Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems Security
General Purpose Utilities
Indicator of Compromise (IOC) Management
OSINT (Open Source Intelligence)
Packet Sniffing & Analysis
Password Cracking
Penetration Testing Frameworks
Phishing Tools
Privilege Escalation
Reconnaissance
Static Analysis
Vulnerability Scanners
Web Vulnerability Scanners
Wi-Fi Auditing
Bluetooth Security
Container Security
Dynamic Analysis (Sandboxing)
Encryption/Decryption Tools
Exploit Frameworks
Identity Management
iOS Security
IoT Security
Memory Forensics
Network Mapping
OSINT for Social Engineering
Password Attacks
Payload Generation
Persistence Mechanisms
Port Scanning
Static Code Analysis (SAST)
Threat Feeds & Aggregators
Vulnerability Analysis
Web Proxies & Interception
Code Analysis
DNS & Subdomain Enumeration
Dynamic Code Analysis (DAST)
Exploitation
Hash Analysis
IDS/IPS Evasion
Impersonation Tools
Lateral Movement
Mobile App Pentesting
Network Forensics
Reverse Engineering
RFID/NFC Tools
SCADA/ICS Security
Scripting & Automation
Serverless Security
Shellcode
Web Application Exploitation
API Security Testing
Configuration Auditing
Data Exfiltration
Debuggers
Forensics
Information Gathering
Mobile Forensics
Network Access Control
Post-Exploitation
Security Virtualization
Phishing
WAF Bypass
Web Security
Fuzzing
Network Security
Steganography
Wireless Security
Data Recovery
Malware Analysis
Digital Forensics
Hardware Hacking
Cryptography
CTF
Penetration Testing
Cloud Security
DevSecOps
Mobile Security
Privacy
Command and Control
Social Engineering
Hardware Security
Utilities & Frameworks
Hardware & IoT Security
Secret Detection
Binary Analysis
Threat Intelligence
Identity & Access Management (IAM)
Supply Chain Security
Authentication
Machine Learning
Intrusion Detection
Papers & Research
Misconfiguration
Subdomain Enumeration
Email Harvesting
Learning & Education
AI-Assisted Reversing
DNS Fuzzing
Red Teaming
Incident Response
Crawler
Curated Resources
Remote Access Tool
Shellcode Generation
Payload Development
Remote Access Trojan
API Security
Anti-Bot
Fingerprint Spoofing
CAPTCHA Bypass
Email Security
DNS Analysis
Chaos Engineering
Learning Paths & Courses
Container Escape
AI Security
Database Security
Firmware Analysis
Anomaly Detection
Log Analysis
Adversarial Attack
Binary Exploitation
Labs & Practice
NewestRelevanceMost popularRecently updated
27 results
ImgBackdoor preview

ImgBackdoor

GitHubtsuyoken/imgbackdoor

Builds a trojanized .jpg.exe agent that downloads and executes a user-supplied PowerShell, Batch, or Metasploit payload, then opens a Meterpreter…

command-and-controlexploitationpayload-development+3
3944 years ago
Coldroot preview

Coldroot

GitHubxlinshan/coldroot

Pascal-based macOS RAT with TCP command-and-control, custom payload bundling, and remote access capabilities for penetration testing and red team…

command-and-controlexploitationpayload-development+4
8910 years ago
backcookie preview

backcookie

GitHubjofpin/backcookie

PHP backdoor that receives commands via HTTP cookie, providing remote shell access to compromised web servers with custom command support.

command-and-controlpayload-generationpenetration-testing+3
649 years ago
SillyRAT preview

SillyRAT

GitHubhash3lizer/sillyrat

A Python based RAT 🐀 (Remote Access Trojan) for getting reverse shell 🖥️

command-and-controlpayload-generationpost-exploitation+1
9383 years ago
webshell preview

webshell

GitHubtennc/webshell

Collects webshell payloads in ASP, ASPX, PHP, JSP, JSPX, Python, and Perl for web application security testing, red-team operations, and payload…

curated-resourcespayload-developmentpenetration-testing+4
10.8k1 year ago
CHAOS preview

CHAOS

GitHubtiagorlampert/chaos

🔥 CHAOS is a free and open-source Remote Administration Tool that allow generate binaries to control remote operating systems.

command-and-controlpayload-generationpost-exploitation+3
2.8k1 year ago
Heroinn preview

Heroinn

GitHubb23r0/heroinn

A cross platform C2/post-exploitation framework.

command-and-controlpayload-developmentpenetration-testing-frameworks+4
7103 years ago
PyIris preview

PyIris

GitHubnot-sekiun/pyiris

PyIris is a modular remote access trojan toolkit written in python targeting Windows and Linux systems.

command-and-controlexploitationpayload-generation+4
3275 days ago
JSRat-Py preview

JSRat-Py

GitHubhood3drob1n/jsrat-py

This is my implementation of JSRat.ps1 in Python so you can now run the attack server from any OS instead of being limited to a Windows OS with…

command-and-controlexploitationpayload-generation+3
30110 years ago
backdoors preview

backdoors

GitHubhackerhouse-opensource/backdoors

Tools for maintaining access to systems and proof-of-concept demonstrations.

command-and-controlpayload-developmentpersistence-mechanisms+3
1826 months ago
Windows-Python-RAT preview

Windows-Python-RAT

GitHubthe404hacking/windows-python-rat

A New Microsoft Windows Remote Administrator Tool [RAT] with Python by Sir.4m1R.

api-securitycommand-and-controlpayload-development+3
1176 years ago
pyFUD preview

pyFUD

GitHubmachine1337/pyfud

CROSS PLATFORM REMOTE ACCESS TROJAN (RAT)

command-and-controlpayload-generationpersistence-mechanisms+3
12011 months ago
RevengeRAT-Stub-CSsharp preview

RevengeRAT-Stub-CSsharp

GitHubnyan-x-cat/revengerat-stub-cssharp

C# stub for RevengeRAT remote access trojan, providing backdoor payload generation and command-and-control client functionality for Windows systems.

command-and-controlexploitationmalware-analysis+3
926 years ago
Reverse_HTTPS_Bot preview

Reverse_HTTPS_Bot

GitHubahhh/reverse_https_bot

A python based https remote access trojan for penetration testing

command-and-controlpayload-developmentpenetration-testing+3
8410 years ago
BloodfangC2 preview

BloodfangC2

GitHubzarkones/bloodfangc2

Modern PIC implant for Windows (64 & 32 bit)

adversarial-attackcommand-and-controlpayload-development+4
1051 year ago
NTP_Trojan preview

NTP_Trojan

GitHubahhh/ntp_trojan

Reverse NTP remote access trojan in python, for penetration testers

command-and-controlpayload-developmentpenetration-testing+3
6210 years ago
njRAT-0.7d-Stub-CSharp preview

njRAT-0.7d-Stub-CSharp

GitHubnyan-x-cat/njrat-0.7d-stub-csharp

C# stub for njRAT remote access trojan, fixed for PowerShell compatibility. Enables remote control, command execution, and persistence on compromised…

command-and-controlexploitationpayload-generation+5
566 years ago
Gh0st-light preview

Gh0st-light

GitHubholmesian/gh0st-light

Streamlined remote access trojan (RAT) based on Gh0st 3.6, providing covert C2 communication, file management, screen capture, and system control for…

command-and-controlpayload-developmentpenetration-testing+3
3510 years ago
Previous12Next