Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

271 results

mcreator

blacknbunny/mcreator

Encoded Reverse Shell Generator With Techniques To Bypass AV's

command-and-controlexploitationpayload-development+6

144

6 years ago

HintInject

frkngksl/hintinject

A PoC project for embedding shellcode to Hint/Name Table

binary-analysisexploitationpayload-development+3

1144 months ago

shellme

hatriot/shellme

Python script that wraps nasm/objdump to quickly generate shellcode bytes from assembly instructions or compiled ELF binaries, supporting multiple…

binary-exploitationexploitationpayload-development+3

1139 years ago

execute-assembly-pico

ofasgard/execute-assembly-pico

A PICO for Crystal Palace that implements CLR hosting to execute a .NET assembly in memory.

payload-developmentpenetration-testingpost-exploitation+2

1436 months ago

DataInject-BOF

iilegacyyii/datainject-bof

Hijacks code execution via overwriting Control Flow Guard pointers in combase.dll

binary-exploitationexploitationpayload-development+3

1551 year ago

asminject

bishopfox/asminject

Post-exploitation memory injector for Linux processes, bypassing ptrace to inject shellcode/payloads via /proc/pid/mem across x86-64, x86, ARM32…

container-escapepayload-developmentpenetration-testing+2

1483 years ago

VectoredOverloading

checkpointsw/vectoredoverloading

Local PE injection technique using hardware breakpoints and vectored exception handling to manipulate DLL loading and execute arbitrary payloads, as…

binary-exploitationexploitationmalware-analysis+6

1278 months ago

Rusty-Playground

blacksnufkin/rusty-playground

Some Rust program I wrote while learning Malware Development

binary-analysisexploitationmalware-analysis+6

1611 year ago

CVE-2019-0808

exodusintel/cve-2019-0808

Browser exploit chain for Chrome 72 on Windows 7 x86, combining a site-isolation bypass (CVE-2019-5786) with a Win32k sandbox escape (CVE-2019-0808)…

exploitationpayload-generationprivilege-escalation+2

907 years ago

DFShell

d3ext/dfshell

Python-based forward shell tool that creates a TTY-like interactive shell over HTTP using named pipes, enabling command execution on firewalled…

payload-generationpenetration-testingshellcode+1

1222 years ago

Exploits

forrest-orr/exploits

Windows CVE exploit collection with integrated payloads for browser-based RCE, sandbox escape, and privilege escalation.

binary-exploitationexploitationpayload-development+3

1224 years ago

wnfexec

ustayready/wnfexec

C# library for shellcode injection into Windows processes by hijacking WNF subscription callbacks, enabling stealthy code execution for red team…

binary-exploitationexploitationpayload-development+4

1106 years ago

CVE-2023-32315-Openfire-Bypass

tangxiaofeng7/cve-2023-32315-openfire-bypass

Exploit for CVE-2023-32315 Openfire authentication bypass enabling remote code execution via crafted requests and plugin upload for webshell…

exploitationpayload-generationpenetration-testing+3

1413 years ago

Pokemon-Shellcode-Loader

techryptic/pokemon-shellcode-loader

Tired of looking at hex all day and popping '\x41's? Rather look at Lugia/Charmander? I have the solution for you.

adversarial-attackpayload-developmentpayload-generation+3

1284 years ago

Lenovo-CVE-2025-8061

symeonp/lenovo-cve-2025-8061

PoC for popping a system shell against the LnvMSRIO.sys driver

binary-exploitationexploitationpayload-development+3

12610 months ago

DoubleStar

forrest-orr/doublestar

A personalized/enhanced re-creation of the Darkhotel "Double Star" APT exploit chain with a focus on Windows 8.1 and mixed with some of my own…

binary-exploitationexploitationpayload-development+4

1474 years ago

shellcode2assembly

blacknbunny/shellcode2assembly

💻 ARCH : ARM, ARM64, MIPS, PPC, X86

binary-analysispayload-generationreverse-engineering+1

868 years ago

postshell

rek7/postshell

Post-exploitation bind and backconnect shell with interactive TTY, process cloaking, anti-debugging, and automatic privilege escalation. Generates…

anti-botcommand-and-controlpayload-generation+5

816 years ago

Previous 1…456…16 Next