Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
164 results
Platypus preview

Platypus

GitHubwangyihang/platypus

:hammer: A modern, cross-platform machine manager

command-and-controlnetwork-securitypenetration-testing+2
1.7k1 month ago
rdpy preview

rdpy

GitHubcitronneur/rdpy

Remote Desktop Protocol in Twisted Python

network-securitypenetration-testingred-teaming+1
1.7k6 years ago
reverse-shell preview

reverse-shell

GitHublukechilds/reverse-shell

On-demand reverse shell service that auto-detects target environment and executes appropriate payload for remote access during penetration tests.

command-and-controlexploitationpenetration-testing+3
2.1k7 months ago
PingRAT preview

PingRAT

GitHubumutcamliyurt/pingrat

ICMP-based command-and-control tool that tunnels C2 traffic through firewalls using ping payloads, undetectable by most AV/EDR solutions.

command-and-controlpenetration-testingred-teaming+1
4734 months ago
CVE-2021-21972 preview

CVE-2021-21972

GitHubhorizon3ai/cve-2021-21972

Proof of Concept Exploit for vCenter CVE-2021-21972

exploitationpenetration-testingred-teaming+3
2685 years ago
jscythe preview

jscythe

GitHubevilsocket/jscythe

Abuse the node.js inspector mechanism in order to force any node.js/electron/v8 based process to execute arbitrary javascript code.

exploitationpost-exploitationred-teaming+1
3332 years ago
porterminal preview

porterminal

GitHublyehe/porterminal

Quick n' dirty web/mcp terminal tunneling your phone & pc

command-and-controlpenetration-testingred-teaming+3
29811 days ago
Converto preview

Converto

GitHubdeveloperkunal/converto

Installing Kali linux on Vps Server

penetration-testingred-teamingremote-access-tool+1
1167 years ago
ReverseSocks5 preview

ReverseSocks5

GitHubacebond/reversesocks5

Single executable reverse SOCKS5 proxy written in Golang.

penetration-testingpost-exploitationred-teaming+1
15916 days ago
CVE-2019-19781 preview

CVE-2019-19781

GitHubjas502n/cve-2019-19781

Python exploit for CVE-2019-19781 targeting Citrix ADC with template injection to achieve remote code execution on vulnerable gateways.

exploitationpenetration-testingred-teaming+3
856 years ago
CVE-2019-0708-exploit preview

CVE-2019-0708-exploit

GitHubp0p0p0/cve-2019-0708-exploit

CVE-2019-0708-exploit

exploitationpenetration-testingred-teaming+2
1217 years ago
PeekABoo preview

PeekABoo

GitHubviralmaniar/peekaboo

PeekABoo tool can be used during internal penetration testing when a user needs to enable Remote Desktop on the targeted machine. It uses PowerShell…

penetration-testingpost-exploitationred-teaming+1
1457 years ago
Log4jHorizon preview

Log4jHorizon

GitHubpuzzlepeaches/log4jhorizon

Exploiting CVE-2021-44228 in VMWare Horizon for remote code execution and more.

exploitationpayload-developmentpenetration-testing+4
1204 years ago
Fortijump-Exploit-CVE-2024-47575 preview

Fortijump-Exploit-CVE-2024-47575

GitHubwatchtowrlabs/fortijump-exploit-cve-2024-47575

Fortinet Fortimanager Unauthenticated Remote Code Execution AKA FortiJump CVE-2024-47575

exploitationpenetration-testingred-teaming+3
971 year ago
php-8.1.0-dev-backdoor-rce preview

php-8.1.0-dev-backdoor-rce

GitHubflast101/php-8.1.0-dev-backdoor-rce

PHP 8.1.0-dev Backdoor System Shell Script

exploitationpenetration-testingred-teaming+2
955 years ago
CVE-2023-28231 preview

CVE-2023-28231

GitHubthehermione/cve-2023-28231

DHCP Server Remote Code Execution impact: 2008 R2 SP1 до Server 2019

exploitationpenetration-testingred-teaming+2
683 years ago
ReverseHttp preview

ReverseHttp

GitHubd4vinci/reversehttp

Python backdoor that uses http post/get requests to communicate

command-and-controlpayload-developmentpenetration-testing+3
4210 years ago
SambaHunter preview

SambaHunter

GitHubbrianwrf/sambahunter

It is a simple script to exploit RCE for Samba (CVE-2017-7494 ).

exploitationpenetration-testingred-teaming+2
584 years ago
Previous123…10Next