Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
16 results
CVE-2022-27518_POC preview

CVE-2022-27518_POC

GitHubdolby360/cve-2022-27518_poc

A POC on how to exploit CVE-2022-27518

cloud-securitycontainer-securityexploitation+2
2
3 years ago
SecretScanner preview

SecretScanner

GitHubdeepfence/secretscanner

:unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:

container-securitydevsecopssecret-detection+1
3.4k5 months ago
klar preview

klar

GitHuboptiopay/klar

Integration of Clair and Docker Registry

configuration-auditingcontainer-securitydevsecops+1
5032 years ago
terrier preview

terrier

GitHubheroku/terrier

Terrier is a Image and Container analysis tool that can be used to scan Images and Containers to identify and verify the presence of specific files…

container-securityhash-analysissupply-chain-security+1
2272 months ago
go-pillage-registries preview

go-pillage-registries

GitHubnccgroup/go-pillage-registries

Pentester-focused Docker registry tool to enumerate and pull images

cloud-securitycontainer-securityinformation-gathering+3
1136 years ago
react2shell-scanner preview

react2shell-scanner

GitHubgensecaihq/react2shell-scanner

Security scanner for CVE-2025-55182 - Critical RCE vulnerability in React Server Components. Scan npm/pnpm/yarn lockfiles, Docker images, SBOMs,…

code-analysiscontainer-securitydevsecops+4
588 months ago
cluster-image-scanner preview

cluster-image-scanner

GitHubsda-se/cluster-image-scanner

Discover vulnerabilities and container image misconfiguration in production environments.

container-securitydevsecopsmisconfiguration+1
561 year ago
sentinel-cve preview

sentinel-cve

GitHubkamalsrini/sentinel-cve

CLI tool that explains CVEs in plain English and scans repos for impact. Powered by Claude.

cloud-securitycontainer-securitydevsecops+6
205 months ago
trivy-enforcer preview

trivy-enforcer

GitHubaquasecurity/trivy-enforcer

[EXPERIMENTAL] Kubernetes Operator for Image Assurance

cloud-securitycontainer-securitydevsecops+3
206 years ago
CVE-2026-27771 preview

CVE-2026-27771

GitHubportbuster1337/cve-2026-27771

CVE-2026-27771 - Gitea/Forgejo Container Registry Auth Bypass Exploit PoC - Pull private container images without authentication

authentication-authorizationcontainer-securityeducation+5
192 months ago
CVE-2020-15778 preview

CVE-2020-15778

GitHubyifanzhg/cve-2020-15778
command-and-controlcontainer-securityexploitation+3
32 years ago
cve-images preview

cve-images

GitHubedgecases-purplehax/cve-images

Intentionally-vulnerable nginx 1.30.0 CVE lab images (CVE-2026-40701/42934/42945/42946) for isolated security research. Lab use only.

container-securityctfcurated-resources+5
12 months ago
CVE-2024-3094-One-Liner preview

CVE-2024-3094-One-Liner

GitHubbrinhosa/cve-2024-3094-one-liner
cloud-securitycontainer-securitydevsecops+3
12 years ago
trivy preview

trivy

GitLabniclas-zone/ci/trivy

GitLab CI component for Trivy scanning

cloud-securitycontainer-securitydevsecops+4
1 month ago
CVE-2025-60787-Detection-motionEye-RCE-via-Config-Injection preview

CVE-2025-60787-Detection-motionEye-RCE-via-Config-Injection

GitHubgarethmsheldon/cve-2025-60787-detection-motioneye-rce-via-config-injection
container-securityexploitationintrusion-detection+5
5 months ago
cve-2024-52005-poc preview

cve-2024-52005-poc

GitHubandrewd-cg/cve-2024-52005-poc

Proof-of-Concept for CVE-2024-52005: ANSI escape sequence injection in Git. Demonstrates incorrect 'not_affected' VEX claims in hardened container…

container-securityeducationexploitation+4
7 months ago