Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

782 results

PAGASUS-PRO

thakur2309/pagasus-pro

Python ADB-based Android device management and security audit toolkit with an interactive menu for root detection, permission dumps, debuggable app…

android-securitydata-exfiltrationeducation+8

547

2 months ago

php-rce

david-alvarez-rosa/php-rce

Exploits for CVE-2026-109618 / CVE-2026-109619 to achieve RCE on PHP targets

exploitationpenetration-testingremote-access-tool+4

28 days ago

metasploit-framework

rapid7/metasploit-framework

Open-source exploitation framework with modular payload, encoder, and auxiliary system for penetration testing, vulnerability validation, and…

command-and-controldatabase-securitydata-exfiltration+20

39.3k5h 42m ago

CVE-2026-44011-poc

khush-613/cve-2026-44011-poc

Python proof-of-concept exploit for CVE-2026-44011, an authenticated RCE in Craft CMS via Yii behavior injection, with two-stage command output…

exploitationpayload-developmentpenetration-testing+4

11 month ago

CVE-2026-31857

0asylum/cve-2026-31857

CraftCMS has an RCE vulnerability via relational conditionals in the control panel

command-and-controlexploitationpenetration-testing+4

129 days ago

CVE-2018-16763

padsalatushal/cve-2018-16763

Fuel CMS 1.4.1 - Remote Code Execution

exploitationpenetration-testingremote-access-tool+2

64 years ago

androrat

wszf/androrat

androrat

android-securitycommand-and-controldata-exfiltration+6

2.1k6 years ago

CVE-2021-22941

hoav18/cve-2021-22941

Python exploit for CVE-2021-22941 targeting Citrix ShareFile RCE with shell and ping options for remote command execution and network probing.

exploitationpenetration-testingred-teaming+3

135 years ago

CVE-2025-24893

alaxar/cve-2025-24893

XWiki 15.10.11, 16.4.1 and 16.5.0RC1 Unauthenticated Remote code execution POC

exploitationpenetration-testingremote-access-tool+2

1 year ago

CVE-2007-2447

h3x0v3rl0rd/cve-2007-2447

Python exploit for CVE-2007-2447 targeting Samba smbd 3.0.20-Debian with reverse shell payload delivery via Netcat listener.

command-and-controlexploitationpenetration-testing+2

51 year ago

CVE-2026-73570

gabrielunknown/cve-2026-73570

Zimbra SNMP Notification OS Command Injection — Unauthenticated RCE via SMTP exploit (Poc)

exploitationpenetration-testingred-teaming+3

41 month ago

CVE-2025-32433_Erlang-OTP_PoC

abrewer251/cve-2025-32433_erlang-otp_poc

This script is a custom security tool designed to test for a critical pre-authentication vulnerability in systems running Erlang-based SSH servers

command-and-controlexploitationnetwork-security+3

11 year ago

CVE-2026-33439-Python-PoC

infernosalex/cve-2026-33439-python-poc

Python PoC for CVE-2026-33439, an OpenAM pre-authentication RCE via jato.clientSession deserialization

exploitationpenetration-testingremote-access-tool+2

51 month ago

CVE-2026-22444

bfdfhdsfdd-crypto/cve-2026-22444

Exploit for Apache Solr CVE-2026-22444, leveraging UNC path injection and SMB server to achieve remote code execution via malicious configset and…

exploitationpenetration-testingred-teaming+3

9 months ago

CVE-2026-33439-Poc

rh33t/cve-2026-33439-poc

Proof of concept for CVE-2026-33439, an unauthenticated RCE in OpenAM via Java deserialization

exploitationpenetration-testingremote-access-tool+2

1 month ago

rapid7-CVE-2026-15409

remmons-r7/rapid7-cve-2026-15409

This repo contains a proof-of-concept exploit for CVE-2026-15409. It establishes non-root remote code execution on SonicWall SMA 1000 by implementing…

exploitationpenetration-testingred-teaming+3

283 months ago

CVE-2026-24061

midox008/cve-2026-24061

GNU Inetutils telnetd Remote Authentication Bypass

exploitationpenetration-testingremote-access-tool+2

6 months ago

DblTekGoIPPwn

jacobmisirian/dbltekgoippwn

Tool to check if an IP of a DblTek GoIP is vulnerable to a challenge-response login system, send SMS messages from the system, execute remote…

command-and-controlexploitationpenetration-testing+2

646 years ago

Previous12…44 Next