Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems Security
General Purpose Utilities
Indicator of Compromise (IOC) Management
OSINT (Open Source Intelligence)
Packet Sniffing & Analysis
Password Cracking
Penetration Testing Frameworks
Phishing Tools
Privilege Escalation
Reconnaissance
Static Analysis
Vulnerability Scanners
Web Vulnerability Scanners
Wi-Fi Auditing
Bluetooth Security
Container Security
Dynamic Analysis (Sandboxing)
Encryption/Decryption Tools
Exploit Frameworks
Identity Management
iOS Security
IoT Security
Memory Forensics
Network Mapping
OSINT for Social Engineering
Password Attacks
Payload Generation
Persistence Mechanisms
Port Scanning
Static Code Analysis (SAST)
Threat Feeds & Aggregators
Vulnerability Analysis
Web Proxies & Interception
Code Analysis
DNS & Subdomain Enumeration
Dynamic Code Analysis (DAST)
Exploitation
Hash Analysis
IDS/IPS Evasion
Impersonation Tools
Lateral Movement
Mobile App Pentesting
Network Forensics
Reverse Engineering
RFID/NFC Tools
SCADA/ICS Security
Scripting & Automation
Serverless Security
Shellcode
Web Application Exploitation
API Security Testing
Configuration Auditing
Data Exfiltration
Debuggers
Forensics
Information Gathering
Mobile Forensics
Network Access Control
Post-Exploitation
Security Virtualization
Phishing
WAF Bypass
Web Security
Fuzzing
Network Security
Steganography
Wireless Security
Data Recovery
Malware Analysis
Digital Forensics
Hardware Hacking
Cryptography
CTF
Penetration Testing
Cloud Security
DevSecOps
Mobile Security
Privacy
Command and Control
Social Engineering
Hardware Security
Utilities & Frameworks
Hardware & IoT Security
Secret Detection
Binary Analysis
Threat Intelligence
Identity & Access Management (IAM)
Supply Chain Security
Authentication
Machine Learning
Intrusion Detection
Papers & Research
Misconfiguration
Subdomain Enumeration
Email Harvesting
Learning & Education
AI-Assisted Reversing
DNS Fuzzing
Red Teaming
Incident Response
Crawler
Curated Resources
Remote Access Tool
Shellcode Generation
Payload Development
Remote Access Trojan
API Security
Anti-Bot
Fingerprint Spoofing
CAPTCHA Bypass
Email Security
DNS Analysis
Chaos Engineering
Learning Paths & Courses
Container Escape
AI Security
Database Security
Firmware Analysis
Anomaly Detection
Log Analysis
Adversarial Attack
Binary Exploitation
Labs & Practice
NewestRelevanceMost popularRecently updated
103 results
iam-vulnerable preview

iam-vulnerable

GitHubbishopfox/iam-vulnerable

Use Terraform to create your own vulnerable by design AWS IAM privilege escalation playground.

cloud-securityeducationidentity-access-management+4
59111 months ago
cloudfoxable preview

cloudfoxable

GitHubbishopfox/cloudfoxable

Create your own vulnerable by design AWS penetration testing playground

cloud-infrastructure-securitycloud-securityctf+3
4724 months ago
Honeypot_Smart_Infrastructure preview

Honeypot_Smart_Infrastructure

GitHubadarkst/honeypot_smart_infrastructure

This Repository Includes Kubernetes manifest files for configuration of Honeypot system and Falco IDS in K8s environment. There are also Demo…

cloud-securitycontainer-securityeducation+4
12 years ago
AutomatedLab preview

AutomatedLab

GitHubautomatedlab/automatedlab

PowerShell-based provisioning framework for deploying complex lab environments on Hyper-V and Azure. Supports Windows, Linux, and products like AD,…

cloud-infrastructure-securityeducationlabs-practice+1
2.2k1 month ago
simulator preview

simulator

GitHubcontrolplaneio/simulator

Kubernetes Security Training Platform - focusing on security mitigation

cloud-securitycontainer-securityeducation+4
1k2 years ago
DEFCON-KQL-KUNG-FU-22 preview

