Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

29 results

CVE-2025-1094-PoC-Postgre-SQLi

ishwardeepp/cve-2025-1094-poc-postgre-sqli

Proof-of-concept emulation and analysis of CVE-2025-1094, a critical PostgreSQL SQL injection vulnerability. Includes Docker-based lab setup, exploit…

code-analysisdatabase-securityeducation+5

1 year ago

HTB-NanoCorp-CVE-2024-0670

dfdxarjy/htb-nanocorp-cve-2024-0670

PowerShell exploit for CVE-2024-0670, abusing CheckMK Agent MSI repair to escalate from low-privileged user to SYSTEM on Windows targets. Designed…

binary-exploitationctfeducation+5

2 months ago

PoC---CVE-2023-26482-RCE-LAB-Nextcloud

isabbii/poc---cve-2023-26482-rce-lab-nextcloud

Docker-based lab reproducing CVE-2023-26482 (Nextcloud RCE) with automated exploit script for educational vulnerability analysis and exploitation…

educationexploitationlabs-practice+5

6 months ago

PoC-Apache-CVE-2021-41773-Infrastructure-LAB

isabbii/poc-apache-cve-2021-41773-infrastructure-lab

Docker-based lab for Apache CVE-2021-41773 path traversal and RCE exploitation with Python exploit script, demonstrating vulnerability analysis and…

container-securityeducationexploitation+4

6 months ago

CVE-2026-46645-Analysis-Lab

rootdirective-sec/cve-2026-46645-analysis-lab

Docker-based lab for reproducing CVE-2026-46645, an authorization bypass in SQLAdmin's ajax_lookup endpoint. Includes vulnerable and patched targets,…

api-security-testingeducationlabs-practice+3

2 months ago

Archived

cve-2025-32433_rce_exploit

giriaryan694-a11y/cve-2025-32433_rce_exploit

This exploit script is designed to simplify exploitation of the Erlang/OTP SSH vulnerability CVE-2025-32433 in the TryHackMe lab environment.

binary-exploitationeducationexploitation+5

8 months ago

POC_CVE-2026-35037

fineman999/poc_cve-2026-35037

Local isolated reproduction lab for CVE-2026-35037, an unauthenticated SSRF vulnerability in Ech0's GET /api/website/title endpoint. Includes Docker…

educationexploitationlabs-practice+3

3 months ago

CVE-2025-11262-Lab

rootdirective-sec/cve-2025-11262-lab

Docker lab for reproducing CVE-2025-11262, an unauthenticated stored blind XSS in Link Whisper Free WordPress plugin. Includes vulnerable and patched…

ctfeducationlabs-practice+3

2 months ago

Microsoft-Defender-for-Endpoint-Deployment-on-Windows-10-11-device

kamalideenak/microsoft-defender-for-endpoint-deployment-on-windows-10-11-device

This repository documents how deployment of Microsoft Defender for Endpoint on a Windows 11 device, including onboarding via local script, enabling…

configuration-auditingdefensive-toolseducation+4

11 months ago

CVE-2007-4559-lab

jithinodattu/cve-2007-4559-lab

Self-contained Docker lab demonstrating CVE-2007-4559 (TarSlip) directory traversal via Python's tarfile module. Includes vulnerable and fixed APIs,…

binary-exploitationcode-analysisctf+6

4 months ago

CVE-2024-10924-Bypass-MFA-Wordpress-LAB

d1se0/cve-2024-10924-bypass-mfa-wordpress-lab

Lab environment and exploit script for CVE-2024-10924, demonstrating MFA bypass in WordPress via the Really Simple SSL plugin's skip_onboarding…

authenticationctfeducation+5

41 year ago

CVE-2026-44656

cryingn/cve-2026-44656

Reproduction environment for CVE-2026-44656, a Vim modeline command injection vulnerability. Includes Docker setup, PoC file, and exploit script to…

binary-exploitationeducationexploitation+2

13 months ago

hackviser_labs_CVE-2015-3306

cybersensei-eh/hackviser_labs_cve-2015-3306

This is a customized script to help solve the lab on remote code execution under the CVE-2015-3306 lab.

educationexploitationlabs-practice+3

19 months ago

linux-copy-fail-CVE-2026-31431

adilkurtulmus/linux-copy-fail-cve-2026-31431

Proof-of-concept exploit for CVE-2026-31431 (Copy-Fail), a Linux kernel AF_ALG and splice() flaw enabling page cache poisoning and local privilege…

binary-exploitationeducationexploitation+4

3 months ago

CVE-2026-39987-lab-or-marimo-cve-lab

dhiaelhak-rached/cve-2026-39987-lab-or-marimo-cve-lab

Educational Docker lab demonstrating CVE-2026-39987, a pre-auth RCE via WebSocket authentication bypass in marimo, with exploit script and patch…

authentication-authorizationeducationexploitation+4

4 months ago

CVE-2026-33626-Lab

rootdirective-sec/cve-2026-33626-lab

Docker Compose lab reproducing CVE-2026-33626 SSRF in LMDeploy's vision-language image loader. Compares vulnerable (0.12.0) and patched (0.12.3)…

ai-securityctfeducation+3

3 months ago

LabAutomationCVE-2021-43798

mauricelambert/labautomationcve-2021-43798

This script implements a lab automation where I exploit CVE-2021-43798 to steal user secrets and then gain privileges on a Linux system.

educationexploitationlabs-practice+4

3 years ago

ADLab

browninfosecguy/adlab

Active Directory Lab for Penetration Testing

educationlabs-practicepenetration-testing

571 year ago

Previous12 Next