Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
1667 results
wargame_Re-LS preview

wargame_Re-LS

GitHubm0d0ri205/wargame_re-ls

CTF challenge exploiting CVE-2025-0184 DOCX SSRF vulnerability to access internal admin service and retrieve a flag. Includes exploit generator and…

ctfeducationexploitation+3
1
1 year ago
flare-vm preview

flare-vm

GitHubmandiant/flare-vm

A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on…

binary-analysisdebuggersdigital-forensics+10
9.2k20 days ago
cve-2026-23398-poc preview

cve-2026-23398-poc

GitHubzpol/cve-2026-23398-poc

Reproducible lab for CVE-2026-23398, a Linux kernel NULL dereference in icmp_tag_validation() triggered by ICMP Fragmentation Needed packets, causing…

educationexploitationfuzzing+3
16 months ago
reternal-quickstart preview
Archived

reternal-quickstart

GitHubd3vzer0/reternal-quickstart

Repo containing docker-compose files and setup scripts without having to clone the individual reternal components

command-and-controleducationlabs-practice+3
1115 years ago
ctf-screenshotter preview

ctf-screenshotter

GitHubliveoverflow/ctf-screenshotter

CTF web challenge simulating a real-world screenshotting vulnerability, with Docker setup and video writeup for hands-on security education.

ctfeducationlabs-practice+1
2255 years ago
CVE-2021-41773 preview

CVE-2021-41773

GitHubitsecurityco/cve-2021-41773

Proof-of-concept exploit for Apache HTTP Server path traversal vulnerability CVE-2021-41773, with Docker setup and detailed vulnerability analysis.

educationexploitationpenetration-testing+3
124 years ago
redis-CVE-2025-49844 preview

redis-CVE-2025-49844

GitHublastvocher/redis-cve-2025-49844

Educational lab environment with a proof-of-concept exploit for CVE-2025-49844 (RediShell), a critical use-after-free in Redis Lua interpreter,…

educationexploitationlabs-practice+2
141 year ago
CVE-2025-32433-PoC preview

CVE-2025-32433-PoC

GitHubniteeshpujari/cve-2025-32433-poc

Proof-of-concept exploit for CVE-2025-32433, enabling unauthenticated remote code execution in Erlang/OTP SSH. Includes Docker setup and reverse…

ctfeducationexploitation+3
71 year ago
CVE-2021-41773 preview

CVE-2021-41773

GitHubjbovet/cve-2021-41773

Proof-of-concept exploit for Apache HTTP Server 2.4.49 path traversal vulnerability (CVE-2021-41773) with Docker setup and multiple exploitation…

educationexploitationinformation-gathering+3
45 years ago
CVE-2023-7172 preview

CVE-2023-7172

GitHubsharathc213/cve-2023-7172

Intentionally vulnerable Hospital Management System demonstrating SQL injection (CVE-2023-7172) with Docker setup and PoC for educational security…

educationexploitationlabs-practice+3
62 years ago
CVE-2025-49844 preview

CVE-2025-49844

GitHubpedrorichil/cve-2025-49844

Educational lab environment demonstrating CVE-2025-49844 (RediShell) in Redis. Includes Docker setup, exploit PoC script, and security…

educationexploitationlabs-practice+3
61 year ago
android-kernel-exploitation-ashfaq-CVE-2019-2215 preview

android-kernel-exploitation-ashfaq-CVE-2019-2215

GitHubqre0ct/android-kernel-exploitation-ashfaq-cve-2019-2215

android-kernel-exploitation-ashfaq-CVE-2019-2215 docker setup for mac users

android-securitybinary-exploitationeducation+3
76 years ago
CVE-2020-10770-keycloak-exploit-poc preview

CVE-2020-10770-keycloak-exploit-poc

GitHub0xlyvio/cve-2020-10770-keycloak-exploit-poc

Step-by-step guide to reproduce the Keycloak blind SSRF vulnerability (CVE-2020-10770) with Docker setup, listener configuration, and mitigation…

educationexploitationpenetration-testing+3
21 month ago
cve-2019-9787_csrf_poc preview

cve-2019-9787_csrf_poc

GitHubrkatogit/cve-2019-9787_csrf_poc

Proof-of-concept exploit for CVE-2019-9787, demonstrating CSRF-to-RCE in WordPress 5.0 via comment injection. Includes Docker setup for isolated…

educationexploitationpenetration-testing+2
27 years ago
CVE-2023-7173 preview

CVE-2023-7173

GitHubsharathc213/cve-2023-7173

Proof-of-concept for CVE-2023-7173, a stored XSS in Hospital Management System 1.0, with Docker setup and reproduction steps.

educationexploitationvulnerability-analysis+2
32 years ago
CVE-2022-42889 preview

CVE-2022-42889

GitHubhumbss/cve-2022-42889

Demonstration application for CVE-2022-42889 (Apache Commons Text RCE) with Docker setup and netcat-based command execution for security testing and…

educationexploitationlabs-practice+2
24 years ago
CVE-2026-44656 preview

CVE-2026-44656

GitHubcryingn/cve-2026-44656

Reproduction environment for CVE-2026-44656, a Vim modeline command injection vulnerability. Includes Docker setup, PoC file, and exploit script to…

binary-exploitationeducationexploitation+2
15 months ago
Demo_CVE-2025-3248 preview

Demo_CVE-2025-3248

GitHubkiraly07/demo_cve-2025-3248

Educational lab simulating CVE-2025-3248 with a vulnerable Docker service and PoC exploit for hands-on security training and mitigation practice.

container-securityeducationexploitation+3
21 year ago
Previous12…93Next