Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
119 results
hfs-cve-2014-6287-exploit preview

hfs-cve-2014-6287-exploit

GitHubfrancescobrina/hfs-cve-2014-6287-exploit

Python-based exploit for CVE-2014-6287 in HTTP File Server 2.3.x, delivering a reverse shell via Base64-encoded PowerShell payload for authorized…

command-and-controleducationexploitation+5
1 year ago
php-reverse-shell preview

php-reverse-shell

GitHubh3x0v3rl0rd/php-reverse-shell

PHP reverse shell script for establishing a remote TCP connection, enabling command execution on a target web server.

penetration-testingpost-exploitationred-teaming+2
5 years ago
BrainDamage preview
Archived

BrainDamage

GitHubmehulj94/braindamage

Remote administration service which uses twitter as a command and control server

command-and-controldata-exfiltrationinformation-gathering+5
7145 years ago
msf-remote-console preview
Archived

msf-remote-console

GitHubqubasa/msf-remote-console

A remote msfconsole written in Python 2.7 to connect to the msfrcpd server of metasploit. This tool gives you the ability to load modules permanently…

command-and-controlexploit-frameworkspayload-development+3
578 years ago
telegram-c2 preview

telegram-c2

GitHubtomiwa-ot/telegram-c2

Control a system remotely via telegram

command-and-controlinformation-gatheringpersistence-mechanisms+4
501 year ago
iodine preview

iodine

GitHubyarrick/iodine

Tunnel IPv4 data through DNS servers to bypass firewall restrictions and provide covert network access for penetration testing.

command-and-controldata-exfiltrationids-ips-evasion+4
8.0k11 days ago
byob preview

byob

GitHubmalwaredllc/byob

An open-source post-exploitation framework for students, researchers and developers.

command-and-controleducationpacket-sniffing-analysis+6
9.5k2 years ago
rdpy preview

rdpy

GitHubcitronneur/rdpy

Remote Desktop Protocol in Twisted Python

network-securitypenetration-testingred-teaming+1
1.7k6 years ago
GTRS preview

GTRS

GitHubmthbernardes/gtrs

GTRS - Google Translator Reverse Shell

command-and-controldata-exfiltrationids-ips-evasion+2
6242 years ago
BlackHole preview

BlackHole

GitHubhussein-aitlahcen/blackhole

C# RAT (Remote Administration Tool)

command-and-controleducationpayload-development+5
3029 years ago
poet preview

poet

GitHubofflinemark/poet

[unmaintained] Post-exploitation tool

command-and-controldata-exfiltrationpayload-generation+4
18110 years ago
n00bRAT preview

n00bRAT

GitHubabhishekkr/n00brat

Remote Administration Toolkit (or Trojan) for POSiX (Linux/Unix) system working as a Web Service

command-and-controleducationfingerprint-spoofing+5
1767 years ago
ZeroRAT preview

ZeroRAT

GitHub5alt/zerorat

ZeroRAT是一款windows上的一句话远控

command-and-controldata-exfiltrationexploitation+9
6410 years ago
mediator preview

mediator

GitHublawndoc/mediator

An extensible, end-to-end encrypted reverse shell that works across networks without port forwarding.

command-and-controlencryption-decryption-toolsincident-response+5
1002 years ago
R2Socks preview

R2Socks

GitHubivancabrera02/r2socks

SOCKS5 proxy tunneled through Cloudflare R2 object storage, with Python and dependency-free C++ agents relaying TCP traffic via encrypted R2 objects…

command-and-controldata-exfiltrationencryption-decryption-tools+5
391 month ago
CVE-2022-26134 preview

CVE-2022-26134

GitHubhev0x/cve-2022-26134

Confluence Pre-Auth Remote Code Execution via OGNL Injection (CVE-2022-26134)

command-and-controlexploitationpenetration-testing+3
444 years ago
CVE-2021-21972 preview

CVE-2021-21972

GitHubmilo2012/cve-2021-21972

CVE-2021-21972

command-and-controlexploitationpenetration-testing+3
335 years ago
shepard preview

shepard

GitHubd3adzo/shepard

In progress persistent download/upload/execution tool using Windows BITS.

command-and-controldata-exfiltrationpersistence-mechanisms+3
415 years ago
Previous1234567Next