Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
37 results
malvinci preview

malvinci

GitHubgsoffmarket/malvinci

This simple but powerful script will introduce a new type of malware that will turn off the firewall, start an HTTP server, forward its port through…

command-and-controldata-exfiltrationpayload-development+3
59
1 year ago
CVE-2026-75604-poc preview

CVE-2026-75604-poc

GitHubrafabd1/cve-2026-75604-poc

Proof-of-concept exploit for CVE-2026-75604, an unauthenticated remote code execution in Windows-hosted Next.js apps, with callback-based command…

exploitationpenetration-testingremote-access-trojan+2
33 days ago
CVE-2026-33725 preview

CVE-2026-33725

GitHubhakaioffsec/cve-2026-33725

Proof-of-concept exploit for CVE-2026-33725, achieving remote code execution and arbitrary file read via H2 JDBC INIT injection in Metabase…

exploitationpenetration-testingremote-access-trojan+2
254 months ago
CVE-2026-0770-PoC preview

CVE-2026-0770-PoC

GitHubaffix/cve-2026-0770-poc

Proof of Concept for CVE-2026-0770 - Langflow Remote Code Execution

exploitationpenetration-testingremote-access-trojan+2
66 months ago
CVE-2021-44521 preview

CVE-2021-44521

GitHubwoodenklaas/cve-2021-44521

Automated proof-of-concept exploit for CVE-2021-44521, enabling remote code execution on Apache Cassandra via user-defined functions. Executes…

exploitationpenetration-testingremote-access-trojan+2
104 years ago
CVE-2026-23744 preview

CVE-2026-23744

GitHubinzegosec/cve-2026-23744

Exploit for MCPJam Inspector <=1.4.2 that triggers remote code execution via crafted HTTP requests, enabling unauthorized installation of MCP servers…

exploitationpenetration-testingremote-access-trojan+2
15 months ago
CVE-2024-4577-Exploitation-AsyncRAT-Deployment-DFIR-Investigation preview

CVE-2024-4577-Exploitation-AsyncRAT-Deployment-DFIR-Investigation

GitHubduyduongduyduong/cve-2024-4577-exploitation-asyncrat-deployment-dfir-investigation

Investigation of CVE-2024-4577 exploitation and AsyncRAT deployment with DFIR artifacts, IoCs, and detection guidance.

command-and-controldigital-forensicsexploitation+3
14 days ago
Qakbot preview

Qakbot

GitHubpr0xylife/qakbot
command-and-controlioc-managementmalware-analysis+3
1932 years ago
PSSW100AVB preview

PSSW100AVB

GitHubtihanyin/pssw100avb

A list of useful Powershell scripts with 100% AV bypass (At the time of publication).

ai-securitycommand-and-controlids-ips-evasion+5
1.4k2 months ago
SubSeven preview

SubSeven

GitHubdarkcodersc/subseven

SubSeven Legacy Official Source Code Repository

persistence-mechanismspost-exploitationremote-access-tool+1
6542 years ago
Venom preview

Venom

GitHubidov31/venom

Venom is a library that meant to perform evasive communication using stolen browser socket

command-and-controlids-ips-evasionred-teaming+1
3972 years ago
RendezvousRAT preview

RendezvousRAT

GitHubrvrsh3ll/rendezvousrat

Self-healing RAT utilizing libp2p

command-and-controlpost-exploitationred-teaming+1
885 years ago
backdoors preview

backdoors

GitHubhackerhouse-opensource/backdoors

Tools for maintaining access to systems and proof-of-concept demonstrations.

command-and-controlpayload-developmentpersistence-mechanisms+3
1826 months ago
JSRat-Py preview

JSRat-Py

GitHubhood3drob1n/jsrat-py

This is my implementation of JSRat.ps1 in Python so you can now run the attack server from any OS instead of being limited to a Windows OS with…

command-and-controlexploitationpayload-generation+3
30110 years ago
spyrat preview

spyrat

GitHubm4sc3r4n0/spyrat

Python Remote Access Trojan

command-and-controleducationpayload-development+3
1499 years ago
XeytanWin32-RAT preview

XeytanWin32-RAT

GitHubmelardev/xeytanwin32-rat

WORK IN PROGRESS. RAT written in C++ using Win32 API

command-and-controldata-exfiltrationexploitation+8
206 years ago
Remote-Access-Trojan-Database preview

Remote-Access-Trojan-Database

GitHubrainkin1993/remote-access-trojan-database

A database of RAT collected from Internet

curated-resourceseducationforensics+3
1605 years ago
ShadowTech-Rat preview

ShadowTech-Rat

GitHubretrobyte/shadowtech-rat

An example of a remote administration tool.

command-and-controlpenetration-testingpost-exploitation+3
410 years ago
Previous123Next