Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Categories

Labs & Practice

Training labs, hands-on environments, and reproducible challenges for authorized, safe cybersecurity practice.

Kitploit recommended

Top tools

10 selected
vulhub preview#1

vulhub

GitHubvulhub/vulhub
21.1k1 month ago
juice-shop preview#2

juice-shop

GitHubjuice-shop/juice-shop
13.6k29 days ago
WebGoat preview#3

WebGoat

GitHubwebgoat/webgoat
9.3k3 days ago
DVWA preview#4

DVWA

GitHubdigininja/dvwa
13.5k2 days ago
crAPI preview#5

crAPI

GitHubowasp/crapi
1.6k12h 37m ago
NodeGoat preview#6

NodeGoat

GitHubowasp/nodegoat
2.1k3 years ago
SecurityShepherd preview#7

SecurityShepherd

GitHubowasp/securityshepherd
1.5k6 days ago
wrongsecrets preview#8

wrongsecrets

GitHubowasp/wrongsecrets
1.5k12h 5m ago
metasploitable3 preview#9

metasploitable3

GitHubrapid7/metasploitable3
5.7k1 year ago
GOAD preview#10

GOAD

GitHuborange-cyberdefense/goad
8.1k6 months ago
NewestRelevanceMost popularRecently updated
2399 results
Awesome-RCE-techniques preview

Awesome-RCE-techniques

GitHubp0dalirius/awesome-rce-techniques

Awesome list of step by step techniques to achieve Remote Code Execution on various apps!

exploitationweb-application-exploitationpenetration-testing+3
1.9k2 years ago
f8x preview

f8x

GitHubffffffff0x/f8x

红/蓝队环境自动化部署工具 | Red/Blue team environment automation deployment tool

vulnerability-scannersexploit-frameworksscripting-automation+7
2.2k1 month ago
kernel-exploit-factory preview

kernel-exploit-factory

GitHubbsauce/kernel-exploit-factory

Linux kernel CVE exploit analysis report and relative debug environment. You don't need to compile Linux kernel and configure your environment…

privilege-escalationvulnerability-analysisexploitation+4
1.3k3 months ago
mutillidae preview

mutillidae

GitHubwebpwnized/mutillidae

OWASP Mutillidae II is a free, open-source, deliberately vulnerable web application providing a target for web-security training. This is an…

vulnerability-scannersweb-securityctf+3
1.5k2 months ago
malware-samples preview

malware-samples

GitHubjstrosch/malware-samples

Malware samples, analysis exercises and other interesting resources.

network-forensicsmalware-analysisbinary-analysis+3
1.7k2 years ago
labs preview

labs

GitHubnixawk/labs

Vulnerability Labs for security analysis

vulnerability-analysisexploitationweb-application-exploitation+3
1.2k5 years ago
attackgen preview

attackgen

GitHubmrwadams/attackgen

AttackGen is a cybersecurity incident response testing tool that leverages the power of large language models and the comprehensive MITRE ATT&CK…

ctfpenetration-testingthreat-intelligence+5
1.2k20h 51m ago
maldev-for-dummies preview

maldev-for-dummies

GitHubchvancooten/maldev-for-dummies

A workshop about Malware Development

exploitationshellcodemalware-analysis+4
1.8k3 years ago
OWASP-VWAD preview

OWASP-VWAD

GitHubowasp/owasp-vwad

⚠️ This repo is no longer in use. Please refer to https://github.com/OWASP/www-project-vulnerable-web-applications-directory

vulnerability-analysisweb-securityeducation+3
8861 month ago
crAPI preview

crAPI

GitHubowasp/crapi

Deliberately vulnerable microservices API designed for hands-on training in the OWASP API Security Top 10 risks, with built-in challenges and a…

vulnerability-analysisapi-security-testingweb-security+3
1.6k12h 37m ago
athena preview

athena

GitHubathena-os/athena

Athena OS is a Arch/Nix-based distro focused on Cybersecurity. Learn, practice and enjoy with any hacking tool!

scripting-automationpenetration-testingutilities-frameworks+3
1.3k3 days ago
pyrdp preview

pyrdp

GitHubgosecure/pyrdp

RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact

exploitationnetwork-forensicsinformation-gathering+9
1.8k3 months ago
instantbox preview

instantbox

GitHubinstantbox/instantbox

📦 Get a clean, ready-to-go Linux box in seconds.

general-purpose-utilitieseducationlabs-practice
4.2k7 years ago
RedHunt-OS preview

RedHunt-OS

GitHubredhuntlabs/redhunt-os

Virtual Machine for Adversary Emulation and Threat Hunting

osintvulnerability-scannersexploit-frameworks+7
1.3k1 year ago
metarget preview

metarget

GitHubmetarget/metarget

Metarget is a framework providing automatic constructions of vulnerable infrastructures.

vulnerability-scannerscontainer-securityexploit-frameworks+4
1.4k1 month ago
Androl4b preview

Androl4b

GitHubsh4hin/androl4b

A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis

android-securityreverse-engineeringmalware-analysis+4
1.2k6 years ago
dvna preview

dvna

GitHubappsecco/dvna

Damn Vulnerable NodeJS Application

vulnerability-analysisweb-securityeducation+1
7782 years ago
damn-vulnerable-MCP-server preview

damn-vulnerable-MCP-server

GitHubharishsg993010/damn-vulnerable-mcp-server

Damn Vulnerable MCP Server

exploitationweb-securityctf+5
1.3k9 months ago
Previous1…456…100Next