Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

106 results

grype

anchore/grype

A vulnerability scanner for container images and filesystems

container-escapecontainer-securitydevsecops+4

12.9k1 day ago

Exploits

kmkz/exploits

Original CVEs, exploit PoCs, and security advisories with detailed vulnerability chains, privilege escalation, and container escape techniques for…

command-and-controlcontainer-escapeeducation+6

2173 days ago

kubescape

kubescape/kubescape

Open-source Kubernetes security platform scanning clusters, manifests, and images for misconfigurations, vulnerabilities, and compliance against NSA,…

cloud-infrastructure-securitycloud-securityconfiguration-auditing+6

11.7k10h 4m ago

syft

anchore/syft

CLI tool and library for generating a Software Bill of Materials from container images and filesystems

container-escapecontainer-securitydevsecops+3

9.6k2h 35m ago

falco

falcosecurity/falco

Real-time cloud-native runtime security agent for Linux that monitors syscalls and container/Kubernetes metadata to detect anomalous behavior and…

anomaly-detectionanti-botchaos-engineering+10

9.4k22h 14m ago

kubernetes-goat

madhuakula/kubernetes-goat

Intentionally vulnerable Kubernetes cluster environment for hands-on security training. Includes 22+ scenarios covering container escape, RBAC…

cloud-securitycontainer-escapecontainer-security+4

5.8k5 months ago

kube-hunter

aquasecurity/kube-hunter

Hunt for security weaknesses in Kubernetes clusters

cloud-infrastructure-securitycloud-securitycontainer-escape+5

5.1k2 years ago

kubesec

controlplaneio/kubesec

Security risk analysis for Kubernetes resources

cloud-infrastructure-securitycloud-securityconfiguration-auditing+7

1.5k3 months ago

botb

brompwnie/botb

A container analysis and exploitation tool for pentesters and engineers.

cloud-securitycontainer-escapecontainer-security+4

6854 years ago

cve-2019-5736-poc

q3k/cve-2019-5736-poc

Unweaponized Proof of Concept for CVE-2019-5736 (Docker escape)

container-escapecontainer-securityexploitation+2

2107 years ago

DEFCON-CICD-pipelines-workshop

wavestone-cdt/defcon-cicd-pipelines-workshop

Hands-on CI/CD pipeline security workshop with Terraform lab, AWS exploitation, Kubernetes escape, and artifact backdooring exercises for offensive…

cloud-securitycontainer-escapecontainer-security+8

933 years ago

CVE-2024-21626

nitrocao/cve-2024-21626

PoC and Detection for CVE-2024-21626

container-escapecontainer-securityexploitation+3

792 years ago

CVE-2026-31431-Container-Escape

qi4l/cve-2026-31431-container-escape

Proof-of-concept container escape exploit targeting CVE-2026-31431 in runC, demonstrating privilege escalation and namespace breakout for security…

cloud-securitycontainer-escapecontainer-security+3

274 months ago

CopyEscape-CVE-2026-17106

masasron/copyescape-cve-2026-17106

PoC repository for the blog post CopyEscape: Taking Over Docker Hosts with docker cp

adversarial-attackcontainer-escapecontainer-security+3

221 month ago

insject

nccgroup/insject

insject is a tool for poking at containers. It enables you to run an arbitrary command in a container or any mix of Linux namespaces.

container-escapecontainer-securitypenetration-testing+1

504 years ago

CVE-2019-5736

jas502n/cve-2019-5736

Exploit for CVE-2019-5736: runc container escape that overwrites host docker-runc binary with a payload, triggered via docker exec.

cloud-infrastructure-securitycloud-securitycontainer-escape+3

147 years ago

abstractshimmer

nccgroup/abstractshimmer

Proof of concept for CVE-2020-15257 in containerd.

cloud-securitycontainer-escapecontainer-security+3

185 years ago

docker-cve-2022-39253-poc

ssst0n3/docker-cve-2022-39253-poc

Proof-of-concept exploit for CVE-2022-39253 demonstrating Docker container escape via malicious Git repository build, enabling host file system read…

container-escapecontainer-securityexploitation+2

101 year ago

Previous12 3 4 5 6 Next