Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Training labs, hands-on environments, and reproducible challenges for authorized, safe cybersecurity practice.

Kitploit recommended

Top tools

10 selected

vulhub

vulhub/vulhub

21.1k1 month ago

juice-shop

juice-shop/juice-shop

13.6k1 month ago

WebGoat

webgoat/webgoat

9.3k10h 22m ago

DVWA

digininja/dvwa

13.5k3 days ago

crAPI

owasp/crapi

1.6k1 day ago

NodeGoat

owasp/nodegoat

2.1k3 years ago

SecurityShepherd

owasp/securityshepherd

1.5k7 days ago

wrongsecrets

owasp/wrongsecrets

1.5k1 day ago

metasploitable3

rapid7/metasploitable3

5.7k1 year ago

#10

GOAD

orange-cyberdefense/goad

8.1k6 months ago

Newest Relevance Most popular Recently updated

2409 results

lazyweb

ramadhanamizudin/lazyweb

LazyWeb is a demonstration web application designed to showcase common server-side application vulnerabilities. Each vulnerability is categorized…

vulnerability-analysisweb-securitypenetration-testing+2

1281 year ago

scared

eshard/scared

Python framework for performing side-channel analysis attacks (e.g., CPA) on public datasets, designed for educational use and hands-on practice in…

cryptographyeducationlabs-practice

1141 month ago

CVE-2025-55183_POC

x-cotang/cve-2025-55183_poc

CVE-2025-55183 POC

vulnerability-analysisexploitationweb-application-exploitation+2

49 months ago

CVE-2026-60121-CVE-2026-61498

horkimhab/cve-2026-60121-cve-2026-61498

CVE-2026-60121, CVE-2026-61498 - Draft

vulnerability-scannersexploitationeducation+2

1 month ago

CVE-2026-22241

cves-labs/cve-2026-22241

Lab Environment for CVE-2026-22241

vulnerability-analysisexploitationweb-application-exploitation+3

2 months ago

vulpy

fportantier/vulpy

Vulnerable Python Application To Learn Secure Development

vulnerability-analysisweb-securitypenetration-testing+2

1285 years ago

BGGP

binarygolf/bggp

Annual small file competition repository with binary golf challenges across themes like polyglots, crashes, self-replication, and downloads,…

exploitationctfpapers-research+3

875 months ago

CVE-2021-38297

gkrishnan724/cve-2021-38297

A Proof of concept scenario for exploitation of CVE2021-38297 GO WASM buffer-overflow

vulnerability-analysisexploitationweb-application-exploitation+5

82 years ago

NextJS-CVE-2025-29927

enochgitgamefied/nextjs-cve-2025-29927

Intentionally vulnerable Next.js application demonstrating CVE-2025-29927 authentication bypass via middleware WAF evasion. Designed for security…

vulnerability-analysisweb-application-exploitationpenetration-testing+3

7 months ago

CVE-2025-55182

ya0h4cker/cve-2025-55182

Analysis, Validation Environment, and POC for CVE-225-55182 Vulnerability.

vulnerability-analysisexploitationpenetration-testing+2

8 months ago

cybersecurity-projects

osxninja/cybersecurity-projects

This repository contains the complete record of my three-year research journey, covering the project from foundational concepts to advanced-level…

web-securitynetwork-securitymalware-analysis+7

271 month ago

screenpipe

screenpipe/screenpipe

YC (S26) | Open Computer History | Record your screen continuously locally and provide context to your agents (Claude, Codex, Openclaw, Hermes,…

osintscripting-automationinformation-gathering+8

20.9k20h 34m ago

HazProne

stafordtituss/hazprone

Cloud pentesting framework deploying vulnerable-by-demand AWS resources with quest-based scenarios to teach practical penetration testing and…

vulnerability-scannerspenetration-testingcloud-security+2

404 years ago

CVE-2026-24061-setup

shivam-bathla/cve-2026-24061-setup

Docker setup for CVE-2026-24061

authentication-authorizationprivilege-escalationvulnerability-analysis+2

47 months ago

CVE-2025-32433.py

yonathanpy/cve-2025-32433.py

CVE-2025-32433 PoC – SSH Protocol Python-based PoC for controlled lab testing of SSH message handling, channel operations, and pre-auth interactions.…

vulnerability-analysisexploitationnetwork-security+3

26 months ago

Make-and-Break

rayferrufino/make-and-break

Built a custom Virtual Machine, running Ubuntu 18.04.1 and Webmin 1.810. Using CVE-2019-15107 to exploit a backdoor in the Linux machine

password-crackingreconnaissanceexploit-frameworks+6

16 years ago

CVE-2026-23631

horkimhab/cve-2026-23631

CVE-2026-23631-Draft

vulnerability-analysisexploitationctf+3

3 months ago

cve-2024-32002-poc-aw

jakob-pennington/cve-2024-32002-poc-aw

A POC for CVE-2024-32002 demonstrating arbitrary write into the .git directory.