Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

43 results

WAREED-DNS-C2

faisal-p27/wareed-dns-c2

DNS-only command-and-control framework with Windows agent, payload generation, remote shell execution, shellcode injection, and SOCKS5 proxy support…

command-and-controlids-ips-evasionpayload-development+3

148

1 year ago

chisel-ng

nullsection/chisel-ng

Chisel new generation, written in rust. SSH under WSS with some customization.

command-and-controlids-ips-evasionlateral-movement+5

1358 months ago

modsecurity-backdoor

azurit/modsecurity-backdoor

This is a proof-of-concept of malicious software running inside of ModSecurity WAF.

command-and-controlids-ips-evasionpost-exploitation+3

341 year ago

Lastenzug

ps1337/lastenzug

Socks4a proxy leveraging PIC, Websockets and static obfuscation on assembly level

ids-ips-evasionpayload-developmentpost-exploitation+3

264 years ago

Crimson-Cloak-ISH-wrapper-iOS-

synchancybersecurity/crimson-cloak-ish-wrapper-ios-

Wrapper to maximize ISH iOS app capabilities without jailbreak

ios-securitymobile-securitypenetration-testing+3

3 months ago

openssh-cve-2024-6387.sh

rumochnaya/openssh-cve-2024-6387.sh

openssh-cve-2024-6387.sh

configuration-auditingexploitationincident-response+3

12 years ago

Koi

b3rt1ng/koi

Multi-session reverse shell handler with PTY upgrade, post-exploitation modules, Layer 3 tunneling, payload obfuscation for EDR evasion, session…

command-and-controlids-ips-evasionlateral-movement+9

276 days ago

Archived

Revenant

0xtriboulet/revenant

Revenant - A 3rd party agent for Havoc that demonstrates evasion techniques in the context of a C2 framework

command-and-controlids-ips-evasionpayload-development+3

3882 years ago

metasploit-framework

rapid7/metasploit-framework

Open-source exploitation framework with modular payload, encoder, and auxiliary system for penetration testing, vulnerability validation, and…

command-and-controldatabase-securitydata-exfiltration+20

39.1k1 day ago

telegram-c2

tomiwa-ot/telegram-c2

Control a system remotely via telegram

command-and-controlinformation-gatheringpersistence-mechanisms+4

501 year ago

Remot3d

makiraid/remot3d

Remot3d: is a simple tool created for large pentesters as well as just for the pleasure of defacers to exploit a system or server that runs a PHP…

information-gatheringpayload-generationpenetration-testing+3

187 years ago

provisioner

alessandrocarminati/provisioner

Provisioning and sharing system for SBCs

embedded-systems-securityfirmware-analysishardware-iot-security+3

77 months ago

dameflare

boydhacks/dameflare

Python 3 exploit for CVE-2019-3980. Unauthenticated RCE as SYSTEM via SolarWinds Dameware MRC smart card authentication bypass.

command-and-controlexploitationids-ips-evasion+6

47 months ago

CVE-2026-54424

tomadimitrie/cve-2026-54424

Exploiting Parsec for Windows to gain SYSTEM privileges

binary-exploitationcommand-and-controlexploitation+5

3 months ago

CVE-2019-0708

barry-mccockiner/cve-2019-0708

A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker…

exploitationinformation-gatheringpenetration-testing+3

17 years ago

CVE-2024-53345

shadowbyte1/cve-2024-53345

Critical 0 Day in Car Rental Management System Versions 1.0 - 1.3

exploitationpayload-generationprivilege-escalation+3

11 year ago

Article-RegreSSHion-CVE-2024-6387

identity-threat-labs/article-regresshion-cve-2024-6387

Technical analysis and documentation of CVE-2024-6387, a critical remote code execution vulnerability in OpenSSH, detailing exploitation vectors and…

exploitationinformation-gatheringpenetration-testing+3

12 years ago

Windows-CVE-2024-38063

fredagsguf/windows-cve-2024-38063

Exploit for CVE-2024-38063, a critical RCE in Windows TCP/IP stack via crafted IPv6 packets, enabling arbitrary code execution and system compromise.

exploitationnetwork-securitypenetration-testing+2

1 year ago

Previous 123 Next