Skip to content

Tools Exploits Blog

Tools Exploits Blog

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Feeds Contact Privacy© 2026 Kitploit

Tool Directory

Categories

View all categories

Loading categories

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

114 results

Windows-Python-RAT preview

Windows-Python-RAT

the404hacking/windows-python-rat

A New Microsoft Windows Remote Administrator Tool [RAT] with Python by Sir.4m1R.

api-securitycommand-and-controlpayload-development+3

118

6 years ago

CVE-2018-10933_ssh preview

CVE-2018-10933_ssh

likekabin/cve-2018-10933_ssh

Python exploit for CVE-2018-10933 that bypasses libssh server authentication and spawns an unauthenticated shell on vulnerable SSH servers.

authentication-authorizationexploitationpenetration-testing+3

7 years ago

reinschauer preview

reinschauer

ps1337/reinschauer

it is very good

command-and-controlpost-exploitationred-teaming+2

5143 years ago

pth-toolkit preview

pth-toolkit

byt3bl33d3r/pth-toolkit

Modified version of the passing-the-hash tool collection made to work straight out of the box

lateral-movementpassword-attackspenetration-testing+2

61611 years ago

GoSH preview

GoSH

redcode-labs/gosh

Golang reverse/bind shell generator

exploitationpayload-developmentpayload-generation+4

2274 years ago

Py-RDP-Patcher preview

Py-RDP-Patcher

sp00kyskelet0n/py-rdp-patcher

Python script that patches the termsrv.dll file on Windows to enable multiple concurrent RDP sessions, supporting Windows 10 versions 1703 through…

lateral-movementpenetration-testingremote-access-tool

65 years ago

Gorsair preview

Gorsair

ullaakut/gorsair

Gorsair gives root access on remote docker containers that expose their APIs

cloud-securitycontainer-securityexploitation+6

8472 years ago

CHAOS preview

CHAOS

tiagorlampert/chaos

🔥 CHAOS is a free and open-source Remote Administration Tool that allow generate binaries to control remote operating systems.

command-and-controlpayload-generationpost-exploitation+3

2.8k1 year ago

poc-cve-2024-23897 preview

poc-cve-2024-23897

vmtyan/poc-cve-2024-23897

Proof-of-concept exploit for CVE-2024-23897 enabling remote code execution on Jenkins instances via vulnerable args4j command-line parser. Written in…

exploitationpenetration-testingred-teaming+3

22 years ago

SocksOverRDP preview

SocksOverRDP

nccgroup/socksoverrdp

Socks5/4/4a Proxy support for Remote Desktop Protocol / Terminal Services / Citrix / XenApp / XenDesktop

ids-ips-evasionlateral-movementpenetration-testing+3

1.3k3 years ago

CVE-2026-44825-Apache-Solr-Scanner preview

CVE-2026-44825-Apache-Solr-Scanner

gagaltotal/cve-2026-44825-apache-solr-scanner

Apache Solr instances that may be affected by CVE-2026-44825, related to Velocity Template Remote Code Execution (RCE) conditions.

command-and-controlexploitationpenetration-testing+3

123 months ago

CVE-2026-24061 preview

CVE-2026-24061

0x7556/cve-2026-24061

Cross-platform remote code execution exploit for GNU Inetutils telnet (versions 1.9.3 to 2.7), targeting CVE-2026-24061 with a simple command-line…

exploitationpenetration-testingremote-access-tool+2

8 months ago

pomerium preview

pomerium

pomerium/pomerium

Identity-aware reverse proxy that delivers zero-trust access to internal apps and services via context-aware policy, continuous verification, and no…

authenticationauthentication-authorizationcloud-security+6

5.0k17h 16m ago

CVE-2025-59528 preview

CVE-2025-59528

moon-harvest/cve-2025-59528

Go Proof of Concept (PoC) exploit for Flowise CustomMCP Remote Code Execution (RCE) CVE-2025-59528

exploitationpayload-developmentpenetration-testing+3

4 months ago

evil_minio preview

evil_minio

abelche/evil_minio

EXP for CVE-2023-28434 MinIO unauthorized to RCE

command-and-controlexploitationpayload-development+2

3183 years ago

smtpshell preview

smtpshell

machine1337/smtpshell

A simple Reverse Shell that can communicate through Gmail SMTP or any other SMTP to evade network restrictions

command-and-controlemail-securityred-teaming+1

82 years ago

EvilWinRM-NG preview

EvilWinRM-NG

ceald1/evilwinrm-ng

Go-based WinRM client for remote command execution and lateral movement on Windows systems during penetration tests.

exploitationpenetration-testingremote-access-tool

22 years ago

CVE-2025-8110-PoC preview

CVE-2025-8110-PoC

mananispiwpiw/cve-2025-8110-poc

One-shot exploit for Gogs symlink RCE (CVE-2025-8110) that triggers a reverse shell via a single PUT request to UpdateRepoFile.

exploitationpenetration-testingred-teaming+3

4 months ago

Previous12 3 4 5 6 7 Next