Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems Security
General Purpose Utilities
Indicator of Compromise (IOC) Management
OSINT (Open Source Intelligence)
Packet Sniffing & Analysis
Password Cracking
Penetration Testing Frameworks
Phishing Tools
Privilege Escalation
Reconnaissance
Static Analysis
Vulnerability Scanners
Web Vulnerability Scanners
Wi-Fi Auditing
Bluetooth Security
Container Security
Dynamic Analysis (Sandboxing)
Encryption/Decryption Tools
Exploit Frameworks
Identity Management
iOS Security
IoT Security
Memory Forensics
Network Mapping
OSINT for Social Engineering
Password Attacks
Payload Generation
Persistence Mechanisms
Port Scanning
Static Code Analysis (SAST)
Threat Feeds & Aggregators
Vulnerability Analysis
Web Proxies & Interception
Code Analysis
DNS & Subdomain Enumeration
Dynamic Code Analysis (DAST)
Exploitation
Hash Analysis
IDS/IPS Evasion
Impersonation Tools
Lateral Movement
Mobile App Pentesting
Network Forensics
Reverse Engineering
RFID/NFC Tools
SCADA/ICS Security
Scripting & Automation
Serverless Security
Shellcode
Web Application Exploitation
API Security Testing
Configuration Auditing
Data Exfiltration
Debuggers
Forensics
Information Gathering
Mobile Forensics
Network Access Control
Post-Exploitation
Security Virtualization
Phishing
WAF Bypass
Web Security
Fuzzing
Network Security
Steganography
Wireless Security
Data Recovery
Malware Analysis
Digital Forensics
Hardware Hacking
Cryptography
CTF
Penetration Testing
Cloud Security
DevSecOps
Mobile Security
Privacy
Command and Control
Social Engineering
Hardware Security
Utilities & Frameworks
Hardware & IoT Security
Secret Detection
Binary Analysis
Threat Intelligence
Identity & Access Management (IAM)
Supply Chain Security
Authentication
Machine Learning
Intrusion Detection
Papers & Research
Misconfiguration
Subdomain Enumeration
Email Harvesting
Learning & Education
AI-Assisted Reversing
DNS Fuzzing
Red Teaming
Incident Response
Crawler
Curated Resources
Remote Access Tool
Shellcode Generation
Payload Development
Remote Access Trojan
API Security
Anti-Bot
Fingerprint Spoofing
CAPTCHA Bypass
Email Security
DNS Analysis
Chaos Engineering
Learning Paths & Courses
Container Escape
AI Security
Database Security
Firmware Analysis
Anomaly Detection
Log Analysis
Adversarial Attack
Binary Exploitation
Labs & Practice
NewestRelevanceMost popularRecently updated
18 results
poc-CVE-2026-64638- preview

poc-CVE-2026-64638-

GitHubmohwahyudi/poc-cve-2026-64638-

PoC exploit chain for WordPress pre-auth XSS to RCE via DOM clobbering, REST JSONP/SOME, and plugin upload, with Docker lab verification and…

exploitationpayload-generationpenetration-testing+5
16 days ago
ImgBackdoor preview

ImgBackdoor

GitHubtsuyoken/imgbackdoor

Builds a trojanized .jpg.exe agent that downloads and executes a user-supplied PowerShell, Batch, or Metasploit payload, then opens a Meterpreter…

command-and-controlexploitationpayload-development+3
3944 years ago
IconJector preview

IconJector

GitHubd419h/iconjector

Inject DLLs into the explorer process using icons

adversarial-attackexploitationpayload-development+3
4161 year ago
Jasmin-Ransomware preview

Jasmin-Ransomware

GitHubcodesiddhant/jasmin-ransomware

Red team ransomware simulator with custom payload generation, centralized C2 dashboard, and file encryption/decryption for penetration testing.

command-and-controlencryption-decryption-toolsexploitation+5
2875 years ago
CVE-2023-52076-PoC preview

CVE-2023-52076-PoC

GitHubgroppoxx/cve-2023-52076-poc

PoC exploit for CVE-2023-52076 - zip-slip path traversal in Atril/Xreader (MATE/Cinnamon) enabling arbitrary file write and RCE via crafted EPUB.…

binary-exploitationexploitationpayload-generation+3
329 days ago
C2 preview

C2

GitHubet0x/c2

Generate C2 payloads embedded in favicon files, executed via PowerShell for covert command-and-control operations.

command-and-controlpayload-developmentpayload-generation+3
2111 years ago
ChromeAlone preview

ChromeAlone

GitHubpraetorian-inc/chromealone

A tool to transform Chromium browsers into a C2 Implant

command-and-controlpayload-developmentpersistence-mechanisms+6
60110 months ago
evil-winrar preview

evil-winrar

GitHubyoumulijiang/evil-winrar

Automated framework for CVE-2023-38831 exploitation with payload generation, email delivery, and download link creation for social engineering…

exploitationpayload-generationphishing-tools+3
102 years ago
WhatsRCE preview

WhatsRCE

GitHubjasonjerry/whatsrce

This is a Automated Generate Payload for CVE-2019-11932 (WhatsApp Remote Code Execution)

exploitationmobile-securitypayload-generation+3
46 years ago
CVE-2025-1015 preview

CVE-2025-1015

GitHubr3m0t3nu11/cve-2025-1015

Proof-of-concept exploit for CVE-2025-1015 demonstrating unsanitized URI fields in Thunderbird Address Book leading to unprivileged JavaScript…

exploitationpayload-generationphishing-tools+3
31 year ago
MacroShop preview

MacroShop

GitHubkhr0x40sh/macroshop

Scripts for generating Office macro payloads to deliver executables and PowerShell commands, aiding in red team engagements and phishing simulations.

payload-developmentpayload-generationpenetration-testing+2
40810 years ago
EmbedInHTML preview

EmbedInHTML

GitHubarno0x/embedinhtml

Encrypts and embeds any file into an HTML page with automatic decryption and download simulation for social engineering and payload delivery.

payload-generationphishing-toolssocial-engineering+1
4908 years ago
FakeImageExploiter preview

FakeImageExploiter

GitHubr00t-3xp10it/fakeimageexploiter

Use a Fake image.jpg to exploit targets (hide known file extensions)

command-and-controlexploitationpayload-development+5
9461 year ago
Camelishing preview

Camelishing

GitHubazizaltuntas/camelishing

Social engineering toolkit for bulk phishing campaigns with macro-based payload generation, email tracking, and automated agent deployment for…

email-harvestingpayload-generationphishing+1
1898 years ago
Fudge preview

Fudge

GitHubdale-ruane/fudge

Encodes binary implants into HTML files for phishing delivery, decoding and dropping the payload when the target opens the file. Supports custom…

payload-generationphishingred-teaming+1
646 years ago
XLL_Phishing preview

XLL_Phishing

GitHuboctoberfest7/xll_phishing

C-based XLL payload development for phishing campaigns, with techniques for delivery via ZIP containers, self-deletion, and evasion of AV/EDR and…

defensive-toolsexploitationpayload-development+7
4404 years ago
boobsnail preview

boobsnail

GitHubstmcyber/boobsnail

Generate obfuscated Excel 4.0 XLM macros for red team operations and blue team analysis, with support for multiple infection techniques, formula…

payload-generationpenetration-testingphishing-tools+2
2561 year ago
pickl3 preview
Archived

pickl3

GitHubhlldz/pickl3

Windows active user credential phishing tool

payload-generationpenetration-testingphishing+2
2856 years ago