Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Categories

Labs & Practice

Training labs, hands-on environments, and reproducible challenges for authorized, safe cybersecurity practice.

Kitploit recommended

Top tools

10 selected
vulhub preview#1

vulhub

GitHubvulhub/vulhub
21.1k1 month ago
juice-shop preview#2

juice-shop

GitHubjuice-shop/juice-shop
13.6k1 month ago
WebGoat preview#3

WebGoat

GitHubwebgoat/webgoat
9.3k5h 34m ago
DVWA preview#4

DVWA

GitHubdigininja/dvwa
13.5k3 days ago
crAPI preview#5

crAPI

GitHubowasp/crapi
1.6k1 day ago
NodeGoat preview#6

NodeGoat

GitHubowasp/nodegoat
2.1k3 years ago
SecurityShepherd preview#7

SecurityShepherd

GitHubowasp/securityshepherd
1.5k7 days ago
wrongsecrets preview#8

wrongsecrets

GitHubowasp/wrongsecrets
1.5k1 day ago
metasploitable3 preview#9

metasploitable3

GitHubrapid7/metasploitable3
5.7k1 year ago
GOAD preview#10

GOAD

GitHuborange-cyberdefense/goad
8.1k6 months ago
NewestRelevanceMost popularRecently updated
2410 results
CTFs preview

CTFs

GitHubadamkadaban/ctfs

CTF Cheat Sheet + Writeups / Files for some of the Security CTFs that I've done

osintreverse-engineeringforensics+9
8479 months ago
Cybersecurity-Books preview

Cybersecurity-Books

GitHubzealraj/cybersecurity-books

Here you will get awesome collection of mostly all well-known and usefull cybersecurity books from beginner level to expert for all cybersecurity…

wi-fi-auditingreverse-engineeringweb-security+6
6784 years ago
Android-Security-Teryaagh preview

Android-Security-Teryaagh

GitHubralireza/android-security-teryaagh

Android security guides, roadmap, docs, courses, write-ups, and teryaagh.

android-securitymobile-app-pentestingctf+6
8173 months ago
Pentest-Everything preview

Pentest-Everything

GitHubthe-viper-one/pentest-everything

A collection of CTF write-ups, pentesting topics, guides and notes. Notes compiled from multiple sources and my own lab research. Topics also support…

ctfpenetration-testingeducation+4
62011 months ago
multi-juicer preview

multi-juicer

GitHubjuice-shop/multi-juicer

Host and manage multiple Juice Shop instances for security trainings and Capture The Flags

web-securityctfeducation+1
3221 day ago
DVSA preview

DVSA

GitHubowasp/dvsa

a Damn Vulnerable Serverless Application

cloud-infrastructure-securityvulnerability-analysisserverless-security+6
5442 years ago
DumpsterFire preview

DumpsterFire

GitHubtrycatchhcf/dumpsterfire

"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events.…

defensive-toolspenetration-testingeducation+3
1.0k6 years ago
Project-Pwnag0dchi preview

Project-Pwnag0dchi

GitHubshur1k-n/project-pwnag0dchi

A dope AF repo of all customized plugins & configurations I use as seen on my socials / YouTube. Helpful guides and troubleshooting too.

password-crackingwi-fi-auditingwireless-security+3
7999 months ago
TerraformGoat preview

TerraformGoat

GitHubhxsecurity/terraformgoat

Multi-cloud vulnerable-by-design deployment tool using Terraform to provision intentionally insecure cloud infrastructure for security training and…

cloud-infrastructure-securitycloud-securitymisconfiguration+2
6383 years ago
DetectionLabELK preview

DetectionLabELK

GitHubcyberdefenders/detectionlabelk

DetectionLabELK is a fork from DetectionLab with ELK stack instead of Splunk.

defensive-toolsosintconfiguration-auditing+7
5755 years ago
LinuxForensics preview

LinuxForensics

GitHubashemery/linuxforensics

Everything related to Linux Forensics

forensicsdigital-forensicseducation+3
7263 years ago
DEFCON-31-Syscalls-Workshop preview

DEFCON-31-Syscalls-Workshop

GitHubvirtualalllocex/defcon-31-syscalls-workshop

Contains all the material from the DEF CON 31 workshop "(In)direct Syscalls: A Journey from High to Low".

shellcodeeducationred-teaming+2
7731 year ago
web-traffic-generator preview

web-traffic-generator

GitHubreconinfosec/web-traffic-generator

A quick and dirty HTTP/S "organic" traffic generator.

defensive-toolsgeneral-purpose-utilitiesnetwork-security+2
5126 years ago
IoTGoat preview

IoTGoat

GitHubowasp/iotgoat

Deliberately insecure OpenWrt-based firmware for hands-on IoT security training. Features vulnerability challenges mapped to the OWASP IoT Top 10 for…

embedded-systems-securityiot-securityvulnerability-analysis+8
91611 months ago
iam-vulnerable preview

iam-vulnerable

GitHubbishopfox/iam-vulnerable

Use Terraform to create your own vulnerable by design AWS IAM privilege escalation playground.

privilege-escalationvulnerability-analysispenetration-testing+4
5850 years ago
cgPwn preview

cgPwn

GitHub0xm3r/cgpwn

A lightweight VM for hardware hacking, RE (fuzzing, symEx, exploiting etc) and wargaming tasks

penetration-testing-frameworksexploit-frameworksreverse-engineering+8
3569 years ago
WebGoat.NET preview

WebGoat.NET

GitHubjerryhoff/webgoat.net

OWASP WebGoat.NET

vulnerability-analysisweb-securityctf+3
25712 years ago
igoat preview

igoat

GitHubowasp/igoat

OWASP iGoat - A Learning Tool for iOS App Pentesting and Security by Swaroop Yermalkar

ios-securityvulnerability-analysismobile-app-pentesting+9
4613 years ago
Previous1…789…100Next