Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

950 results

wargame_Re-LS

m0d0ri205/wargame_re-ls

CTF challenge exploiting CVE-2025-0184 DOCX SSRF vulnerability to access internal admin service and retrieve a flag. Includes exploit generator and…

ctfeducationexploitation+3

1 year ago

cve-2026-23398-poc

zpol/cve-2026-23398-poc

Reproducible lab for CVE-2026-23398, a Linux kernel NULL dereference in icmp_tag_validation() triggered by ICMP Fragmentation Needed packets, causing…

educationexploitationfuzzing+3

14 months ago

Archived

reternal-quickstart

d3vzer0/reternal-quickstart

Repo containing docker-compose files and setup scripts without having to clone the individual reternal components

command-and-controleducationlabs-practice+3

1115 years ago

ctf-screenshotter

liveoverflow/ctf-screenshotter

CTF web challenge simulating a real-world screenshotting vulnerability, with Docker setup and video writeup for hands-on security education.

ctfeducationlabs-practice+1

2245 years ago

redis-CVE-2025-49844

lastvocher/redis-cve-2025-49844

Educational lab environment with a proof-of-concept exploit for CVE-2025-49844 (RediShell), a critical use-after-free in Redis Lua interpreter,…

educationexploitationlabs-practice+2

1411 months ago

CVE-2023-7172

sharathc213/cve-2023-7172

Intentionally vulnerable Hospital Management System demonstrating SQL injection (CVE-2023-7172) with Docker setup and PoC for educational security…

educationexploitationlabs-practice+3

62 years ago

CVE-2025-49844

pedrorichil/cve-2025-49844

Educational lab environment demonstrating CVE-2025-49844 (RediShell) in Redis. Includes Docker setup, exploit PoC script, and security…

educationexploitationlabs-practice+3

611 months ago

android-kernel-exploitation-ashfaq-CVE-2019-2215

qre0ct/android-kernel-exploitation-ashfaq-cve-2019-2215

android-kernel-exploitation-ashfaq-CVE-2019-2215 docker setup for mac users

android-securitybinary-exploitationeducation+3

76 years ago

CVE-2026-24061-setup

shivam-bathla/cve-2026-24061-setup

Docker setup for CVE-2026-24061

authentication-authorizationexploitationlabs-practice+2

47 months ago

CVE-2022-42889

humbss/cve-2022-42889

Demonstration application for CVE-2022-42889 (Apache Commons Text RCE) with Docker setup and netcat-based command execution for security testing and…

educationexploitationlabs-practice+2

23 years ago

Demo_CVE-2025-3248

kiraly07/demo_cve-2025-3248

Educational lab simulating CVE-2025-3248 with a vulnerable Docker service and PoC exploit for hands-on security training and mitigation practice.

container-securityeducationexploitation+3

211 months ago

CVE-2026-1357

cves-labs/cve-2026-1357

Lab environment and proof-of-concept exploit for CVE-2026-1357, a WordPress plugin vulnerability, with Docker setup and automated exploitation…

educationexploitationlabs-practice+3

4 months ago

CVE-2026-44656

cryingn/cve-2026-44656

Reproduction environment for CVE-2026-44656, a Vim modeline command injection vulnerability. Includes Docker setup, PoC file, and exploit script to…

binary-exploitationeducationexploitation+2

13 months ago

cve-2022-39227-jwt-auth-bypass-demo

melikesraoz/cve-2022-39227-jwt-auth-bypass-demo

Educational lab demonstrating CVE-2022-39227 JWT authentication bypass in python-jwt. Step-by-step attack against vulnerable and patched Flask apps…

authentication-authorizationeducationexploitation+3

13 months ago

CVE-2020-7246

pswalia2u/cve-2020-7246

Lab environment and exploit script for CVE-2020-7246, a PHP code injection vulnerability in qdPM 9.1. Includes Docker setup and Python2-based…

educationexploitationlabs-practice+3

13 years ago

CVE-2015-3306-Home-Lab

netw0rk7/cve-2015-3306-home-lab

CVE-2015-3306 - ProFTPD - RCE Home Lab setup (Docker) easy to use for Red Teaming or Penetration Testing

ctfeducationexploitation+5

9 months ago

CVE-2025-1094-Lab-Setup

pinkarmor/cve-2025-1094-lab-setup

Hands-on lab to exploit CVE-2025-1094, a PostgreSQL psql SQL injection leading to RCE via COPY TO PROGRAM, with Docker setup and reverse shell…

educationexploitationlabs-practice+3

10 months ago

log4shell-homework9

serpilrivas/log4shell-homework9

Log4Shell (CVE-2021-44228) exploit demo for SEAS 8405. Includes a vulnerable Spring Boot app, fake LDAP server, Docker setup, MITRE mapping, incident…

educationexploitationincident-response+3

1 year ago

Previous12…53 Next