Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
566 results
CVE-2023-24489-ShareFile preview

CVE-2023-24489-ShareFile

GitHubadhikara13/cve-2023-24489-sharefile

This project is a Python script that exploits the CVE-2023-24489 vulnerability in ShareFile. It allows remote command execution on the target server.…

command-and-controlexploitationpenetration-testing+3
13
3 years ago
Stitch preview

Stitch

GitHubnathanlopez/stitch

Python Remote Administration Tool (RAT)

educationpassword-crackingpayload-generation+2
3.7k9 years ago
CnC-Botnet-in-Python preview

CnC-Botnet-in-Python

GitHubmarcorosa/cnc-botnet-in-python

C&C Botnet written in Python with fabric

command-and-controllateral-movementpayload-development+4
344 years ago
Eden-RAT preview

Eden-RAT

GitHubiss4cf0ng/eden-rat

An open-source Linux GUI-based Remote Access Tool developed in C# with a Python payload, intended for legitimate penetration testing and…

command-and-controlencryption-decryption-toolsexploitation+5
336 months ago
CVE-2023-38646 preview

CVE-2023-38646

GitHubkh4sh3i/cve-2023-38646

Python exploit for Metabase pre-authentication remote code execution (CVE-2023-38646) with setup-token extraction and collaborator callback for…

command-and-controlexploitationpenetration-testing+3
93 years ago
CVE-2022-45701 preview

CVE-2022-45701

GitHubgeniuszly/cve-2022-45701

it is script designed to exploit certain vulnerabilities in routers by sending payloads through SNMP (Simple Network Management Protocol). The script…

educationexploitationiot-security+6
52 years ago
CVE-2024-6387 preview

CVE-2024-6387

GitHubd0rb/cve-2024-6387

Multithreaded Python exploit for OpenSSH CVE-2024-6387 RCE vulnerability, leveraging a signal handler race condition to achieve root access on target…

educationexploitationpayload-development+3
522 years ago
CVE-2022-26134 preview

CVE-2022-26134

GitHubamoloht/cve-2022-26134

Python exploit for CVE-2022-26134, an OGNL injection in Confluence Server and Data Center, allowing unauthenticated remote code execution. Provides a…

exploitationpenetration-testingremote-access-tool+2
144 years ago
Cgi-Exploit-Jp-Shell-Upload preview

Cgi-Exploit-Jp-Shell-Upload

GitHubjenderal92/cgi-exploit-jp-shell-upload

Python 2.7

exploitationpenetration-testingremote-access-tool+1
33 months ago
Follina preview

Follina

GitHubabdulrkb/follina

Demonstration of Windows MSDT Vulnerability (CVE-2022-30190)

command-and-controleducationexploitation+4
52 years ago
Craft-CMS-Exploit preview

Craft-CMS-Exploit

GitHubdiegaccio/craft-cms-exploit

Python exploit for Craft CMS CVE-2023-41892 Remote Code Execution vulnerability, delivering a PHP reverse shell for authorized penetration testing.

exploitationpenetration-testingred-teaming+3
52 years ago
CVE-2026-42945-Reverse-Shell-POC preview

CVE-2026-42945-Reverse-Shell-POC

GitHubsec-sys/cve-2026-42945-reverse-shell-poc

Python RCE PoC with reverse-shell listener for CVE-2026-42945 (NGINX Rift)

binary-exploitationctfexploitation+6
2 months ago
js2py-Sandbox-Escape-CVE-2024-28397-RCE preview

js2py-Sandbox-Escape-CVE-2024-28397-RCE

GitHub0xdtc/js2py-sandbox-escape-cve-2024-28397-rce

Exploit scripts for CVE-2024-28397, a js2py sandbox escape that executes arbitrary Python code to spawn a reverse shell on a target endpoint.

educationexploitationpayload-generation+3
11 months ago
n8n-RCE preview

n8n-RCE

GitHubabdulrkb/n8n-rce

Proof of Concept (PoC) Script for Remote Code Execution via n8n Workflows (Based on CVE-2025-68613)

educationexploitationpenetration-testing+3
8 months ago
CiscoISE-CVE-2025-20282-POC preview

CiscoISE-CVE-2025-20282-POC

GitHubskadevare/ciscoise-cve-2025-20282-poc

Proof of concept of CVE-2025-20282, the perfect 10.

exploitationpenetration-testingprivilege-escalation+3
10 months ago
CVE-2018-10933_ssh preview

CVE-2018-10933_ssh

GitHublikekabin/cve-2018-10933_ssh

Python exploit for CVE-2018-10933 that bypasses libssh server authentication and spawns an unauthenticated shell on vulnerable SSH servers.

authentication-authorizationexploitationpenetration-testing+3
7 years ago
CVE-2024-9264-RCE-Exploit preview

CVE-2024-9264-RCE-Exploit

GitHubz3k0sec/cve-2024-9264-rce-exploit

Grafana RCE exploit (CVE-2024-9264)

educationexploitationpenetration-testing+3
381 year ago
CVE-2026-24061 preview

CVE-2026-24061

GitHubkyukazamiqq/cve-2026-24061

Multi-threaded Telnet vulnerability scanner that exploits CVE-2026-24061 via environment variable injection, verifies root access, and provides an…

educationexploitationnetwork-security+3
2 months ago
Previous1…345…32Next