Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Categories

Labs & Practice

Training labs, hands-on environments, and reproducible challenges for authorized, safe cybersecurity practice.

Kitploit recommended

Top tools

10 selected
vulhub preview#1

vulhub

GitHubvulhub/vulhub
21.1k1 month ago
juice-shop preview#2

juice-shop

GitHubjuice-shop/juice-shop
13.6k29 days ago
WebGoat preview#3

WebGoat

GitHubwebgoat/webgoat
9.3k3 days ago
DVWA preview#4

DVWA

GitHubdigininja/dvwa
13.5k2 days ago
crAPI preview#5

crAPI

GitHubowasp/crapi
1.6k13h 42m ago
NodeGoat preview#6

NodeGoat

GitHubowasp/nodegoat
2.1k3 years ago
SecurityShepherd preview#7

SecurityShepherd

GitHubowasp/securityshepherd
1.5k6 days ago
wrongsecrets preview#8

wrongsecrets

GitHubowasp/wrongsecrets
1.5k13h 10m ago
metasploitable3 preview#9

metasploitable3

GitHubrapid7/metasploitable3
5.7k1 year ago
GOAD preview#10

GOAD

GitHuborange-cyberdefense/goad
8.1k6 months ago
NewestRelevanceMost popularRecently updated
2399 results
CVE-2017-1000117 preview

CVE-2017-1000117

GitHubvulapps/cve-2017-1000117

Proof-of-concept exploit for CVE-2017-1000117, demonstrating command injection via git clone to write arbitrary output to a web directory.

vulnerability-analysisexploitationpenetration-testing+2
39 years ago
react2shellexploitvisualized preview

react2shellexploitvisualized

GitHubvolksrat71/react2shellexploitvisualized

Interactive visualization of the React2Shell (CVE-2025-55182) RCE vulnerability with narrated animations for three audiences: Expert, Practitioner,…

vulnerability-analysisexploitationweb-security+3
38 months ago
Vulnerable-Docker--CVE-2023-30212- preview

Vulnerable-Docker--CVE-2023-30212-

GitHubvisdev23/vulnerable-docker--cve-2023-30212-

This contains the necessary files and Docker to replicate A vulnerability in OURPHP that has a XSS Vulnerability (CVE-2023-30212)

container-securityvulnerability-analysisexploitation+3
13 years ago
cve-2024-21413-outlook-monikerlink-lab preview

cve-2024-21413-outlook-monikerlink-lab

GitHubviniciusfariasdev/cve-2024-21413-outlook-monikerlink-lab

Educational lab and PoC demonstrating CVE-2024-21413 Outlook Moniker Link attack to leak netNTLMv2 hashes via crafted HTML email.

password-crackingexploitationphishing+3
7 months ago
5MMISSI-CVE-2017-1000499 preview

5MMISSI-CVE-2017-1000499

GitHubvillaquiranm/5mmissi-cve-2017-1000499

Proof-of-concept exploit for CVE-2017-1000499, a CSRF vulnerability in phpMyAdmin, demonstrating harmful database operations via crafted URLs.

vulnerability-analysisexploitationweb-application-exploitation+2
7 years ago
CVE-2020-8840 preview

CVE-2020-8840

GitHubveraxy00/cve-2020-8840

Jackson-databind远程代码执行漏洞(CVE-2020-8840)分析复现环境代码

vulnerability-analysiscode-analysisexploitation+3
45 years ago
CVE-2018-1270 preview

CVE-2018-1270

GitHubvenscor/cve-2018-1270

CVE-2018-1270 表达式RCE环境

vulnerability-analysisexploitationweb-application-exploitation+2
7 years ago
CVE-2019-9978-RCE-PoC preview

CVE-2019-9978-RCE-PoC

GitHubvaidehim55/cve-2019-9978-rce-poc

A custom Python proof-of-concept showcasing root-cause analysis and exploitation of CVE 2019-9978 (Social Warfare plugin),focusing on practical RFI…

vulnerability-analysisexploitationweb-application-exploitation+3
8 months ago
exploit-CVE-2021-3560 preview

exploit-CVE-2021-3560

GitHubunicordev/exploit-cve-2021-3560

Exploit for CVE-2021-3560 (Polkit) - Local Privilege Escalation

privilege-escalationvulnerability-analysisexploitation+3
124 years ago
CVE-2023-3338-DECPwn preview

CVE-2023-3338-DECPwn

GitHubturtlearm/cve-2023-3338-decpwn

Linux kernel LPE practice with an NPD vulnerability

privilege-escalationexploitationeducation+2
353 years ago
CVE-2023-32571-POC preview

CVE-2023-32571-POC

GitHubtris0n/cve-2023-32571-poc

Proof-of-concept for CVE-2023-32571, demonstrating remote code execution via Dynamic Linq injection in ASP.NET applications. Includes payloads and a…

vulnerability-analysiscode-analysisexploitation+4
72 years ago
vulnerable-bsr-lab-CVE-2023-6933 preview

vulnerable-bsr-lab-CVE-2023-6933

GitHubtrex96/vulnerable-bsr-lab-cve-2023-6933

Hands-on lab for CVE-2023-6933, a PHP Object Injection vulnerability in Better Search Replace WordPress plugin, with Docker deployment, nuclei…

exploit-frameworksvulnerability-analysisweb-application-exploitation+3
11 months ago
CVE-2023-37478_npm_vs_pnpm preview

CVE-2023-37478_npm_vs_pnpm

GitHubtrevorgkann/cve-2023-37478_npm_vs_pnpm

CVE-2023-37478 showcases how a difference in npm and pnpm install packages that could be exploited by a well crafted tar.gz packge. This repo shows a…

vulnerability-analysisexploitationweb-security+3
2 years ago
CVE-2023-3460_FIX preview

CVE-2023-3460_FIX

GitHubtrankubao/cve-2023-3460_fix

Cái này dựng lên với mục đích cho ae tham khảo, chê thì đừng có xem. :))))

privilege-escalationvulnerability-analysisexploitation+2
11 months ago
CVE-2024-10924-Wordpress-Docker preview

CVE-2024-10924-Wordpress-Docker

GitHubtrackflaw/cve-2024-10924-wordpress-docker

Vulnerable docker container for Really Simple Security (Free, Pro, and Pro Multisite) 9.0.0 – 9.1.1.1 – Authentication Bypass CVE-2023-50164

vulnerability-analysisexploitationweb-security+3
31 year ago
CVE-2024-1071-Docker preview

CVE-2024-1071-Docker

GitHubtrackflaw/cve-2024-1071-docker

CVE-2024-1071 with Docker

vulnerability-analysisexploitationweb-application-exploitation+3
32 years ago
CVE-2023-7028-Docker preview

CVE-2023-7028-Docker

GitHubtrackflaw/cve-2023-7028-docker

Repository to install CVE-2023-7028 vulnerable Gitlab instance

container-securityvulnerability-analysisexploitation+3
32 years ago
CVE-2023-50164-ApacheStruts2-Docker preview

CVE-2023-50164-ApacheStruts2-Docker

GitHubtrackflaw/cve-2023-50164-apachestruts2-docker

Vulnerable docker container for Apache Struts 2 RCE CVE-2023-50164

vulnerability-analysisexploitationweb-application-exploitation+3
72 years ago
Previous1…9899100Next