Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
54 results
redStack preview

redStack

GitHubdevzero-security/redstack

Terraform-deployed red team operator lab on AWS: Mythic, Sliver, and Adaptix C2 behind a production-style Apache redirector, with Kali/Windows hosts…

cloud-infrastructure-securitycommand-and-controleducation+8
286
27 days ago
pfsense-bsnmpd-conf preview

pfsense-bsnmpd-conf

GitHubabraxas/pfsense-bsnmpd-conf

pfSense CE 2.9.0-DEVELOPMENT - Medium - Remote - Config injection - bsnmpd syslocation

configuration-auditingexploitationlabs-practice+5
14 days ago
pfsense-cp-maxprocperip preview

pfsense-cp-maxprocperip

GitHubabraxas/pfsense-cp-maxprocperip

pfSense CE 2.9.0-DEVELOPMENT - High - Remote - Config injection - CP maxprocperip nginx

configuration-auditingexploitationlabs-practice+4
14 days ago
pfsense-limiter-aqm preview

pfsense-limiter-aqm

GitHubabraxas/pfsense-limiter-aqm

pfSense CE 2.9.0-DEVELOPMENT - Medium - Remote - Config injection - limiter AQM newline

configuration-auditingexploitationlabs-practice+5
14 days ago
pfsense-ntp-gps-fudge preview

pfsense-ntp-gps-fudge

GitHubabraxas/pfsense-ntp-gps-fudge

pfSense CE 2.9.0-DEVELOPMENT - Medium - Remote - Config injection - NTP GPS/PPS fudge

configuration-auditingexploitationlabs-practice+4
14 days ago
opnsense-ntp-gps-fudge preview

opnsense-ntp-gps-fudge

GitHubabraxas/opnsense-ntp-gps-fudge

OPNsense 26.7.6 - High - Remote - Config line injection - NTP GPS fudge

configuration-auditingexploitationlabs-practice+4
15 days ago
opnsense-tunables-loader preview

opnsense-tunables-loader

GitHubabraxas/opnsense-tunables-loader

OPNsense 26.7.6 - High - Remote - Config line injection - tunables loader

configuration-auditingexploitationlabs-practice+4
15 days ago
opnsense-wlan-wpa-line preview

opnsense-wlan-wpa-line

GitHubabraxas/opnsense-wlan-wpa-line

OPNsense 26.7.6 - High - Remote - Config line injection - WLAN WPA identity

configuration-auditingexploitationlabs-practice+4
15 days ago
wazuhlabproject preview

wazuhlabproject

GitHubswastiksagar/wazuhlabproject

Hands-on Wazuh SIEM/XDR home lab covering OVA deployment, agent enrollment, file integrity monitoring, VirusTotal malware detection, and MITRE ATT&CK…

configuration-auditingdefensive-toolsdigital-forensics+7
33 months ago
vsftpd-cmds-denied-alias preview

vsftpd-cmds-denied-alias

GitHubabraxas/vsftpd-cmds-denied-alias

vsftpd 3.0.5 - High - Remote - Privilege leftover - cmds_denied misses RFC aliases (XRMD)

configuration-auditingdefensive-toolsexploitation+5
16 days ago
redStackPRO preview

redStackPRO

GitHubdevzero-security/redstackpro

A canvas for red team infrastructure and cyber ranges. Compose a topology, export runnable Terraform and Ansible, and deploy it yourself. Your cloud…

cloud-infrastructure-securitycloud-securitycommand-and-control+8
16622 days ago
JavaSecLab preview

JavaSecLab

GitHubwhgojp/javaseclab

Comprehensive Java vulnerability lab with vulnerable and fixed code, attack scenarios, source/sink audit notes, and secure coding guidance for…

code-analysisctfdevsecops+6
8854 months ago
security-operations-labs preview

security-operations-labs

GitHubelihiho/security-operations-labs

Threat Modeling, IT-/OT-Segmentierung, Snort Detection und reproduzierbare Validierung eines Drupal-Detection-Profils.

configuration-auditingcurated-resourceseducation+5
3 months ago
CVE-2026-3288-lab preview

CVE-2026-3288-lab

GitHubbvabhishek/cve-2026-3288-lab

Docker-based vulnerable lab for CVE-2026-3288 NGINX Ingress configuration injection, with exploit scripts, detection monitoring, and remediation…

cloud-infrastructure-securityconfiguration-auditingcontainer-security+6
16 months ago
CVE-2026-78122-POC preview

CVE-2026-78122-POC

GitHublegendile7/cve-2026-78122-poc

Proof-of-concept exploit for CVE-2026-78122, demonstrating container filesystem and environment variable exfiltration through docker-socket-proxy's…

configuration-auditingcontainer-securitydata-exfiltration+3
2 months ago
LOAD preview

LOAD

GitHub0xballpoint/load

Lord Of Active Directory - automatic vulnerable active directory on AWS

cloud-infrastructure-securityeducationlabs-practice+3
1563 years ago
Windows-Local-Privilege-Escalation-Cookbook preview

Windows-Local-Privilege-Escalation-Cookbook

GitHubnickvourd/windows-local-privilege-escalation-cookbook

Windows Local Privilege Escalation Cookbook

configuration-auditingeducationexploitation+9
1.4k8 months ago
SystemVulnerabilityChecklist_Project4_Decodelabs preview

SystemVulnerabilityChecklist_Project4_Decodelabs

GitHubirsaattiquecyber/systemvulnerabilitychecklist_project4_decodelabs

System Vulnerability Checklist & Network Security Hardening project featuring reconnaissance, vsFTPd backdoor analysis (CVE-2011-2523), and active…

configuration-auditingeducationlabs-practice+5
2 months ago
Previous123Next