Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
141 results
drupalgeddon2-cve-lab preview

drupalgeddon2-cve-lab

GitHubvaibhav91one/drupalgeddon2-cve-lab

Intentionally vulnerable Drupal 7.57 lab for reproducing CVE-2018-7600 (Drupalgeddon2) in a Docker container, with an installer script and PHP…

container-securityeducationlabs-practice+3
8h 51m ago
CVE-2026-12243-NLTK-PoC preview

CVE-2026-12243-NLTK-PoC

GitHubmorzelowski/cve-2026-12243-nltk-poc

Docker lab demonstrating CVE-2026-12243 path traversal in NLTK before 3.10.0, contrasting vulnerable and patched behavior with a synthetic secret in…

container-securityeducationlabs-practice+2
1 day ago
cved preview

cved

GitHubgit-rep-src/cved

A tool to manage vulnerable docker containers

cloud-infrastructure-securityconfiguration-auditingcontainer-security+2
5 years ago
CVE-2026-39987-Lab preview

CVE-2026-39987-Lab

GitHubrootdirective-sec/cve-2026-39987-lab

Local Docker lab reproducing CVE-2026-39987, a pre-auth RCE in marimo's terminal WebSocket. Compares vulnerable and patched versions with least-harm…

container-securityeducationexploitation+3
13 months ago
CVE-2026-31431-Copy-Fail-Container-Escape preview

CVE-2026-31431-Copy-Fail-Container-Escape

GitHubhans362/cve-2026-31431-copy-fail-container-escape

Container escape on any docker container with healthcheck enabled via CVE-2026-31431

cloud-securitycontainer-escapecontainer-security+3
3 months ago
CVE-2026-23744-Lab preview

CVE-2026-23744-Lab

GitHubrootdirective-sec/cve-2026-23744-lab

Docker lab to compare vulnerable and patched builds of MCPJam Inspector for CVE-2026-23744, demonstrating network binding differences and API…

container-securityeducationlabs-practice+2
6 months ago
CVE-2026-1357-Lab preview

CVE-2026-1357-Lab

GitHubrootdirective-sec/cve-2026-1357-lab

Local Docker lab for comparing vulnerable and patched versions of WPvivid Backup & Migration (CVE-2026-1357) for educational verification and…

container-securityeducationlabs-practice+2
6 months ago
CVE-2021-32157 preview

CVE-2021-32157

GitHubdnr6419/cve-2021-32157

Make it possible to build a vulnerable webmin virtual environment as a container using docker

container-securityexploitationpenetration-testing+2
14 years ago
CVE-2026-3288-lab preview

CVE-2026-3288-lab

GitHubbvabhishek/cve-2026-3288-lab

Docker-based vulnerable lab for CVE-2026-3288 NGINX Ingress configuration injection, with exploit scripts, detection monitoring, and remediation…

cloud-infrastructure-securityconfiguration-auditingcontainer-security+6
14 months ago
Demo_CVE-2025-3248 preview

Demo_CVE-2025-3248

GitHubkiraly07/demo_cve-2025-3248

Educational lab simulating CVE-2025-3248 with a vulnerable Docker service and PoC exploit for hands-on security training and mitigation practice.

container-securityeducationexploitation+3
211 months ago
Telnet-TestVuln-CVE-2026-24061 preview

Telnet-TestVuln-CVE-2026-24061

GitHubbrainbob/telnet-testvuln-cve-2026-24061

Dockerized vulnerable Telnet service for testing CVE-2026-24061, providing a controlled environment for vulnerability validation and security…

container-securityexploitationpenetration-testing+2
7 months ago
CVE-2026-42945_NginxRift preview

CVE-2026-42945_NginxRift

GitHubkentox493/cve-2026-42945_nginxrift

Automates CVE-2026-42945 exploitation in NGINX containers: verifies vulnerable targets, brute-forces heap offsets, executes commands, and opens an…

binary-exploitationcontainer-securityctf+5
116 days ago
CopyEscape-CVE-2026-17106 preview

CopyEscape-CVE-2026-17106

GitHubmasasron/copyescape-cve-2026-17106

PoC repository for the blog post CopyEscape: Taking Over Docker Hosts with docker cp

adversarial-attackcontainer-escapecontainer-security+3
1721 days ago
mi-x preview

mi-x

GitHubrezilion/mi-x

Determine whether your compute is truly vulnerable to a specific vulnerability by accounting for all factors which affect *actual* exploitability…

configuration-auditingcontainer-securityvulnerability-analysis+1
1413 years ago
ProjectSecurity-Homelab preview

ProjectSecurity-Homelab

GitHubahndrewalters/projectsecurity-homelab

Hands-on homelab simulating the Log4Shell (CVE-2021-44228) vulnerability. Deploy Docker containers to build a vulnerable target and attacker machine,…

container-securitydefensive-toolseducation+4
23 days ago
CVE-2026-21008-Kubernetes-Service-Account-Token-Mounted-in-HostPath preview

CVE-2026-21008-Kubernetes-Service-Account-Token-Mounted-in-HostPath

GitHubgeorge0papasotiriou/cve-2026-21008-kubernetes-service-account-token-mounted-in-hostpath

Proof-of-concept exploit for Kubernetes service-account token disclosure via hostPath mounts; includes vulnerable pod YAML and Python token-theft…

cloud-infrastructure-securitycloud-securitycontainer-security+4
26 days ago
CVE-2026-21019-Kubernetes-CronJob-Suspended-Execution-via-Time-Manipulation preview

CVE-2026-21019-Kubernetes-CronJob-Suspended-Execution-via-Time-Manipulation

GitHubgeorge0papasotiriou/cve-2026-21019-kubernetes-cronjob-suspended-execution-via-time-manipulation

Reproduces CVE-2026-21019 by manipulating node clock to force early Kubernetes CronJob execution; includes vulnerable YAML manifest and Python…

adversarial-attackcloud-infrastructure-securitycloud-security+3
26 days ago
CVE-2026-5556-Kubernetes-Admission-Controller-Bypass-via-Case-Sensitivity preview

CVE-2026-5556-Kubernetes-Admission-Controller-Bypass-via-Case-Sensitivity

GitHubgeorge0papasotiriou/cve-2026-5556-kubernetes-admission-controller-bypass-via-case-sensitivity

Exploit PoC and vulnerable admission webhook for CVE-2026-5556, demonstrating Kubernetes admission controller bypass via case-sensitive pod name…

adversarial-attackcloud-infrastructure-securitycloud-security+4
27 days ago
Previous12…8Next