Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

52 results

whalescan

nccgroup/whalescan

Whalescan is a vulnerability scanner for Windows containers, which performs several benchmark checks, as well as checking for CVEs/vulnerable…

container-securitydevsecopsmisconfiguration+2

156

3 years ago

whalescan

saira-h/whalescan

Vulnerability scanner for Windows containers

cloud-securitycontainer-securitymisconfiguration+1

76 years ago

keyhog

santhreal/keyhog

Open-source secret scanner in Rust

cloud-securitycode-analysisconfiguration-auditing+8

9815h 27m ago

vuls

future-architect/vuls

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

cloud-securityconfiguration-auditingcontainer-security+5

12.2k1 day ago

divd-2021-00038--log4j-scanner

dtact/divd-2021-00038--log4j-scanner

Recursive vulnerability scanner for Log4j CVEs in archives and Docker images. Detects JndiLookup.class and vulnerable versions via SHA256 hashes,…

cloud-securitycontainer-securitydevsecops+3

464 years ago

CVE-2025-9074

zenzue/cve-2025-9074

Proof-of-concept exploit for CVE-2025-9074 demonstrating container-to-host file write via exposed Docker Engine API on Windows. For authorized…

cloud-securitycontainer-escapecontainer-security+6

101 year ago

CVE-2020-11492

crackercat/cve-2020-11492

Proof-of-concept exploit for Docker Desktop for Windows privilege escalation (CVE-2020-11492). Uses named pipe impersonation to steal SYSTEM token…

container-securityexploitationprivilege-escalation+1

26 years ago

CVE-2020-11493

fengjixuchui/cve-2020-11493

Proof-of-concept for Docker Desktop for Windows privilege escalation (CVE-2020-11492). Exploits named pipe impersonation to achieve SYSTEM-level…

container-securityexploitationprivilege-escalation+1

16 years ago

cve-2025-24514

kimjuhyeong95/cve-2025-24514

Remote vulnerability scanner for CVE-2025-24514, an ingress-nginx auth-url injection leading to NGINX config manipulation and potential RCE.…

cloud-securitycontainer-securityexploitation+3

1 year ago

installer

mondoohq/installer

Linux, macOS and Windows Install scripts for cnquery & cnspec

cloud-securitycontainer-securitygeneral-purpose-utilities+1

831 day ago

cve-2019-5737

beelzebruh/cve-2019-5737

Exploit for CVE-2019-5737, a Docker runc container escape vulnerability, with build and run instructions for Linux and Windows.

cloud-securitycontainer-escapecontainer-security+3

7 years ago

CVE-2025-1974

zsxen/cve-2025-1974

Windows 11-first educational lab for studying CVE-2025-1974 in ingress-nginx. Provides safe attack emulation and defense validation with local…

cloud-securitycontainer-securitydefensive-tools+7

4 months ago

SpoolSploit

beetlechunks/spoolsploit

A collection of Windows print spooler exploits containerized with other utilities for practical exploitation.

container-securityexploitationexploit-frameworks+4

5525 years ago

CVE-2023-36723

wh04m1001/cve-2023-36723

Proof-of-concept exploit for CVE-2023-36723, an arbitrary directory creation vulnerability in Windows Container Manager, enabling privilege…

container-securityexploitationlateral-movement+2

672 years ago

SharkTooth

znakar/sharktooth

Port Scanner with Docker & Prometheus + Grafana integration. A tool for network auditing with multithreading support and real-time monitoring.

container-securitydevsecopsnetwork-mapping+2

41 month ago

CVE-2025-9074-Docker-Desktop-Container-Escape

ptechamanja/cve-2025-9074-docker-desktop-container-escape

Proof of concept exploit for CVE-2025-9074 - Unauthenticated Docker Engine API container escape affecting Docker Desktop < 4.44.3 on Windows and…

cloud-securitycontainer-escapecontainer-security+4

28 months ago

openclaw-dashboard

tugcantopaloglu/openclaw-dashboard

🔐 Secure, real-time monitoring dashboard for OpenClaw AI agents. Auth, TOTP MFA, cost tracking, live feed, memory browser and more.

api-securityauthenticationcloud-security+7

6995 months ago

windows

dockur/windows

Run Windows inside a Docker container with KVM acceleration, automatic installation, and customizable resources. Supports multiple Windows versions,…

cloud-securitycontainer-securitygeneral-purpose-utilities+1

53.0k13h 41m ago

Previous12 3 Next