Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
408 results
Juiceshopgl preview

Juiceshopgl

GitLabmbrandner-group/juiceshopgl

Intentionally vulnerable web application for security training, CTF competitions, and testing security tools. Covers OWASP Top Ten vulnerabilities…

ctfeducationlabs-practice+5
1 year ago
CVE-2017-0144---EtneralBlue-MS17-010-Remote-Code-Execution preview

CVE-2017-0144---EtneralBlue-MS17-010-Remote-Code-Execution

GitHubeesshq/cve-2017-0144---etneralblue-ms17-010-remote-code-execution

Step-by-step guide to exploiting MS17-010 EternalBlue vulnerability on Windows Server 2008 R2, including reconnaissance, exploitation,…

educationexploitationlabs-practice+8
185 years ago
Exfiltrated-Machine-Walkthrough---Subrion-CMS-CVE-2021-2220- preview

Exfiltrated-Machine-Walkthrough---Subrion-CMS-CVE-2021-2220-

GitHubnyambiblaise/exfiltrated-machine-walkthrough---subrion-cms-cve-2021-2220-

Step-by-step walkthrough for exploiting Subrion CMS via CVE-2021-2220 on an OffSec lab machine, covering web application exploitation and flag…

ctfeducationlabs-practice+3
8 months ago
kali-CVE-2019-0708-lab preview

kali-CVE-2019-0708-lab

GitHubbibo318/kali-cve-2019-0708-lab

Lab environment for exploiting CVE-2019-0708 (BlueKeep) vulnerability on Kali Linux, providing hands-on practice for penetration testing and…

educationexploitationlabs-practice+2
4 years ago
intel471-threat-hunting-cve-2023-46604 preview

intel471-threat-hunting-cve-2023-46604

GitHubnavya240/intel471-threat-hunting-cve-2023-46604

My first hands-on Intel 471 threat hunting workshop experience investigating CVE-2023-46604 using Elastic SIEM, vulnerability intelligence, and…

educationincident-responselabs-practice+3
4 months ago
f8x preview

f8x

GitHubffffffff0x/f8x

红/蓝队环境自动化部署工具 | Red/Blue team environment automation deployment tool

cloud-securityctfdevsecops+7
2.2k1 month ago
CVE-2026-52199 preview

CVE-2026-52199

GitHublamaper/cve-2026-52199

Proof-of-concept exploit for CVE-2026-52199: unauthenticated remote code execution via exposed ADB daemon on UZ801 4G LTE router. Includes…

educationexploitationlabs-practice+5
2 months ago
CVE-2021-44228-white-box preview

CVE-2021-44228-white-box

GitHubhotpotcookie/cve-2021-44228-white-box

Log4j vulner testing environment based on CVE-2021-44228. It provide guidance to build the sample infrastructure and the exploit scripts. Supporting…

educationexploitationlabs-practice+3
33 years ago
React2Shell-CVE-Lab preview

React2Shell-CVE-Lab

GitHubxxxtectationxxx/react2shell-cve-lab

A self-hosted vulnerable Next.js environment running on Docker for simulating CVE-2025-55182. Built for educational security research and CTF…

container-securityctfeducation+6
19 months ago
CVE-2024-24919-Incident-Report.md preview

CVE-2024-24919-Incident-Report.md

GitHubcyprianatsyor/cve-2024-24919-incident-report.md

Detailed incident report analyzing CVE-2024-24919 arbitrary file read exploit on Check Point Security Gateway, including technical analysis, response…

digital-forensicseducationincident-response+3
1 year ago
CVE-2025-32462_32463-Lab preview

CVE-2025-32462_32463-Lab

GitHubmaaythm/cve-2025-32462_32463-lab

Docker PoC for CVE-2025-32462 & CVE-2025-32463 (sudo), based on Stratascale CRU research.

educationexploitationlabs-practice+3
51 year ago
cve-2025-24054-lab preview

cve-2025-24054-lab

GitHubt0tooro/cve-2025-24054-lab

Blue-team lab: detecting & mitigating CVE-2025-24054 (Windows NTLM hash disclosure) with Sysmon, Wazuh SIEM, and Group Policy

authenticationconfiguration-auditingeducation+7
2 months ago
GrafanaSCIMalform preview

GrafanaSCIMalform

GitHubi3r1h0n/grafanascimalform

Exploit and test stand for CVE-2025-41115

educationexploitationlabs-practice+3
9 months ago
rust-reversing-workshop-recon-2024 preview

rust-reversing-workshop-recon-2024

GitHubcxiao/rust-reversing-workshop-recon-2024

Slides and files for the Reversing Rust Binaries: One step beyond strings workshop at REcon 2024, presented on June 28, 2024.

binary-analysiseducationlabs-practice+1
802 years ago
azure-sentinel-detection-engineering preview

azure-sentinel-detection-engineering

GitHubibondarenko1/azure-sentinel-detection-engineering

9 MITRE ATT&CK-mapped KQL detections on a live Microsoft Sentinel + Defender XDR environment (control-plane, endpoint, identity), with a PR-gated…

cloud-securityconfiguration-auditingdevsecops+4
51 month ago
CVE-2026-35194 preview

CVE-2026-35194

GitHubdexsemon/cve-2026-35194

Proof-of-concept exploit and Docker lab for CVE-2026-35194, an Apache Flink SQL code injection enabling remote code execution on TaskManagers via the…

educationexploitationlabs-practice+5
2 months ago
vm-homelab-log4shell-assessment preview

vm-homelab-log4shell-assessment

GitHubyili-soc/vm-homelab-log4shell-assessment

Full-lifecycle vulnerability management on a live Log4Shell (CVE-2021-44228) target — scan, manual exploitation, network detection, and remediation…

educationexploitationintrusion-detection+7
1 month ago
CVE-2024-49113 preview

CVE-2024-49113

GitHubalphatin123/cve-2024-49113

FYP: Reproduced CVE-2024-49113 PoC on Windows Server 2019 (ref. SafeBreach); assessed Windows EDR detection gaps and produced ISO 27001-aligned…

educationexploitationincident-response+3
12 months ago
Previous1…151617…23Next