Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
238 results
hardening-k8s-containers preview

hardening-k8s-containers

GitHubcyberhades/hardening-k8s-containers

Hands-on lab demonstrating Kubernetes container hardening by comparing default vs. security-enhanced deployments of a vulnerable note-taking…

cloud-securitycontainer-securityeducation+2
5
6 years ago
network-security-lab preview

network-security-lab

GitHubamirmuhammadmarvi/network-security-lab

Controlled virtual attack & defense lab — CVE-2011-2523 exploitation, Nmap recon, Nikto scanning, UFW hardening on Metasploitable 2

configuration-auditingeducationexploitation+7
2 months ago
CVE-2023-44487 preview

CVE-2023-44487

GitHubhirokiii/cve-2023-44487

Educational environment for LTAT.04.022 Homework 4.

configuration-auditingcontainer-securityeducation+4
3 months ago
Docker-Container-CVE-2020-13401 preview

Docker-Container-CVE-2020-13401

GitHubarax-zaeimi/docker-container-cve-2020-13401

Study on CVE-2020-13401 vulnerability of containers in dockers older than 19.03.11

container-securityeducationlabs-practice+3
25 years ago
mi-laboratorio-log4shell preview

mi-laboratorio-log4shell

GitHubmafo-sec/mi-laboratorio-log4shell

Laboratorio automatizado Plug & Play en Docker para auditar y estudiar la vulnerabilidad Log4Shell (CVE-2021-44228)

container-securityeducationexploitation+4
3 months ago
CVE-2025-53770 preview

CVE-2025-53770

GitHubj4ck3lsyn-gen2/cve-2025-53770

Lab & PoC

container-securityeducationexploitation+5
15 months ago
LAB-DFIR-cve-2023-38831 preview

LAB-DFIR-cve-2023-38831

GitHubra3edaj/lab-dfir-cve-2023-38831

d

digital-forensicsdisk-forensicseducation+6
1 year ago
Windows-Local-Privilege-Escalation-Cookbook preview

Windows-Local-Privilege-Escalation-Cookbook

GitHubnickvourd/windows-local-privilege-escalation-cookbook

Windows Local Privilege Escalation Cookbook

configuration-auditingeducationexploitation+9
1.4k6 months ago
DetectionLabELK preview

DetectionLabELK

GitHubcyberdefenders/detectionlabelk

DetectionLabELK is a fork from DetectionLab with ELK stack instead of Splunk.

configuration-auditingdefensive-toolsdigital-forensics+7
5755 years ago
DEFCON-CICD-pipelines-workshop preview

DEFCON-CICD-pipelines-workshop

GitHubwavestone-cdt/defcon-cicd-pipelines-workshop
cloud-securitycontainer-escapecontainer-security+8
943 years ago
CVE-2023-50387 preview

CVE-2023-50387

GitHubknqyf263/cve-2023-50387

KeyTrap (DNSSEC)

dns-analysiseducationexploitation+3
452 years ago
CVE-2026-44578 preview

CVE-2026-44578

GitHubdinosn/cve-2026-44578

CVE-2026-44578: Next.js WebSocket Upgrade SSRF — pre-auth credential theft via localhost:80. Lab + exploit + audit.

cloud-securityeducationexploitation+3
93 months ago
log4j-CVE-2021-44228 preview

log4j-CVE-2021-44228

GitHubkubearmor/log4j-cve-2021-44228

Apache Log4j Zero Day Vulnerability aka Log4Shell aka CVE-2021-44228

cloud-securitycontainer-securityeducation+4
94 years ago
nessus-vulnerability-scanning-lab preview

nessus-vulnerability-scanning-lab

GitHubkingsrule50/nessus-vulnerability-scanning-lab

Enterprise vulnerability management on Azure — Terraform-deployed Nessus scanner, credentialed scanning, CVE-2013-3900 remediation with verified…

cloud-securityconfiguration-auditingdevsecops+4
1 month ago
mcp-attack-detection-sentinel preview

mcp-attack-detection-sentinel

GitHubj-dahl7/mcp-attack-detection-sentinel

Sentinel detection lab for MCP attack chains: CVE-2026-26118 SSRF token theft, tool poisoning, cross-server exfiltration, identity post-exploitation.…

ai-securitycloud-securityeducation+5
225 days ago
Incident-Response-Report-TeamCity-Compromise-CVE-2024-27198- preview

Incident-Response-Report-TeamCity-Compromise-CVE-2024-27198-

GitHubbilalalshiekh912/incident-response-report-teamcity-compromise-cve-2024-27198-

CyberDefenders JetBrains Lab

digital-forensicseducationforensics+6
1 month ago
sk-cve-2026-26030-lab preview

sk-cve-2026-26030-lab

GitHubinertfluid/sk-cve-2026-26030-lab

Ethical, network-isolated Docker lab reproducing CVE-2026-26030 — Semantic Kernel in-memory vector store filter eval() RCE (patched in 1.39.4)

ai-securitybinary-exploitationeducation+5
11 month ago
CVE-2014-3120 preview

CVE-2014-3120

GitHubdungsocool/cve-2014-3120
container-securityeducationexploitation+3
2 months ago
Previous1…101112…14Next