Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Categories

Labs & Practice

Training labs, hands-on environments, and reproducible challenges for authorized, safe cybersecurity practice.

Kitploit recommended

Top tools

10 selected
vulhub preview#1

vulhub

GitHubvulhub/vulhub
21.1k1 month ago
juice-shop preview#2

juice-shop

GitHubjuice-shop/juice-shop
13.6k1 month ago
WebGoat preview#3

WebGoat

GitHubwebgoat/webgoat
9.3k1 day ago
DVWA preview#4

DVWA

GitHubdigininja/dvwa
13.5k4 days ago
crAPI preview#5

crAPI

GitHubowasp/crapi
1.6k2 days ago
NodeGoat preview#6

NodeGoat

GitHubowasp/nodegoat
2.1k3 years ago
SecurityShepherd preview#7

SecurityShepherd

GitHubowasp/securityshepherd
1.5k8 days ago
wrongsecrets preview#8

wrongsecrets

GitHubowasp/wrongsecrets
1.5k2 days ago
metasploitable3 preview#9

metasploitable3

GitHubrapid7/metasploitable3
5.7k1 year ago
GOAD preview#10

GOAD

GitHuborange-cyberdefense/goad
8.1k6 months ago
NewestRelevanceMost popularRecently updated
2410 results
opsxcq-cve-2016-10033 preview

opsxcq-cve-2016-10033

GitHubawidardi/opsxcq-cve-2016-10033

To solve CTFS.me problem

vulnerability-analysisexploitationweb-application-exploitation+5
18 years ago
Next.js_exploit_CVE-2024-34351 preview

Next.js_exploit_CVE-2024-34351

GitHubavergnaud/next.js_exploit_cve-2024-34351

Educational demo of a Server-Side Request Forgery (SSRF) vulnerability in Next.js (CVE-2024-34351), with step-by-step exploitation and mitigation…

vulnerability-analysisweb-application-exploitationweb-security+2
12 years ago
notepad-v8.8.1-LPE-CVE- preview

notepad-v8.8.1-LPE-CVE-

GitHubassad12341/notepad-v8.8.1-lpe-cve-

CVE-2025-49144 * Notepad++ v8.8.1 * SYSTEM-level POC

privilege-escalationvulnerability-analysisexploitation+4
1 year ago
CVE-2021-41773-POC preview

CVE-2021-41773-POC

GitHubashique-thaha/cve-2021-41773-poc

The POC and Lab setup documentation of CVE 2021 41773

vulnerability-analysisexploitationweb-application-exploitation+3
1 year ago
CVE-2023-22809 preview

CVE-2023-22809

GitHubasepsaepdin/cve-2023-22809

Automated local privilege escalation exploit for CVE-2023-22809 (sudoedit -e) that checks sudo permissions and modifies sudoers to gain a root shell.…

privilege-escalationvulnerability-analysisexploitation+3
63 years ago
CVE-2021-42013 preview

CVE-2021-42013

GitHubasepsaepdin/cve-2021-42013

Exploit for Apache 2.4.49/2.4.50 path traversal and RCE (CVE-2021-42013). Includes Docker setup and script to test path traversal, execute commands,…

vulnerability-analysisexploitationweb-application-exploitation+3
1 year ago
CVE-2021-3560 preview

CVE-2021-3560

GitHubasepsaepdin/cve-2021-3560

Proof-of-concept exploit for CVE-2021-3560, a Polkit local privilege escalation vulnerability, allowing unprivileged users to gain root access.…

privilege-escalationvulnerability-analysisexploitation+3
3 years ago
CVE-2020-0796 preview

CVE-2020-0796

GitHubarzuozkan/cve-2020-0796

CVE-2020-0796 explanation and researching vulnerability for term porject CENG325

payload-generationvulnerability-analysisexploitation+3
14 years ago
CVE-2023-30212-POC preview

CVE-2023-30212-POC

GitHubarunsnap/cve-2023-30212-poc

Proof-of-concept exploit for CVE-2023-30212, an XSS vulnerability in Ourphp 7.2.0, including Docker setup and payload demonstration.

vulnerability-analysisexploitationweb-application-exploitation+3
3 years ago
CVE-2025-48384 preview

CVE-2025-48384

GitHubarun1033/cve-2025-48384

Reproduction script for CVE-2025-48384, a git clone RCE via carriage return in submodule paths, demonstrating the vulnerability and providing a local…

vulnerability-analysisexploitationweb-application-exploitation+2
1 year ago
cve-2016-1000027-poc preview

cve-2016-1000027-poc

GitHubartem-smotrakov/cve-2016-1000027-poc

PoC for CVE-2016-1000027

vulnerability-analysisexploitationweb-application-exploitation+3
125 years ago
Docker-Container-CVE-2020-13401 preview

Docker-Container-CVE-2020-13401

GitHubarax-zaeimi/docker-container-cve-2020-13401

Study on CVE-2020-13401 vulnerability of containers in dockers older than 19.03.11

packet-sniffing-analysiscontainer-securityvulnerability-analysis+3
25 years ago
SecAssignment preview

SecAssignment

GitHubarafatansari/secassignment

A Docker image vulnerable to CVE-2020-7246.

container-securityvulnerability-analysisexploitation+3
4 years ago
log4shell preview

log4shell

GitHubarabindadora/log4shell

Log4Shell (CVE-2021-44228) PoC

payload-generationvulnerability-analysisexploitation+4
11 months ago
how-to-check-patch-secure-log4j-CVE-2021-44228 preview

how-to-check-patch-secure-log4j-CVE-2021-44228

GitHubanuvindhs/how-to-check-patch-secure-log4j-cve-2021-44228

A one-stop repo/ information hub for all log4j vulnerability-related information.

vulnerability-scannersvulnerability-analysisinformation-gathering+3
24 years ago
shellshock-victim-host preview

shellshock-victim-host

GitHubanujbhan/shellshock-victim-host

A docker container vulnerable to Shellshock - CVE-2014-6271

container-securityvulnerability-analysisexploitation+3
4 years ago
CVE-2007-5962 preview

CVE-2007-5962

GitHubantogit-sys/cve-2007-5962

vsftpd 2.0.5 - 'CWD' (Authenticated) Remote Memory Consumption

vulnerability-analysisexploitationpenetration-testing+2
13 years ago
log4j-docker preview

log4j-docker

GitHubankur-katiyar/log4j-docker

Docker images and k8s YAMLs for Log4j Vulnerability POC (Log4j (CVE-2021-44228 RCE Vulnerability)

container-securityvulnerability-analysisexploitation+3
54 years ago
Previous1…959697…100Next