Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools for assessing, testing, and securing cloud environments (AWS, Azure, GCP) and their services.

Kitploit recommended

Top tools

10 selected

prowler

prowler-cloud/prowler

14.3k6h 15m ago

ScoutSuite

nccgroup/scoutsuite

7.8k2 years ago

trivy

aquasecurity/trivy

37.4k7h 19m ago

checkov

bridgecrewio/checkov

8.9k18h 35m ago

cloud-custodian

cloud-custodian/cloud-custodian

6.0k21h 23m ago

pacu

rhinosecuritylabs/pacu

5.3k5 months ago

cloudfox

bishopfox/cloudfox

2.6k21 days ago

cloudmapper

duo-labs/cloudmapper

6.3k2 years ago

cloudsplaining

salesforce/cloudsplaining

2.2k1 day ago

#10

PMapper

nccgroup/pmapper

1.6k4 years ago

Newest Relevance Most popular Recently updated

1893 results

practice-22-23

lacinquette/practice-22-23

CVE-2017-9608 analysis

container-securityvulnerability-analysisexploitation+3

3 years ago

regreSSHion

vkaushik-chef/regresshion

Chef Inspec profile for checking regreSSHion vulnerability CVE-2024-6387

vulnerability-scannersconfiguration-auditingcloud-security+1

2 years ago

CVE-2019-5736

geropl/cve-2019-5736

Proof-of-concept exploit for CVE-2019-5736, a container escape vulnerability in runC that allows overwriting the host runC binary to gain root access…

privilege-escalationcontainer-securityvulnerability-analysis+2

6 years ago

InfraTest

roy-aladin/infratest

DO NOT FORK, DEPLOY, OR USE FOR ANYTHING BUT LEARNING. These requirements are vulnerable to CVE-2024-39689

vulnerability-analysisconfiguration-auditingcloud-security+2

2 years ago

aws-log4j-mitigations

markuman/aws-log4j-mitigations

CVE-2021-44228 log4j mitigation using aws wafv2 with ansible

vulnerability-scannersscripting-automationconfiguration-auditing+3

4 years ago

cve-2021-44228

didoatanasov/cve-2021-44228

Ansible playbook that applies a global JVM environment variable to mitigate the Log4j CVE-2021-44228 remote code execution vulnerability across all…

vulnerability-analysisconfiguration-auditingcloud-security+1

4 years ago

polkit_CVE-2021-4034

ziadsaleemi/polkit_cve-2021-4034

Ansible role to patch RHSB-2022-001 Polkit Privilege Escalation - (CVE-2021-4034)

cloud-infrastructure-securityvulnerability-analysisconfiguration-auditing+1

4 years ago

CVE-2024-24760

killerbees19/cve-2024-24760

mailcow: Docker Container Exposure to Local Network

container-securityvulnerability-analysisnetwork-security+2

2 years ago

MinIO_CVE-2023-28432_EXP

china-china/minio_cve-2023-28432_exp

Exploit for MinIO information disclosure vulnerability CVE-2023-28432, allowing unauthorized access to sensitive environment variables.

vulnerability-analysisexploitationinformation-gathering+2

3 years ago

ghostbusters15

f88/ghostbusters15

Playbooks 'Fix for CVE-2015-0235(GHOST)' running on Ansible

vulnerability-analysisscripting-automationconfiguration-auditing+2

10 years ago

cloudfoundry_uaa

shanika04/cloudfoundry_uaa

CVE-2016-4468

authentication-authorizationcloud-infrastructure-securitycloud-security+3

5 years ago

Intel-CVE-2018-3639-Mitigation_RegistryUpdate

malindarathnayake/intel-cve-2018-3639-mitigation_registryupdate

PowerShell script to apply Windows registry mitigation for CVE-2018-3639 (Speculative Store Bypass), enabling automated security hardening against…

cloud-infrastructure-securityvulnerability-analysisscripting-automation+2

8 years ago

cve

crazycatmyopic/cve

Reproducible example demonstrating CVE-2024-26308 vulnerability detection during Docker builds, with Maven dependency tree analysis and remediation…

container-securityvulnerability-analysiscode-analysis+2

2 years ago

CVE-2024-6387-Mitigation

zenzue/cve-2024-6387-mitigation

Mitigation Guide for CVE-2024-6387 in OpenSSH

vulnerability-analysisconfiguration-auditingnetwork-security+3

2 years ago

update-apt-package

atilacastro/update-apt-package

Playbook update APT package because CVE-2019-3462

cloud-infrastructure-securityvulnerability-scannersvulnerability-analysis+3

7 years ago

SpringCloud

corgizz/springcloud

Spring Cloud Config CVE-2019-3799|CVE_2020_5410 漏洞检测

vulnerability-scannersexploitationapi-security-testing+3

4 years ago

CVE-2025-29810-check

aleongx/cve-2025-29810-check

Para verificar si tu entorno podría ser vulnerable al CVE-2025-29810, necesitamos hacer algunas comprobaciones básicas, como: Versión del sistema…

vulnerability-scannersvulnerability-analysisconfiguration-auditing+2

1 year ago

kubernetes-client__java_CVE-2020-8570_client-java-parent-9_0_2_fixed

shoucheng3/kubernetes-client__java_cve-2020-8570_client-java-parent-9_0_2_fixed

Java client library for the Kubernetes API, enabling programmatic management of clusters, pods, deployments, and other resources with support for…

authentication-authorizationcloud-infrastructure-securitygeneral-purpose-utilities+3

9 months ago

Previous 1…9899100 Next

Cloud Security

Top tools

prowler

ScoutSuite

trivy

checkov

cloud-custodian

pacu

cloudfox

cloudmapper

cloudsplaining

PMapper

practice-22-23

regreSSHion

CVE-2019-5736

InfraTest

aws-log4j-mitigations

cve-2021-44228

polkit_CVE-2021-4034

CVE-2024-24760

MinIO_CVE-2023-28432_EXP

ghostbusters15

cloudfoundry_uaa

Intel-CVE-2018-3639-Mitigation_RegistryUpdate

cve

CVE-2024-6387-Mitigation

update-apt-package

SpringCloud

CVE-2025-29810-check

kubernetes-client__java_CVE-2020-8570_client-java-parent-9_0_2_fixed