Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
155 results
CVE-2007-2447 preview

CVE-2007-2447

GitHub0xkn/cve-2007-2447

Python exploit for Samba CVE-2007-2447 username map script remote command execution, delivering a reverse shell payload to a configurable remote…

command-and-controlexploitationpenetration-testing+3
5 years ago
CVE-2019-11447_reverse_shell_upload preview

CVE-2019-11447_reverse_shell_upload

GitHubsubsting/cve-2019-11447_reverse_shell_upload

Python exploit for CVE-2019-11447 that uploads a PHP reverse shell to CuteNews 2.1.2, enabling remote command execution on vulnerable web…

exploitationpayload-generationpenetration-testing+3
2 years ago
Flangvik preview

Flangvik

GitHub1342486672/flangvik

C# POC for CVE-2021-26855 aka ProxyLogon, supports the classically semi-interactive web shell as well as shellcode in…

exploitationpayload-generationpenetration-testing+2
4 years ago
Flangvik preview

Flangvik

GitHubyaoxiaoangry3/flangvik

C# POC for CVE-2021-26855 aka ProxyLogon, supports the classically semi-interactive web shell as well as shellcode in…

exploitationpenetration-testingshellcode+2
4 years ago
avscript preview
Archived

avscript

GitHubtaviso/avscript

Avast JavaScript Interactive Shell

binary-analysisdebuggersexploitation+5
6736 years ago
Invisi-Shell preview

Invisi-Shell

GitHubomerya/invisi-shell

Hide your Powershell script in plain sight. Bypass all Powershell security features

defensive-toolsexploitationids-ips-evasion+9
1.3k7 years ago
GoPurple preview

GoPurple

GitHubsh4hin/gopurple

Yet another shellcode runner consists of different techniques for evaluating detection capabilities of endpoint security solutions

defensive-toolseducationexploitation+6
4975 years ago
CVE-2016-3714 preview

CVE-2016-3714

GitHubhood3drob1n/cve-2016-3714

ImaegMagick Code Execution (CVE-2016-3714)

exploitationpayload-developmentpenetration-testing+3
7010 years ago
MS17-010_CVE-2017-0143 preview

MS17-010_CVE-2017-0143

GitHubh3x0v3rl0rd/ms17-010_cve-2017-0143

MS17-010_CVE-2017-0143

exploitationpayload-generationpenetration-testing+3
401 year ago
CVE-2020-0022 preview

CVE-2020-0022

GitHubpolo35/cve-2020-0022

CVE-2020-0022 vulnerability exploitation on Bouygues BBox Miami (Android TV 8.0 - ARM32 Cortex A9)

android-securitybinary-exploitationbluetooth-security+5
375 years ago
gameoverlay preview

gameoverlay

GitHubollapapito/gameoverlay

CVE-2023-2640 CVE-2023-32629

binary-exploitationexploitationpenetration-testing+3
133 years ago
langflow-rce-exploit preview

langflow-rce-exploit

GitHub0-d3y/langflow-rce-exploit

Remote Code Execution Exploit for Langflow (CVE-2025-3248) - [ By S4Tech ]

command-and-controlexploitationpayload-development+8
71 year ago
CVE-2024-37032_CVE-2024-45436 preview

CVE-2024-37032_CVE-2024-45436

GitHubpankass/cve-2024-37032_cve-2024-45436

CVE-2024-45436

exploitationpayload-generationremote-access-tool+2
81 year ago
CVE-2026-2766-but-with-wasm preview

CVE-2026-2766-but-with-wasm

GitHubsneakynachos/cve-2026-2766-but-with-wasm

CVE-2026-2766, but with wasm

binary-exploitationexploitationpayload-development+2
122 days ago
Rejetto-HTTP-File-Server-HFS-2.3.x---Remote-Command-Execution preview

Rejetto-HTTP-File-Server-HFS-2.3.x---Remote-Command-Execution

GitHubrandallbanner/rejetto-http-file-server-hfs-2.3.x---remote-command-execution

CVE-2014-6287

command-and-controlexploitationpayload-generation+3
23 years ago
spring-rce-poc preview

spring-rce-poc

GitHubmarcingadz/spring-rce-poc

Testing CVE-2022-22968

exploitationpayload-generationshellcode+2
24 years ago
CVE-2025-32206 preview

CVE-2025-32206

GitHubnxploited/cve-2025-32206

WordPress Processing Projects Plugin <= 1.0.2 is vulnerable to Arbitrary File Upload

exploitationpayload-generationpenetration-testing+3
21 year ago
CVE-2024-56249 preview

CVE-2024-56249

GitHubnxploited/cve-2024-56249

WordPress WPMasterToolKit plugin <= 1.13.1 - Arbitrary File Upload vulnerability

exploitationpayload-generationpenetration-testing+4
11 year ago
Previous1…789Next