Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

833 results

reverse_ssh

nhas/reverse_ssh

SSH-based reverse shell management tool with native SCP/SFTP support, multiple transport protocols, Windows DLL generation, and fileless execution…

shellcodeshellcode-generation

1.5k19 days ago

laZzzy

capt-meelo/lazzzy

Shellcode loader demonstrating multiple execution techniques including direct syscalls, IAT evasion, encrypted payloads, PPID spoofing, and code…

shellcodeshellcode-generation

5053 years ago

DllNotificationInjection

dec0ne/dllnotificationinjection

A POC of a new “threadless” process injection technique that works by utilizing the concept of DLL Notification Callbacks in local and remote…

exploitationred-teamingshellcode

4703 years ago

wshlient

gildasio/wshlient

A simple tool to interact with web shells and command injection vulnerabilities

command-and-controlpenetration-testingshellcode+1

371 year ago

CTFs

whatthefuzz-ctfs/ctfs

Educational CTF writeup repository with reproducible pwntools-based solutions covering binary exploitation, reverse engineering, shellcode, ROP, and…

binary-exploitationctfeducation+6

3 years ago

drinkme

emptymonkey/drinkme

Reads shellcode from stdin in multiple formats (hex, escaped) and executes it for quick payload testing before deployment in penetration testing…

exploitationpenetration-testingshellcode

692 years ago

Apache-GOExploiter

drcrypterdotru/apache-goexploiter

Apache (CVE-2025-24813) GOExploiter Checker & Exploiter very Fast

exploitationpenetration-testingshellcode+2

1910 months ago

CVE-2024-26581-Checker

madfxr/cve-2024-26581-checker

[CVE-2024-26581] Vulnerability Checker for BGN Internal

exploitationshellcodevulnerability-analysis+1

28 days ago

Shhhloader

icyguider/shhhloader

Syscall Shellcode Loader (Work in Progress)

shellcode

1.3k2 years ago

dlinject

davidbuchanan314/dlinject

Inject a shared library (i.e. arbitrary code) into a live linux process, without ptrace

exploitationred-teamingshellcode

8271 year ago

frostbyte

pwn1sher/frostbyte

Combines AppDomain Manager injection with shellcode embedding in signed binaries to evade EDR/AV detection for red team payloads.

shellcodeshellcode-generation

3844 years ago

acheron

f1zm0/acheron

indirect syscalls for AV/EDR evasion in Go assembly

payload-developmentred-teamingshellcode

3913 years ago

masm_shc

hasherezade/masm_shc

A helper utility for creating shellcodes. Cleans MASM file generated by MSVC, gives refactoring hints.

payload-developmentshellcodeshellcode-generation+1

1911 year ago

EATGuard

connormcgarr/eatguard

Implementation of an export address table protection mitigation, like Export Address Filtering (EAF)

binary-exploitationdefensive-toolsshellcode

1143 years ago

K55

josh0xa/k55

Linux x86_64 Process Injection Utility

exploitationred-teamingshellcode

595 years ago

TFC-Chrome-v8-bug-CVE-2021-38001-poc

maldiohead/tfc-chrome-v8-bug-cve-2021-38001-poc

Proof-of-concept exploit for CVE-2021-38001, a Chrome V8 JavaScript engine vulnerability, demonstrating remote code execution via crafted .mjs files.

binary-exploitationexploitationshellcode+2

54 years ago

CVE-2021-30632

paulsery/cve-2021-30632

Proof-of-concept exploit for CVE-2021-30632, a Chrome V8 vulnerability, demonstrating reliable shellcode execution via out-of-bounds write to achieve…

binary-exploitationexploitationshellcode+3

2 years ago

Flangvik

yaoxiaoangry3/flangvik

C# POC for CVE-2021-26855 aka ProxyLogon, supports the classically semi-interactive web shell as well as shellcode in…

exploitationpenetration-testingshellcode+2

4 years ago

Previous12…47 Next