

command-and-controlpayload-generationpersistence-mechanisms+2

1.6k8 years ago

ReverseTCPShell

zhacker13/reversetcpshell

PowerShell-based reverse TCP shell framework with C2 server modules for remote host control, file transfer, and screenshot capture during penetration…

command-and-controlpayload-generationpenetration-testing+2

1.1k3 years ago

webshells

blackarch/webshells

Curated collection of webshell scripts for web server remote access and command execution, supporting multiple languages including PHP, ASP, and JSP.

payload-generationpenetration-testingpost-exploitation+3

1.0k3 years ago

rustcat

robiot/rustcat

Port listener and reverse shell tool with interactive mode, command history, and tab completion. Supports Linux, macOS, and Windows for penetration…

network-securitypayload-generationpenetration-testing+2

8102 years ago

twittor

paulsec/twittor

A fully featured backdoor that uses Twitter as a C&C server

command-and-controlexploitationpayload-development+4

80910 years ago

Lilith

werkamsus/lilith

Lightweight C++ RAT for Windows with remote command execution via CMD/Powershell, keylogging, script execution, auto-install persistence, and…

command-and-controlpayload-generationpenetration-testing+4

7506 years ago

backdoorme

kkevsterrr/backdoorme

SSH-based post-exploitation framework deploying persistent backdoors (bash, Python, Metasploit) with modules for cron, startup, and privilege…

command-and-controlpayload-generationpenetration-testing+5

7478 years ago

Heroinn

b23r0/heroinn

A cross platform C2/post-exploitation framework.

command-and-controlpayload-developmentpenetration-testing-frameworks+4

7103 years ago

etaHEN

etahen/etahen

PS5 homebrew enabler payload offering post-exploitation features: custom plugin/payload loading, unsigned fself/fpkg support, debug settings, FTP…

binary-exploitationexploitationpayload-development+3

6503 months ago

xc

xct/xc

A small reverse shell for Linux & Windows

command-and-controlpayload-generationpenetration-testing+3

6484 years ago

JSshell

shelld3v/jsshell

JavaScript reverse shell for executing JS code remotely via blind XSS. Generates payloads, listens for connections, and executes commands in the…

payload-generationpenetration-testingremote-access-tool+1

6313 years ago

oracleShell

jas502n/oracleshell

Java-based Oracle database exploitation tool for command execution, file management, and reverse shell via PL/SQL functions.

database-securityexploitationpayload-development+2

5855 years ago

SockTail

yeeb1/socktail

Lightweight Go binary that joins a device to a Tailscale network and exposes a local SOCKS5 proxy for ephemeral red team access. Supports…

command-and-controllateral-movementnetwork-security+4

57110 months ago

gh0st

sin5678/gh0st

a open source remote administrator tool

command-and-controlpayload-developmentpenetration-testing+3

56013 years ago

Previous12…26 Next