Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Categories

Labs & Practice

Training labs, hands-on environments, and reproducible challenges for authorized, safe cybersecurity practice.

Kitploit recommended

Top tools

10 selected
vulhub preview#1

vulhub

GitHubvulhub/vulhub
21.1k1 month ago
juice-shop preview#2

juice-shop

GitHubjuice-shop/juice-shop
13.6k1 month ago
WebGoat preview#3

WebGoat

GitHubwebgoat/webgoat
9.3k17h 38m ago
DVWA preview#4

DVWA

GitHubdigininja/dvwa
13.5k3 days ago
crAPI preview#5

crAPI

GitHubowasp/crapi
1.6k2 days ago
NodeGoat preview#6

NodeGoat

GitHubowasp/nodegoat
2.1k3 years ago
SecurityShepherd preview#7

SecurityShepherd

GitHubowasp/securityshepherd
1.5k8 days ago
wrongsecrets preview#8

wrongsecrets

GitHubowasp/wrongsecrets
1.5k2 days ago
metasploitable3 preview#9

metasploitable3

GitHubrapid7/metasploitable3
5.7k1 year ago
GOAD preview#10

GOAD

GitHuborange-cyberdefense/goad
8.1k6 months ago
NewestRelevanceMost popularRecently updated
2410 results
mellivora preview

mellivora

GitHubnakiami/mellivora

Mellivora is a CTF engine written in PHP

vulnerability-analysisweb-securityctf+3
4513 years ago
exploit-CVE-2014-6271 preview

exploit-CVE-2014-6271

GitHubopsxcq/exploit-cve-2014-6271

Shellshock exploit + vulnerable environment

container-securityvulnerability-analysisexploitation+3
2309 years ago
BoxPwnr preview

BoxPwnr

GitHub0ca/boxpwnr

A modular framework for benchmarking LLMs and agentic strategies on security challenges across HackTheBox, TryHackMe, PortSwigger Labs, Cybench,…

privilege-escalationreconnaissanceexploit-frameworks+8
4431 month ago
CVE-2025-32463 preview

CVE-2025-32463

GitHubkh4sh3i/cve-2025-32463

Local Privilege Escalation to Root via Sudo chroot in Linux

privilege-escalationvulnerability-analysisexploitation+3
4721 year ago
circuit-artist preview

circuit-artist

GitHublets-all-be-stupid-forever/circuit-artist

Circuit Artist is a digital circuit drawing and simulation game.

ctfhardware-securityeducation+2
47412 days ago
VulnLab preview

VulnLab

GitHubyavuzlar/vulnlab

Deliberately vulnerable web application lab for practicing exploitation of SQLi, XSS, CSRF, SSTI, IDOR, XXE, and 15+ other common web security flaws…

web-application-exploitationweb-securityeducation+1
5261 year ago
St2-057 preview

St2-057

GitHubjas502n/st2-057

St2-057 Poc Example

vulnerability-analysisexploitationweb-application-exploitation+3
3098 years ago
fastjson-jsontype-rce-lab preview

fastjson-jsontype-rce-lab

GitHubdinosn/fastjson-jsontype-rce-lab

Docker labs + defensive scanner for fastjson remote-class-load RCE. fastjson 1.2.66-1.2.83: @JSONType resource probe (CVE-2026-16723). fastjson2…

static-analysisdynamic-analysis-sandboxingvulnerability-analysis+5
2031 month ago
workshop_firmware_reverse_engineering preview

workshop_firmware_reverse_engineering

GitHubemproof-com/workshop_firmware_reverse_engineering

Workshop on firmware reverse engineering

embedded-systems-securitystatic-analysisreverse-engineering+6
44311 months ago
htb-writeups preview

htb-writeups

GitHubmomenbasel/htb-writeups

Structured collection of 500+ Hack The Box machine writeups, 400+ challenge solutions, and interactive learning tools including knowledge graphs,…

osintprivilege-escalationexploitation+7
2011 month ago
exploit-workshop preview

exploit-workshop

GitHubsnyk-labs/exploit-workshop

A step by step workshop to exploit various vulnerabilities in Node.js and Java applications

vulnerability-analysisweb-application-exploitationpenetration-testing+2
1564 years ago
training-security-awareness preview

training-security-awareness

GitHubransomleak/training-security-awareness

Open-source interactive security awareness training library with 130+ SCORM exercises covering phishing, vishing, BEC, MFA fatigue, and OWASP AI/LLM…

phishingweb-securityprivacy+5
19121h 23m ago
CVE-2021-41773 preview

CVE-2021-41773

GitHubblasty/cve-2021-41773

CVE-2021-41773 playground

container-securityvulnerability-analysisexploitation+3
2114 years ago
AV-EDR-Lab-Environment-Setup preview

AV-EDR-Lab-Environment-Setup

GitHuban0nud4y/av-edr-lab-environment-setup

AV/EDR Lab environment setup references to help in Malware development

defensive-toolsids-ips-evasionmalware-analysis+6
4701 year ago
MSSQL-Pentest-Cheatsheet preview

MSSQL-Pentest-Cheatsheet

GitHubignitetechnologies/mssql-pentest-cheatsheet

Practical MSSQL penetration testing cheat sheet covering enumeration, linked-server pivoting, privilege escalation, persistence, and command…

privilege-escalationpersistence-mechanismsexploitation+8
2676 months ago
awesome-cybersec preview

awesome-cybersec

GitHubdhotrey/awesome-cybersec

A collection of awesome platforms, blogs, documents, books, resources and cool stuff about security

osintweb-securitymalware-analysis+8
1941 month ago
DefCon25 preview

DefCon25

GitHubfuzzysecurity/defcon25

UAC 0day, all day!

privilege-escalationexploitationeducation+1
2819 years ago
redis_exploit preview

redis_exploit

GitHubraminfp/redis_exploit

CVE-2025-49844 (RediShell)

vulnerability-analysisexploitationeducation+3
34311 months ago
Previous1…101112…100Next