Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
48 results
php-8.1.0-dev-backdoor-rce preview

php-8.1.0-dev-backdoor-rce

GitHubflast101/php-8.1.0-dev-backdoor-rce

PHP 8.1.0-dev Backdoor System Shell Script

exploitationpenetration-testingred-teaming+2
95
5 years ago
ProFTPD_CVE-2015-3306 preview

ProFTPD_CVE-2015-3306

GitHub0xm4ud/proftpd_cve-2015-3306

Exploit for ProFTPD 1.3.5 CVE-2015-3306 that writes a PHP backdoor to the target webroot and spawns a reverse shell for remote code execution.

exploitationpayload-generationremote-access-tool+2
15 years ago
CVE-2023-50564 preview

CVE-2023-50564

GitHubmrterrestrial/cve-2023-50564

This script exploits the file upload feature in Pluck CMS v4.7.18 to upload a malicious PHP file, enabling remote access via a reverse shell. Once…

exploitationpayload-generationpenetration-testing+3
11 year ago
YAPS preview

YAPS

GitHubnickguitar/yaps

Yet Another PHP Shell - The most complete PHP reverse shell

command-and-controlexploitationinformation-gathering+7
834 years ago
CVE-2025-5781 preview

CVE-2025-5781

GitHubjasonbernier/cve-2025-5781

Proof-of-concept exploit for CVE-2025-57819 in FreePBX: SQL injection in the AJAX API to execute arbitrary PHP, create a persistent webshell, and…

command-and-controlexploitationpayload-development+3
1 month ago
casper-shell preview

casper-shell

GitLabr3dteam/casper-shell

Casper@shell:~# is an enhanced, more user-friendly version of p0wny shell with many new features.

data-exfiltrationpenetration-testingpersistence-mechanisms+4
9 months ago
winspy preview

winspy

GitHubcyb0r9/winspy

Generates Windows reverse shell backdoors with automatic IP poisoning, leveraging Metasploit for payload creation and Apache for delivery in…

exploit-frameworkspayload-developmentpayload-generation+2
2137 years ago
sh1mazu preview

sh1mazu

GitHubnu11secur1ty/sh1mazu

Meterpreter auto exploit program

command-and-controlexploitationpayload-generation+4
3 years ago
CVE-2021-4034 preview

CVE-2021-4034

GitHubdevianntsec/cve-2021-4034

Master's thesis research on CVE-2021-4034 (PwnKit) local privilege escalation. Multi-payload Python exploit with 7 modes including interactive shell,…

binary-exploitationeducationexploitation+7
16 months ago
wonderplugin preview

wonderplugin

GitHubzetc0de/wonderplugin

WonderCMS Plugin

exploitationvulnerability-analysisweb-application-exploitation
15 years ago
CVE-2010-2075 preview

CVE-2010-2075

GitHubrushikesh-a-bhujbal/cve-2010-2075

UnrealIRCd 3.2.8.1 backdoor exploit — reverse shell via AB; trigger, built from scratch in Python using raw sockets. No Metasploit.

educationexploitationlabs-practice+7
8 days ago
CVE-2026-5027-Langflow preview

CVE-2026-5027-Langflow

GitHublayer-6/cve-2026-5027-langflow

Multi-CVE exploit tool for pre-auth remote code execution on Ivanti Sentry and FortiSandbox. Features interactive shell, webshell deployment,…

command-and-controlexploitationpayload-development+8
3 months ago
Exploit-CVE-2011-2523 preview

Exploit-CVE-2011-2523

GitHubshubham-2k1/exploit-cve-2011-2523

Python exploit for VSFTP 2.3.4 backdoor (CVE-2011-2523) that triggers the backdoor and provides shell access on port 6200.

binary-exploitationeducationexploitation+3
2 years ago
tsh-sctp preview

tsh-sctp

GitHubinfodox/tsh-sctp

TinySHell port to SCTP

command-and-controlpayload-developmentpenetration-testing+3
12512 years ago
CVE-2011-2523 preview

CVE-2011-2523

GitHubhklabcr/cve-2011-2523

Manual and automated exploitation walkthrough for vsftpd 2.3.4 backdoor (CVE-2011-2523) with custom reverse shell payload and Metasploit integration…

ctfeducationexploitation+5
1 year ago
UnrealIRCd-3.2.8.1-Backdoor-Command-Execution preview

UnrealIRCd-3.2.8.1-Backdoor-Command-Execution

GitHubchancej715/unrealircd-3.2.8.1-backdoor-command-execution

Python exploit for UnrealIRCd 3.2.8.1 backdoor (CVE-2010-2075) delivering a reverse shell via Netcat listener.

command-and-controlexploitationpayload-development+3
3 years ago
CVE-2024-3094 preview

CVE-2024-3094

GitHubmightysai1997/cve-2024-3094

Shell scripts to detect CVE-2024-3094 backdoor in liblzma5 across Kubernetes pods and Docker containers, with SBOM generation via Trivy for…

cloud-securitycontainer-securitydevsecops+3
2 years ago
Umbra preview

Umbra

GitHubh3xduck/umbra

A LKM rootkit targeting 4.x and 5.x kernel versions which opens a backdoor that can spawn a reverse shell to a remote host, launch malware and more.

command-and-controleducationencryption-decryption-tools+6
1365 years ago
Previous123Next