Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

427 results

MsfMania

lepotekil/msfmania

Python AV Evasion Tools

binary-analysiseducationencryption-decryption-tools+9

51711 months ago

Bypass_AV

hkl1x/bypass_av

Evades AV and sandboxes on Windows using anti-sandbox checks, ntdll unhooking, dynamic API resolution, and multi-layer shellcode obfuscation…

ids-ips-evasionpayload-developmentpayload-generation+2

10811 months ago

PoC-for-CVE-2025-9074

oilseller2001/poc-for-cve-2025-9074

Proof-of-Concept exploit for CVE-2025-9074 - Unauthenticated Docker API exposure allowing arbitrary container creation and host filesystem access.

container-escapeexploitationpayload-development+3

411 months ago

Lenovo-CVE-2025-8061

symeonp/lenovo-cve-2025-8061

PoC for popping a system shell against the LnvMSRIO.sys driver

binary-exploitationexploitationpayload-development+3

12411 months ago

CVE-2007-2447

nika0x38/cve-2007-2447

A standalone Rust implementation of the CVE-2007-2447 exploit targeting Samba smbd 3.0.20-Debian.

command-and-controlexploitationpayload-development+3

1 year ago

CVE-2023-21768-DSE-Bypass

radoi-teodor/cve-2023-21768-dse-bypass

Windows kernel exploit for CVE-2023-21768 that bypasses Driver Signature Enforcement (DSE) to load unsigned drivers, enabling local privilege…

binary-exploitationexploitationpayload-development+2

1 year ago

best-CVE-2025-8088

pentestfunctions/best-cve-2025-8088

Winrar CVE exploitation before 7.13 using multiple ADS streams on a single file (Custom PDF implementation)

binary-exploitationexploitationpayload-development+4

101 year ago

DllShimmer

print3m/dllshimmer

Weaponize DLL hijacking easily. Backdoor any function in any DLL.

adversarial-attackpayload-developmentpenetration-testing+2

7511 year ago

WinRAR-CVE-2025-8088-Path-Traversal-PoC

pexlexity/winrar-cve-2025-8088-path-traversal-poc

Proof-of-Concept for CVE-2025-8088 vulnerability in WinRAR (path traversal via ADS)

binary-exploitationexploitationmalware-analysis+3

21 year ago

revshellgen

t0thkr1s/revshellgen

Reverse shell generator written in Python 3.

command-and-controlexploitationpayload-development+4

5661 year ago

CVE-2025-24813

cyglegit/cve-2025-24813

Automated exploitation toolkit for CVE-2025-24813 targeting Apache Tomcat insecure session deserialization. Features multi-target scanning, gadget…

exploitationpayload-developmentpenetration-testing+3

11 year ago

CVE-2025-29824-Exploit

afanpan/cve-2025-29824-exploit

Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

binary-exploitationexploitationmalware-analysis+6

211 year ago

BloodfangC2

zarkones/bloodfangc2

Modern PIC implant for Windows (64 & 32 bit)

adversarial-attackcommand-and-controlpayload-development+4

1041 year ago

CVE-2019-13272

josemlwdf/cve-2019-13272

This is a Python 3 version of this exploit. Hope it works!!!

binary-exploitationexploitationpayload-development+3

31 year ago

WPTaskScheduler_CVE-2024-49039

je5442804/wptaskscheduler_cve-2024-49039

WPTaskScheduler RPC Persistence & CVE-2024-49039 via Task Scheduler

exploitationpayload-developmentpersistence-mechanisms+4

1481 year ago

collateral-damage

exploits-forsale/collateral-damage

Kernel exploit for Xbox SystemOS using CVE-2024-30088

binary-exploitationexploitationhardware-iot-security+3

5281 year ago

langflow-rce-exploit

0-d3y/langflow-rce-exploit

Remote Code Execution Exploit for Langflow (CVE-2025-3248) - [ By S4Tech ]

command-and-controlexploitationpayload-development+8

71 year ago

CcmMessagingBackdoor

synacktiv/ccmmessagingbackdoor

Proof-of-concept backdoor for SCCM Management Point using rogue COM service for persistent remote command execution as SYSTEM.

command-and-controlpayload-developmentpersistence-mechanisms+3

191 year ago

Previous 1…789…24 Next