Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

24 results

CVE-2026-5556-Kubernetes-Admission-Controller-Bypass-via-Case-Sensitivity

george0papasotiriou/cve-2026-5556-kubernetes-admission-controller-bypass-via-case-sensitivity

adversarial-attackcloud-infrastructure-securitycloud-security+4

18 days ago

teleport

gravitational/teleport

The easiest, and most secure way to access and protect all of your infrastructure.

api-securityauthentication-authorizationcloud-security+7

20.8k7 days ago

cosign

sigstore/cosign

Code signing and transparency for containers and binaries

authentication-authorizationcloud-securitycontainer-security+3

6.2k1 day ago

CVE-2026-34040-PoC

m0nk3ygod/cve-2026-34040-poc

cloud-infrastructure-securitycontainer-securityeducation+3

2 months ago

UAP-protocol

rajsidwadkar/uap-protocol

A unified, security-first wire protocol for tool access and agent coordination. UAP eliminates CVE-2025-49596 and MCP tool-poisoning vulnerabilities…

api-securityauthentication-authorizationcloud-security+8

12 months ago

claude-code-devcontainer

trailofbits/claude-code-devcontainer

Sandboxed devcontainer for running Claude Code in bypass mode safely. Built for security audits and untrusted code review.

code-analysiscontainer-securitydefensive-tools+4

9192 months ago

agentsh

canyonroad/agentsh

Execution-Layer Security (ELS) for AI agents — policy-enforced shell with audit.

ai-securityauthentication-authorizationcloud-security+7

37514 days ago

fabric8io__kubernetes-client_CVE-2021-4178_5-0-2

shoucheng3/fabric8io__kubernetes-client_cve-2021-4178_5-0-2

api-securityauthentication-authorizationcloud-infrastructure-security+3

1 year ago

jenkinsci__docker-commons-plugin_CVE-2022-20617_1-17

shoucheng3/jenkinsci__docker-commons-plugin_cve-2022-20617_1-17

api-securityauthentication-authorizationcloud-infrastructure-security+3

1 year ago

kubernetes-client__java_CVE-2020-8570_client-java-parent-9_0_2_fixed

shoucheng3/kubernetes-client__java_cve-2020-8570_client-java-parent-9_0_2_fixed

api-securityauthentication-authorizationcloud-infrastructure-security+3

9 months ago

WHS3_vulhub

suz1n/whs3_vulhub

PoC for CVE-2017-8386 Git-Shell sandbox bypass vulnerability.

container-securityeducationexploitation+3

1 year ago

CVE-2026-27771

portbuster1337/cve-2026-27771

CVE-2026-27771 - Gitea/Forgejo Container Registry Auth Bypass Exploit PoC - Pull private container images without authentication

authentication-authorizationcontainer-securityeducation+5

192 months ago

CVE-2025-32462-CVE-2025-32463-PoC-Lab

yonathanpy/cve-2025-32462-cve-2025-32463-poc-lab

binary-exploitationcontainer-securityeducation+5

25 months ago

jumpserver

jumpserver/jumpserver

JumpServer is an open-source Privileged Access Management (PAM) platform that provides DevOps and IT teams with on-demand and secure access to SSH,…

authentication-authorizationcloud-securityconfiguration-auditing+5

31.4k18h 50m ago

AndroSH

ahmed-alnassif/androsh

AndroSH No-Root Multi-Distro Linux on Android via Shizuku/ADB - Run Arch, Fedora, Alpine, Debian, Ubuntu, Kali, Void, Manjaro, OpenSUSE & Chimera…

android-securitycontainer-securityeducation+6

2362 days ago

CVE-2018-16509

knqyf263/cve-2018-16509

CVE-2018-16509 (Ghostscript contains multiple -dSAFER sandbox bypass vulnerabilities)

container-securityexploitationvulnerability-analysis+1

37 years ago

CVE-2021-25735

darryk10/cve-2021-25735

Exploit CVE-2021-25735: Kubernetes Validating Admission Webhook Bypass

cloud-securitycontainer-securityexploitation+3

175 years ago

cve-2018-10933

hackerhouse-opensource/cve-2018-10933

cve-2018-10933 libssh authentication bypass

authenticationcontainer-securityexploitation+3

1106 months ago

Previous12 Next