Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
69 results
horrors-log4shell preview

horrors-log4shell

GitHubtasooshi/horrors-log4shell

Micro lab for CVE-2021-44228 (Log4Shell) with automated multi-target exploitation, runtime payload generation, and adjustable bypasses for security…

exploitationlabs-practicepayload-generation+3
2
4 years ago
CVE-2026-49042 preview

CVE-2026-49042

GitHuboscerd/cve-2026-49042

Reproducer for CVE-2026-49042: demonstrates prompt injection in Apache Camel's langchain4j-tools leading to RCE via unfiltered Exchange headers.…

ai-securitycode-analysiseducation+5
11 month ago
exploit-CVE-2014-6271 preview

exploit-CVE-2014-6271

GitHubopsxcq/exploit-cve-2014-6271

Docker-based Shellshock (CVE-2014-6271) exploit environment with ready-to-use attack scripts for CGI, SSH, and DHCP vectors. Includes vulnerable Bash…

container-securityeducationexploitation+3
2318 years ago
CVE-2021-41773 preview

CVE-2021-41773

GitHubblasty/cve-2021-41773

Docker-based playground for testing CVE-2021-41773, demonstrating local file disclosure and remote code execution in Apache HTTPd 2.4.49.

container-securityeducationexploitation+3
2114 years ago
cve-2022-42889-text4shell-docker preview

cve-2022-42889-text4shell-docker

GitHubkarthikuj/cve-2022-42889-text4shell-docker

Dockerized proof-of-concept for CVE-2022-42889 (Text4Shell) with script, DNS, and URL lookup-based RCE payloads for security testing and education.

container-securityeducationexploitation+3
763 years ago
CVE-2021-41773 preview

CVE-2021-41773

GitHubblueteamsteve/cve-2021-41773

Provides vulnerable Docker images for CVE-2021-41773 (Apache path traversal) with PoCs for file read and RCE, enabling security testing and practice.

container-securityeducationexploitation+3
234 years ago
CVE-2021-40438 preview

CVE-2021-40438

GitHubsixpacksecurity/cve-2021-40438

Proof-of-concept exploit for CVE-2021-40438 (Apache mod_proxy SSRF) with Docker-based vulnerable environment for testing and validation.

container-securityexploitationpenetration-testing+2
154 years ago
CVE-2018-11776 preview

CVE-2018-11776

GitHubbhdresh/cve-2018-11776

Dockerized vulnerable environment for CVE-2018-11776 with proof-of-concept exploits, enabling hands-on testing of Apache Struts2 remote code…

container-securityeducationexploitation+3
128 years ago
CVE-2025-32375 preview

CVE-2025-32375

GitHubthegebirge/cve-2025-32375

PoC exploit for CVE-2025-32375 targeting BentoML 1.4.7, with a Docker-based vulnerable environment for testing and verification of the remote code…

container-securityexploitationpenetration-testing+2
31 year ago
CVE-2025-24813 preview

CVE-2025-24813

GitHubalpereny-cs/cve-2025-24813

Hands-on lab environment for testing Apache Tomcat unauthenticated RCE (CVE-2025-24813) with Docker setup and step-by-step exploitation guide.

container-securityeducationexploitation+4
31 year ago
cve-2018-11776-docker preview

cve-2018-11776-docker

GitHubtuxotron/cve-2018-11776-docker

Dockerized proof-of-concept exploit for CVE-2018-11776 (Apache Struts2) with a Go-based command execution payload for penetration testing and…

container-securityexploitationpayload-development+3
37 years ago
OwnCloud-CVE-2023-49103 preview

OwnCloud-CVE-2023-49103

GitHubmerlin-ke/owncloud-cve-2023-49103

Dockerized exploit for OwnCloud CVE-2023-49103, providing a ready-to-use container for testing and validating the vulnerability in web application…

container-securityexploitationpenetration-testing+2
12 years ago
CVE-2025-53770 preview

CVE-2025-53770

GitHubj4ck3lsyn-gen2/cve-2025-53770

Isolated research lab and proof-of-concept for validating a SharePoint deserialization vulnerability (CVE-2025-53770) with a Python exploit driver,…

container-securityeducationexploitation+5
15 months ago
CVE-2021-44228 preview

CVE-2021-44228

GitHubsrcporter/cve-2021-44228

Deliberately vulnerable Spring Boot application containing the Log4Shell (CVE-2021-44228) remote code execution vulnerability for controlled security…

container-securityeducationexploitation+3
12 years ago
CVE-2023-30212-LAB preview

CVE-2023-30212-LAB

GitHubkuttappu123/cve-2023-30212-lab

Hands-on lab environment for exploiting CVE-2023-30212, a stored XSS vulnerability in OURPHP ≤7.2.0, using Docker containers for safe penetration…

container-securityeducationexploitation+3
13 years ago
React2Shell-CVE-2025-55182-Testing-Environment preview

React2Shell-CVE-2025-55182-Testing-Environment

GitHubabcfabian/react2shell-cve-2025-55182-testing-environment

A containerized testing environment for CVE-2025-55182, a critical (10.0 CVSS) Remote Code Execution vulnerability in React Server Components.

container-securityeducationexploitation+4
18 months ago
CVE-2018-15133-laravel-framework preview

CVE-2018-15133-laravel-framework

GitHubflame-11/cve-2018-15133-laravel-framework

Reproducible Docker lab for CVE-2018-15133 (Laravel Framework token unserialize RCE) with a known APP_KEY and a /poc route for testing exploit…

container-securityeducationexploitation+3
7 months ago
CVE-2025-55182 preview

CVE-2025-55182

GitHubmivmi/cve-2025-55182

Educational proof-of-concept exploit for CVE-2025-55182 targeting a React application, with Docker Compose environment for local testing and security…

container-securityeducationexploitation+3
18 months ago
Previous1234Next