Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

1269 results

AllHackingTools

mishakorzik/allhackingtools

All-in-One Hacking Tools For Hackers! And more hacking tools! For termux.

crawlerexploitationhash-analysis+8

6.1k

9 months ago

EQGRP

x0rz/eqgrp

Collection of leaked NSA Equation Group exploits, backdoors, and tools for post-exploitation, privilege escalation, and command-and-control across…

command-and-controldata-exfiltrationexploitation+8

4.2k9 years ago

php-reverse-shell

pentestmonkey/php-reverse-shell

PHP script that establishes a reverse shell from a target server to the attacker's machine, enabling remote command execution and post-exploitation…

exploitationpenetration-testingpost-exploitation+2

2.9k2 years ago

weevely3

epinna/weevely3

Stealthy PHP web shell for penetration testing and post-exploitation with remote shell, file operations, privilege escalation, and reconnaissance…

penetration-testingpost-exploitationprivilege-escalation+4

3.5k10 months ago

b374k

b374k/b374k

Single-file PHP webshell providing remote file management, command execution, bind/reverse shell, database connectivity, and process control for…

command-and-controldatabase-securitypenetration-testing+2

2.7k3 years ago

p0wny-shell

flozz/p0wny-shell

Single-file PHP web shell for remote command execution with file upload/download and command history, designed for penetration testing of PHP…

penetration-testingremote-access-toolweb-application-exploitation

2.9k1 year ago

PocList

1n7erface/poclist

Vulnerability-specific PoC scripts for discovering and exploiting RCE, SQLi, XXE, SSRF, and unauthorized-access flaws in enterprise web apps and…

exploitationinformation-gatheringpenetration-testing+3

1.1k3 years ago

webshells

blackarch/webshells

Curated collection of webshell scripts for web server remote access and command execution, supporting multiple languages including PHP, ASP, and JSP.

payload-generationpenetration-testingpost-exploitation+3

1.0k3 years ago

wwwolf-php-webshell

whitewinterwolf/wwwolf-php-webshell

Minimal PHP web shell with password-protected remote command execution, file upload/fetch, for penetration testing on Unix and Windows targets.

exploitationpenetration-testingpost-exploitation+2

8018 years ago

PyShell

joelgmsec/pyshell

Multi-platform Python webshell providing remote shell access on web servers with command history, file upload/download, and directory traversal…

payload-generationpenetration-testingremote-access-tool+1

31920 days ago

cve-2019-19781

trustedsec/cve-2019-19781

This is a tool published for the Citrix ADC (NetScaler) vulnerability. We are only disclosing this due to others publishing the exploit code first.

exploitationinformation-gatheringpenetration-testing+3

5736 years ago

nano

s0md3v/nano

Stealthy, code-golfed PHP webshell family with authentication support and undetectable payload delivery for remote command execution via HTTP.

command-and-controlpayload-generationpenetration-testing+3

4496 years ago

CVE-2017-12617

cyberheartmi9/cve-2017-12617

Apache Tomcat < 9.0.1 (Beta) / < 8.5.23 / < 8.0.47 / < 7.0.8 - JSP Upload Bypass / Remote Code Execution

exploitationpayload-generationpenetration-testing+3

3998 years ago

DAws

dotcppfile/daws

PHP-based web shell with automated WAF/IPS evasion, CGI shell dropping, SSH key persistence, Shellshock exploitation, XOR-encrypted communication,…

ids-ips-evasionpayload-generationpenetration-testing+6

5809 years ago

quasibot

smaash/quasibot

complex webshell manager, quasi-http botnet.

command-and-controlexploitationinformation-gathering+6

28411 years ago

mec

jm33-m0/mec

Mass exploitation console with built-in exploits, SSH brute-forcer, and multi-source host reconnaissance (ZoomEye, Censys, Baidu) for automated…

exploitationexploit-frameworksinformation-gathering+5

6154 years ago

JSshell

shelld3v/jsshell

JavaScript reverse shell for executing JS code remotely via blind XSS. Generates payloads, listens for connections, and executes commands in the…

payload-generationpenetration-testingremote-access-tool+1

6313 years ago

php-reverse-shell

ivan-sincek/php-reverse-shell

PHP shells that work on Linux OS, macOS, and Windows OS.

educationexploitationpenetration-testing+4

5725 months ago

Previous12…71 Next