Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

1703 results

screenpipe

screenpipe/screenpipe

YC (S26) | Open Computer History | Record your screen continuously locally and provide context to your agents (Claude, Codex, Openclaw, Hermes,…

ctfcurated-resourceseducation+8

21.2k

4h 3m ago

FreeLabFriday_Labs

blackhillsinfosec/freelabfriday_labs

This repository contains all lab instructions for the following content: Info Sec Core Skills, SOC Core Skills, ADCD Labs, SOC Analyst Labs, & BnB…

ctfdefensive-toolseducation+2

169h 10m ago

superpowers-evals

prime-radiant-inc/superpowers-evals

Behavioral eval lab (Quorum) for the superpowers project that drives real coding-agent CLIs (Claude, Codex, Gemini, Kimi, and more) through a QA…

ai-securityeducationlabs-practice+3

1071 day ago

BreakEscape

cliffe/breakescape

Mountable Rails engine providing 24+ cybersecurity escape room scenarios with randomized passwords, JIT-compiled NPC dialogue, and RESTful API for…

ctfeducationlabs-practice+3

61 day ago

ULTIMATE-CYBERSECURITY-MASTER-GUIDE

pnwcomputers/ultimate-cybersecurity-master-guide

This repository provides a centralized resource for operational cyber defense and offense, compiling Theory, Tools, Operating Procedures, and…

ctfcurated-resourcesdigital-forensics+8

1351 day ago

oss-oopssec-store

koadt/oss-oopssec-store

Security training for the apps you actually ship. Open your browser and start hacking.

ai-securityctfeducation+7

401 day ago

ctf-skills

ljagiello/ctf-skills

Agent skills for solving CTF challenges - web exploitation, binary pwn, crypto, reverse engineering, forensics, OSINT, and more

binary-exploitationcryptographyctf+9

3.1k2 days ago

gha-lab-227431b300

pvharmo2/gha-lab-227431b300

GitHub Actions workflow sandbox for CVE-2023-30628 (changelog.yml command injection)

educationexploitationlabs-practice+2

2 days ago

Explotacion-RCE-Pentesting-BlueKeep-CVE-2019-0708-

sebaspv27/explotacion-rce-pentesting-bluekeep-cve-2019-0708-

Demostración práctica y bitácora técnica de explotación de BlueKeep (CVE-2019-0708) en RDP usando Nmap y Metasploit, documentando la resolución de…

educationexploitationlabs-practice+3

2 days ago

athena

athena-os/athena

Athena OS is a Arch/Nix-based distro focused on Cybersecurity. Learn, practice and enjoy with any hacking tool!

educationlabs-practicelearning-paths-courses+3

1.3k2 days ago

atomic-red-team

redcanaryco/atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

educationlabs-practicepenetration-testing+1

12.5k2 days ago

break-golf

trailofbits/break-golf

Cryptanalysis golf: break schemes and prove it in Lean 4. Proof-of-concept board.

cryptographyctfeducation+2

2 days ago

CVE-2018-5803

splinter0/cve-2018-5803

Vagrant-based lab environment for testing CVE-2018-5803, providing a reproducible setup for vulnerability analysis and exploitation practice.

educationexploitationlabs-practice+2

2 days ago

Basileak

owasp/basileak

Intentionally vulnerable LLM

ai-securityctfeducation+6

112 days ago

cmdchamp

mellen9999/cmdchamp

bash CLI trainer — 30 levels from ls to privilege escalation

ctfeducationforensics+8

123 days ago

CVE-2025-54424

hophtien/cve-2025-54424

CVE-2025-54424: 1Panel TLS client cert bypass enables RCE via forged CN 'panel_client' using a bundled scanning and exploitation tool. Affected: <=…

educationexploitationlabs-practice+3

33 days ago

CVE-2026-10053-lab

dinosn/cve-2026-10053-lab

Reproducible lab for CVE-2026-10053 (GitLab npm package-registry path traversal -> arbitrary file write as git). Vulnerable 19.2.1 vs patched 19.2.2,…

educationexploitationlabs-practice+3

43 days ago

NimbusPWN-CVE-2022-29799-29800

pansyhebephrenic23/nimbuspwn-cve-2022-29799-29800

Demonstrate local privilege escalation in networkd-dispatcher via CVE-2022-29799 and CVE-2022-29800 using this C proof of concept.

educationexploitationlabs-practice+3

4 days ago

Previous12…95 Next