Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
291 results
pwncat preview

pwncat

GitHubcytopia/pwncat

pwncat - netcat on steroids with Firewall, IDS/IPS evasion, bind and reverse shell, self-injecting shell and port forwarding magic - and its fully…

command-and-controlids-ips-evasionlateral-movement+7
2.0k
4 years ago
CVE-2021-44731-snap-confine-SUID preview

CVE-2021-44731-snap-confine-SUID

GitHubdeeexcee-io/cve-2021-44731-snap-confine-suid

Local privilege escalation exploit for CVE-2021-44731 targeting snap-confine versions 2.54.2 and lower. Automatically detects vulnerable binaries and…

exploitationpenetration-testingpost-exploitation+3
43 years ago
CVE-2022-30525 preview

CVE-2022-30525

GitHubk0sf/cve-2022-30525

Proof-of-concept exploit for CVE-2022-30525, a remote command injection vulnerability in Zyxel firewalls, with netcat reverse shell and DNS log…

command-and-controlexploitationpenetration-testing+2
34 years ago
distccd_rce_CVE-2004-2687 preview

distccd_rce_CVE-2004-2687

GitHubmicheaol/distccd_rce_cve-2004-2687

Manual exploit script for CVE-2004-2687 (distccd RCE) that spawns a reverse shell via netcat without Metasploit, targeting remote hosts for…

command-and-controlexploitationpenetration-testing+3
5 months ago
CVE-2018-8174-exp preview

CVE-2018-8174-exp

GitHublisinan988/cve-2018-8174-exp

Python-based exploit for CVE-2018-8174 targeting Internet Explorer via crafted RTF file, enabling remote code execution with netcat reverse shell…

exploitationpayload-generationpenetration-testing+2
4 years ago
UnrealIRCd-3.2.8.1-Backdoor-Command-Execution preview

UnrealIRCd-3.2.8.1-Backdoor-Command-Execution

GitHubchancej715/unrealircd-3.2.8.1-backdoor-command-execution

Python exploit for UnrealIRCd 3.2.8.1 backdoor (CVE-2010-2075) delivering a reverse shell via Netcat listener.

command-and-controlexploitationpayload-development+3
3 years ago
CVE-2007-2447 preview

CVE-2007-2447

GitHubfoudadev/cve-2007-2447

Educational exploit implementation for CVE-2007-2447 Samba 3.0.20-3.0.25rc username map script command execution vulnerability with Python SMB client…

binary-exploitationcommand-and-controleducation+6
2 years ago
WBCE-v1.6.3-Authenticated-RCE preview

WBCE-v1.6.3-Authenticated-RCE

GitHubswammers8/wbce-v1.6.3-authenticated-rce

Authenticated RCE exploit for WBCE CMS <= 1.6.3 that creates a malicious module zip with a PHP reverse shell and netcat listener.

exploitationpayload-generationremote-access-tool+1
1 year ago
CVE-2012-2982 preview

CVE-2012-2982

GitHub0xtas/cve-2012-2982

Exploits CVE-2012-2982 in Webmin with a Rust PoC that delivers a configurable TCP reverse shell and optional Netcat listener.

educationexploitationlabs-practice+3
33 years ago
CVE-2023-422-Chamilo-LMS-RCE preview

CVE-2023-422-Chamilo-LMS-RCE

GitHubhhesenjan/cve-2023-422-chamilo-lms-rce

Python exploit for CVE-2023-4220 in Chamilo LMS that uploads a file and delivers an unauthenticated reverse shell to a netcat listener.

exploitationpayload-developmentpenetration-testing+3
2 years ago
xc preview

xc

GitHubxct/xc

A small reverse shell for Linux & Windows

command-and-controlpayload-generationpenetration-testing+3
6474 years ago
CVE-2026-33017 preview

CVE-2026-33017

GitHuboieua/cve-2026-33017

Bash proof-of-concept exploit for CVE-2026-33017 in Langflow, triggering a reverse shell callback to a netcat listener.

exploitationpayload-developmentpenetration-testing+2
1 month ago
CVE-2007-2447 preview

CVE-2007-2447

GitHubh3x0v3rl0rd/cve-2007-2447

Python exploit for CVE-2007-2447 targeting Samba smbd 3.0.20-Debian with reverse shell payload delivery via Netcat listener.

command-and-controlexploitationpenetration-testing+2
51 year ago
CVE-2018-16167 preview

CVE-2018-16167

GitHubdnr6419/cve-2018-16167

Proof-of-concept exploit for LogonTracer v1.2.0 remote code execution vulnerability, providing a reverse shell via Python and netcat.

exploitationpenetration-testingremote-access-tool+2
5 years ago
CVE-2025-32433-exploit preview

CVE-2025-32433-exploit

GitHubl1nuxkid/cve-2025-32433-exploit

Python-based exploit for CVE-2025-32433 with netcat listener integration for remote shell access and payload delivery.

command-and-controlexploitationpayload-development+3
11 months ago
poc-redis preview

poc-redis

GitHubrop4sh/poc-redis

Proof-of-concept exploit for a Redis vulnerability that spawns a reverse shell, with setup instructions for Docker and netcat listener.

exploitationpenetration-testingred-teaming+2
182 years ago
Prestashop-CVE-2024-34716 preview

Prestashop-CVE-2024-34716

GitHub0xdtc/prestashop-cve-2024-34716

Automates a CSRF attack against CVE-2024-34716 to deploy a PHP reverse shell on PrestaShop, with automated payload packaging and Netcat listener…

exploitationpayload-generationpenetration-testing+3
11 year ago
CVE-2026-23744 preview

CVE-2026-23744

GitHubahmadf77/cve-2026-23744

Python exploit script for CVE-2026-23744 that delivers a reverse shell to a specified target URL, requiring a netcat listener for command-and-control.

command-and-controlexploitationpayload-development+3
6 months ago
Previous12…17Next