Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
829 results
ApacheStruts-CVE-2018-11776 preview

ApacheStruts-CVE-2018-11776

GitHubfreshdemo/apachestruts-cve-2018-11776

Python proof-of-concept exploit for Apache Struts2 CVE-2018-11776 remote code execution vulnerability, with Docker container for testing against…

container-securityexploitationpayload-development+3
6 years ago
asf__james-project_CVE-2022-22931_3-6-0 preview

asf__james-project_CVE-2022-22931_3-6-0

GitHubshoucheng3/asf__james-project_cve-2022-22931_3-6-0

Modular Java mail server supporting IMAP, SMTP, POP3, and JMAP with Docker deployment, distributed architecture, and CLI management for secure…

authenticationcloud-securityconfiguration-auditing+5
1 year ago
cve-2019-5736-reproducer preview

cve-2019-5736-reproducer

GitHubtakumak/cve-2019-5736-reproducer

Reproducer for CVE-2019-5736, a RunC container escape vulnerability. Provides build scripts and a KVM-based lab to confirm the exploit against…

cloud-securitycontainer-escapecontainer-security+3
4 years ago
CVE-2025-1974 preview

CVE-2025-1974

GitHub0xbingo/cve-2025-1974

A minimal test tool to help detect annotation injection vulnerabilities in Kubernetes NGINX Ingress controllers. This script sends a crafted…

cloud-securitycontainer-securityeducation+4
1 year ago
CVE-2023-2982 preview

CVE-2023-2982

GitHubwshinkle/cve-2023-2982

Python exploit script for CVE-2023-2982, packaged in a Docker container for automated deployment and testing against vulnerable targets.

container-securityexploitationscripting-automation+2
2 years ago
CVE-2019-16113-Dockerfile preview

CVE-2019-16113-Dockerfile

GitHubkenun99/cve-2019-16113-dockerfile

Dockerized environment to reproduce CVE-2019-16113, a directory traversal and RCE vulnerability in Bludit CMS 3.9.2, with PoC for image upload…

container-securityeducationexploitation+3
6 years ago
jenkinsci__docker-commons-plugin_CVE-2022-20617_1-17 preview

jenkinsci__docker-commons-plugin_CVE-2022-20617_1-17

GitHubshoucheng3/jenkinsci__docker-commons-plugin_cve-2022-20617_1-17

Jenkins plugin providing shared API for Docker credential management, registry authentication, daemon configuration, and image fingerprinting across…

api-securityauthentication-authorizationcloud-infrastructure-security+3
1 year ago
INF8602-CVE-2020-8835 preview

INF8602-CVE-2020-8835

GitHubjohnatag/inf8602-cve-2020-8835

Educational kernel exploit implementation for CVE-2020-8835 with Docker-based testing environment to demonstrate BPF vulnerability exploitation and…

binary-exploitationcontainer-securityeducation+2
3 years ago
fabric8io__kubernetes-client_CVE-2021-4178_5-0-2 preview

fabric8io__kubernetes-client_CVE-2021-4178_5-0-2

GitHubshoucheng3/fabric8io__kubernetes-client_cve-2021-4178_5-0-2

Java client providing fluent DSL access to Kubernetes and OpenShift REST APIs for managing cloud-native infrastructure, pods, services, and…

api-securityauthentication-authorizationcloud-infrastructure-security+3
1 year ago
CVE-2024-36539 preview

CVE-2024-36539

GitHubabdurahmon3236/cve-2024-36539

PoC exploit for insecure permissions in Contour v1.28.3 that retrieves a Kubernetes service account token and accesses the cluster API, demonstrating…

cloud-securitycontainer-securityexploitation+5
2 years ago
CVE-2024-3094 preview

CVE-2024-3094

GitHubmightysai1997/cve-2024-3094

Shell scripts to detect CVE-2024-3094 backdoor in liblzma5 across Kubernetes pods and Docker containers, with SBOM generation via Trivy for…

cloud-securitycontainer-securitydevsecops+3
2 years ago
CVE-2024-41110-SCAN preview

CVE-2024-41110-SCAN

GitHubpauloparopp/cve-2024-41110-scan

Python-based scanner that checks Docker hosts for CVE-2024-41110 by detecting vulnerable Docker versions and AuthZ plugin usage.

cloud-securitycontainer-securityexploitation+3
2 years ago
CVE-2019-5736-Dockerattack-and-security-mechanism preview

CVE-2019-5736-Dockerattack-and-security-mechanism

GitHubsonyavalo/cve-2019-5736-dockerattack-and-security-mechanism

In this project, we found a recent attack through the malicious container and implemented a security mechanism to stop it.

container-escapecontainer-securityeducation+3
1 year ago
CVE-2021-41773 preview

CVE-2021-41773

GitHublayarkacasiber/cve-2021-41773

Docker-based lab environment for CVE-2021-41773 (Apache HTTP Server 2.4.49) path traversal and RCE exploitation with step-by-step setup instructions.

container-securityeducationexploitation+3
4 years ago
CVE-2021-42013 preview

CVE-2021-42013

GitHublayarkacasiber/cve-2021-42013

Docker-based lab environment for exploiting CVE-2021-42013 (Apache HTTP Server path traversal and RCE) with step-by-step setup instructions for…

container-securityeducationexploitation+3
4 years ago
cve preview

cve

GitHubcrazycatmyopic/cve

Reproducible example demonstrating CVE-2024-26308 vulnerability detection during Docker builds, with Maven dependency tree analysis and remediation…

code-analysiscontainer-securityeducation+2
2 years ago
kubernetes-client__java_CVE-2020-8570_client-java-parent-9_0_2_fixed preview

kubernetes-client__java_CVE-2020-8570_client-java-parent-9_0_2_fixed

GitHubshoucheng3/kubernetes-client__java_cve-2020-8570_client-java-parent-9_0_2_fixed

Java client library for the Kubernetes API, enabling programmatic management of clusters, pods, deployments, and other resources with support for…

api-securityauthentication-authorizationcloud-infrastructure-security+3
10 months ago
OpenShell preview

OpenShell

GitHubnvidia/openshell

Sandboxed runtime for autonomous AI agents with declarative YAML policies enforcing filesystem, network, and process constraints, plus endpoint-bound…

ai-securityauthentication-authorizationcloud-security+7
8.6k1 day ago
Previous1…212223…47Next