Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
49 results
CVE-2026-44848-PoC preview

CVE-2026-44848-PoC

GitHubboreas37/cve-2026-44848-poc

PoC for CVE-2026-44848: Portainer missing authorization on Docker plugin endpoints -> host RCE (GHSA-rrmm-9v76-h3p4). Stdlib-only Python.

api-security-testingauthentication-authorizationcontainer-security+3
2 days ago
CVE-2026-42945_NginxRift preview

CVE-2026-42945_NginxRift

GitHubkentox493/cve-2026-42945_nginxrift

Automates CVE-2026-42945 exploitation in NGINX containers: verifies vulnerable targets, brute-forces heap offsets, executes commands, and opens an…

binary-exploitationcontainer-securityctf+5
6 days ago
POC-CopyEscape-CVE-2026-17106 preview

POC-CopyEscape-CVE-2026-17106

GitHub686f6c61/poc-copyescape-cve-2026-17106

PoC funcional de CVE-2026-17106 (CopyEscape): carrera TOCTOU en docker cp que permite escritura arbitraria en el host Docker. Laboratorio Docker +…

adversarial-attackcontainer-escapecontainer-security+5
18 days ago
CVE-2026-17106 preview

CVE-2026-17106

GitHubhackspeak/cve-2026-17106

PoC for Docker `docker cp` arbitrary file write, exploiting symlink and tar extraction flaws to overwrite host binaries or launch agents for…

container-escapecontainer-securityexploitation+3
19 days ago
CopyEscape-CVE-2026-17106 preview

CopyEscape-CVE-2026-17106

GitHubmasasron/copyescape-cve-2026-17106

PoC repository for the blog post CopyEscape: Taking Over Docker Hosts with docker cp

adversarial-attackcontainer-escapecontainer-security+3
1711 days ago
CVE-2026-5817-PoC preview

CVE-2026-5817-PoC

GitHubgouldnicholas/cve-2026-5817-poc

Docker Model Runner container-to-host RCE / Escape: A critical vulnerability that allows for container-to-host code execution in the Docker Model…

ai-securitycontainer-escapecontainer-security+4
3 months ago
Awesome-CloudSec-Labs preview

Awesome-CloudSec-Labs

GitHubiknowjason/awesome-cloudsec-labs

Awesome free cloud native security learning labs. Includes CTF, self-hosted workshops, guided vulnerability labs, and research labs.

cloud-securitycontainer-securityctf+7
2.2k10 months ago
CVE-2026-5555-Container-Escape-via-proc-self-fd-Symlink-in-Shared-Volume preview

CVE-2026-5555-Container-Escape-via-proc-self-fd-Symlink-in-Shared-Volume

GitHubgeorge0papasotiriou/cve-2026-5555-container-escape-via-proc-self-fd-symlink-in-shared-volume
container-escapecontainer-securityexploitation+2
17 days ago
ConMachi preview

ConMachi

GitHubnccgroup/conmachi

Container Blackbox Security Auditing Tool: enumerates security configuration from within the target container

cloud-infrastructure-securityconfiguration-auditingcontainer-security+4
1067 years ago
CVE-2026-52832-PoC-exploit-nuclio-dashboard preview

CVE-2026-52832-PoC-exploit-nuclio-dashboard

GitHubmdvpat/cve-2026-52832-poc-exploit-nuclio-dashboard

Nuclio Dashboard (NOP mode) accepts unauthenticated POST /api/functions. The spec.handler field isn't path-validated, so…

code-analysiscontainer-securityexploitation+3
22 days ago
teleport preview

teleport

GitHubgravitational/teleport

The easiest, and most secure way to access and protect all of your infrastructure.

api-securityauthentication-authorizationcloud-security+7
20.8k7 days ago
teampcp-supply-chain-attack preview

teampcp-supply-chain-attack

GitHubugurrates/teampcp-supply-chain-attack

CVE-2026-33634 (CVSS 9.4) — The most impactful CI/CD supply chain attack of 2026 so far.

cloud-securitycontainer-securitycurated-resources+5
1124 days ago
vuln-scanner preview

vuln-scanner

GitHubzappaboy/vuln-scanner

Vulnerability Assessment Scanner with Report Generation

api-security-testingcloud-securityconfiguration-auditing+9
1126 days ago
lxd-group-privesc-report preview

lxd-group-privesc-report

GitHubstar-sg/lxd-group-privesc-report
container-securityeducationexploitation+3
72 months ago
poc-cve-2024-0132 preview

poc-cve-2024-0132

GitHubssst0n3/poc-cve-2024-0132
cloud-securitycontainer-escapecontainer-security+3
51 year ago
POC-2020-8558 preview

POC-2020-8558

GitHubtabbysable/poc-2020-8558

Information about Kubernetes CVE-2020-8558, including proof of concept exploit.

cloud-securitycontainer-securityexploitation+5
436 years ago
log4j2_vul_local_scanner preview

log4j2_vul_local_scanner

GitHublijiejie/log4j2_vul_local_scanner

Log4j 漏洞本地检测脚本。 Scan all java processes on your host to check whether it's affected by log4j2 remote code execution vulnerability (CVE-2021-45046)

code-analysiscontainer-securitydevsecops+3
854 years ago
docker_lightman_exploit preview

docker_lightman_exploit

GitHubthekevinday/docker_lightman_exploit

Docker CVE-2022-37708

container-escapecontainer-securityexploitation+3
33 years ago
Previous123Next