Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
40 results
DbgNexum preview

DbgNexum

GitHubdis0rder0x00/dbgnexum

Shellcode injection using the Windows Debugging API

binary-exploitationexploitationpayload-development+6
182
8 months ago
Fritter preview

Fritter

GitHub0xrootpls/fritter

Polymorphic shellcode generator for in-memory execution of EXE, DLL, .NET, VBScript, and JScript with per-output and per-build randomization for…

binary-exploitationexploitationpayload-development+5
2521 month ago
CVE-2022-28368-handler preview

CVE-2022-28368-handler

GitHubthat-guy-steve/cve-2022-28368-handler

This repository contains a python script that will handle the majority of the dompdf cached font exploit (CVE-2022-28368), all you need to do is…

exploitationpayload-generationpenetration-testing+3
3 years ago
siofra preview

siofra

GitHubcybereason/siofra

Simulates the Windows PE loader to identify DLL hijacking vulnerabilities, generates weaponized DLLs with shellcode payloads, and detects UAC…

binary-analysisbinary-exploitationpayload-generation+4
5128 years ago
CVE-2023-2255 preview

CVE-2023-2255

GitHubelweth-sec/cve-2023-2255

CVE-2023-2255 Libre Office

exploitationpayload-generationshellcode-generation+2
663 years ago
CVE-2021-40444_CAB_archives preview

CVE-2021-40444_CAB_archives

GitHubkal1gh0st/cve-2021-40444_cab_archives

Custom CAB template generator for CVE-2021-40444, crafting malicious cabinet archives to exploit Windows MSHTML remote code execution via crafted…

exploitationmalware-analysispayload-generation+2
4 years ago
CVE-2021-40444 preview

CVE-2021-40444

GitHubtiagob0b/cve-2021-40444

Malicious DOCX generator exploiting CVE-2021-40444 (Microsoft Office Word RCE) with CAB-based DLL side-loading and CAB-less RAR/WSF attack chains for…

binary-exploitationexploitationpayload-generation+3
4 years ago
CVE-2019-2725 preview

CVE-2019-2725

GitHubpimps/cve-2019-2725

WebLogic Insecure Deserialization - CVE-2019-2725 payload builder & exploit

command-and-controlexploitationpayload-generation+4
526 years ago
PSForgot2kEyXCHANGE preview

PSForgot2kEyXCHANGE

GitHubjustin-p/psforgot2keyxchange

PoC for Forgot2kEyXCHANGE (CVE-2020-0688) written in PowerShell

exploitationpayload-generationpenetration-testing+3
56 years ago
KrayinCRM-RCE-Exploit-CVE-2026-38526 preview

KrayinCRM-RCE-Exploit-CVE-2026-38526

GitHubcerberusmrxi/krayincrm-rce-exploit-cve-2026-38526

CVE-2026-38526 exploit for Krayin CRM v2.2.x - Authenticated RCE via TinyMCE file upload bypass. Features interactive shell, multi-type payloads,…

exploitationpayload-generationpenetration-testing+4
31 month ago
CVE-2017-8570 preview

CVE-2017-8570

GitHubdrac0nids/cve-2017-8570

## 在kali中自动化生成cve-2017-8570的恶意ppsx文件和配置msf监听

command-and-controlexploitationpayload-generation+3
27 years ago
CVE-2021-40444 preview

CVE-2021-40444

GitHubmracumen/cve-2021-40444

Microsoft-Office-Word-MSHTML-Remote-Code-Execution-Exploit

binary-analysisexploitationmalware-analysis+3
24 years ago
OpenSTAManager_RCE_Exploit-CVE-2026-38751- preview

OpenSTAManager_RCE_Exploit-CVE-2026-38751-

GitHubhackthem/openstamanager_rce_exploit-cve-2026-38751-

OpenSTAManager RCE Exploit (CVE-2026-38751)

exploitationpayload-generationpenetration-testing+4
12 months ago
CVE-2025-3969-Exploit preview

CVE-2025-3969-Exploit

GitHubstuub/cve-2025-3969-exploit

CVE-2025-3969: Exploit PoC (OS CMD injection, Web Shell, Interactive Shell)

command-and-controlexploitationpayload-generation+3
21 year ago
CVE-2024-28397-Js2Py-RCE preview

CVE-2024-28397-Js2Py-RCE

GitHuby0naldez/cve-2024-28397-js2py-rce

Generates JavaScript payloads to exploit CVE-2024-28397 Js2Py sandbox escape, enabling remote command execution and reverse shells via Python…

command-and-controlexploitationpayload-generation+3
3 months ago
Webmin-CVE-2022-0824-Enhanced-Exploit preview

Webmin-CVE-2022-0824-Enhanced-Exploit

GitHubnudttan91/webmin-cve-2022-0824-enhanced-exploit

Python exploit for Webmin CVE-2022-0824 with dual-mode support: direct command execution and reverse shell. Features multiple payload types,…

command-and-controlexploitationpayload-generation+6
1 year ago
cve-2018-9948-9958-exp preview

cve-2018-9948-9958-exp

GitHuborangepirate/cve-2018-9948-9958-exp

a exp for cve-2018-9948/9958 , current shellcode called win-calc

exploitationpayload-generationshellcode+3
8 years ago
CVE-2014-7205 preview

CVE-2014-7205

GitHubandrewtrube/cve-2014-7205

Bassmaster Plugin NodeJS RCE

exploitationpayload-generationpenetration-testing+3
4 years ago
Previous123Next