DEFCON-KQL-KUNG-FU-22

GitHubdarwinsec/defcon-kql-kung-fu-22

DEF CON Cloud Village workshop slides teaching KQL for cloud security log analysis, with practical exercises in a shared Azure Log Analytics…

cloud-securitycurated-resourceseducation+3
187 months ago
firmware-workshop preview

firmware-workshop

GitHubonekey-sec/firmware-workshop

In this workshop session, we will extract firmware from an EV charger, dig into the firmware, and eventually emulate it so we can interact with the…

binary-analysisdynamic-analysis-sandboxingeducation+5
662 months ago
BIT-EternalBlue-for-macOS_Linux preview

BIT-EternalBlue-for-macOS_Linux

GitHubi-rinka/bit-eternalblue-for-macos_linux

Exploit CVE-2017-7494 for Net Security course final Assignment. This would reveal the vulnerability of services that run in administrative priority…

binary-exploitationeducationexploitation+5
45 years ago
Full-Attack-Lifecycle-Simulation-on-Metasploitable preview

Full-Attack-Lifecycle-Simulation-on-Metasploitable

GitHubom4rsallam/full-attack-lifecycle-simulation-on-metasploitable

Full-cycle Pentest on Metasploitable (VMware/Kali). Scanned services (Apache Tomcat/8180), researched CVE-2002-0936 via Exploit-DB, and gained access…

educationexploitationlabs-practice+5
6 months ago
CVE-2026-5718-Lab preview

CVE-2026-5718-Lab

GitHubrootdirective-sec/cve-2026-5718-lab

Local Docker lab demonstrating CVE-2026-5718 arbitrary file upload in a WordPress plugin, with vulnerable and patched services for side-by-side…

ctfeducationexploitation+3
13 months ago
CVE-2026-44338-Lab preview

CVE-2026-44338-Lab

GitHubrootdirective-sec/cve-2026-44338-lab

Docker-based lab demonstrating CVE-2026-44338 authentication bypass in PraisonAI's legacy Flask API. Includes vulnerable and patched services with…

authenticationeducationlabs-practice+3
3 months ago
CVE-2025-58360-GeoServer-XXE preview

CVE-2025-58360-GeoServer-XXE

GitHubjoker-wiggin/cve-2025-58360-geoserver-xxe

Docker-based lab demonstrating CVE-2025-58360, a critical unauthenticated XXE injection in GeoServer WMS/OWS services. Includes exploit script for…

educationexploitationlabs-practice+3
8 months ago
CVE-2026-3844-Lab preview

CVE-2026-3844-Lab

GitHubrootdirective-sec/cve-2026-3844-lab

Local Docker lab for reproducing CVE-2026-3844, an unauthenticated arbitrary file upload to RCE in the WordPress Breeze Cache plugin. Compares…

ctfeducationexploitation+3
3 months ago
My-Exploits preview

My-Exploits

GitHubm4xsec/my-exploits

Metasploit modules, Python PoCs and throwaway Docker labs for four platform CVEs: Keycloak (CVE-2026-18963), Apache NiFi (CVE-2026-39816), HashiCorp…

cloud-securitycontainer-securityeducation+7
13 days ago
awesome-devsecops preview

awesome-devsecops

GitHubdevsecops/awesome-devsecops

An authoritative list of awesome devsecops tools with the help from community experiments and contributions.

curated-resourcesdevsecopseducation+7
5.5k4 years ago
CVE-2022-26923 preview

CVE-2022-26923

GitHubgh-badr/cve-2022-26923

A proof of concept exploiting CVE-2022-26923.

educationexploitationlabs-practice+2
22 years ago
vsftpd-cve-2011-2523-lab preview

vsftpd-cve-2011-2523-lab

GitHubindiquarks/vsftpd-cve-2011-2523-lab

Pen Tesing Lab exploiting VSFTPD 2.3.4 backdoor via Metasploit Framework

educationexploitationexploit-frameworks+5
1 month ago
CVE-2024-49019-rayng preview

CVE-2024-49019-rayng

GitHubrayngnpc/cve-2024-49019-rayng

Exploitation for CVE-2024-49019

educationexploitationlabs-practice+6
31 year ago
Previous123456Next