Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

193 results

malware_training_vol1

hasherezade/malware_training_vol1

Materials for Windows Malware Analysis training (volume 1)

binary-analysiseducationforensics+4

2.1k

2 years ago

JOP_ROCKET

bw3ll/jop_rocket

This framework enables user to discover JOP gagdets and can automate building a complete JOP chain to bypass DEP. JOP ROCKET is the ultimate solution…

binary-exploitationeducationexploitation+4

1172 years ago

CVE-2025-9074

zenzue/cve-2025-9074

Proof-of-concept exploit for CVE-2025-9074 demonstrating container-to-host file write via exposed Docker Engine API on Windows. For authorized…

cloud-securitycontainer-escapecontainer-security+6

101 year ago

ludus_crushftp_cve-2025-31161

rufflabs/ludus_crushftp_cve-2025-31161

Ansible role deploying a vulnerable CrushFTP 10.8.0 instance on Windows for authorized penetration testing of CVE-2025-31161 authentication bypass.

educationexploitationlabs-practice+3

3 months ago

circuit-artist

lets-all-be-stupid-forever/circuit-artist

Circuit Artist is a digital circuit drawing and simulation game.

ctfeducationhardware-security+2

47922h 47m ago

CVE-2023-23397

gilospy/cve-2023-23397

Demonstration of CVE-2023-23397 Outlook Privellege Escalation vulnerability

educationexploitationlabs-practice+3

1 year ago

ad-honeypot-autodeploy

tothi/ad-honeypot-autodeploy

Deploy a small, intentionally insecure, vulnerable Windows Domain for RDP Honeypot fully automatically.

educationlabs-practicelog-analysis+3

2594 years ago

BlueCloud

iknowjason/bluecloud

Cyber Range including Velociraptor + HELK system with a Windows VM for security testing and R&D. Azure and AWS terraform support.

cloud-infrastructure-securitycloud-securitydefensive-tools+7

1514 years ago

ludus-defender-lab

zephrfish/ludus-defender-lab

MDE/MDI Defender setup for Ludus

defensive-toolsidentity-access-managementlabs-practice+3

626 months ago

CVE-2019-16784-POC

ckrielle/cve-2019-16784-poc

A Proof of Concept exploit for the PyInstaller CVE-2019-16783

binary-exploitationeducationexploitation+4

2 years ago

lab-cve-2020-0610

imbios/lab-cve-2020-0610

Reproducible lab for CVE-2020-0610 (BlueGate) - Windows RD Gateway UDP/DTLS remote code execution vulnerability. Includes PowerShell scripts, setup…

educationexploitationlabs-practice+3

21 year ago

CVE-2025-24054-PoC

simantchaudhari/cve-2025-24054-poc

Proof-of-concept exploit for CVE-2025-24054, a Windows Library (.library-ms) NTLM hash disclosure vulnerability. Generates a malicious .library-ms…

educationexploitationinformation-gathering+3

5 months ago

BestEdrOfTheMarket

xacone/bestedrofthemarket

Open-source Windows kernel-level EDR lab for understanding and testing detection methods against process injection, credential dumping, and other…

defensive-toolseducationlabs-practice+1

1.6k3 months ago

HackSysDriverExploits

sam-b/hacksysdriverexploits

Windows kernel driver exploits for HackSys Extreme Vulnerable Driver, demonstrating binary exploitation and privilege escalation for security…

binary-exploitationeducationexploitation+2

499 years ago

CVE-2024-38063

hibanitt/cve-2024-38063

In-depth technical analysis and proof-of-concept for CVE-2024-38063, a critical Windows IPv6 kernel RCE. Includes root-cause breakdown, Scapy-based…

binary-exploitationeducationexploitation+3

29 days ago

CVE-2024-38063

avidanmaatuk/cve-2024-38063

PoC exploit and technical analysis for CVE-2024-38063 in the Windows IPv6 stack, built with Python and Scapy

binary-exploitationeducationexploitation+3

127 days ago

RRAS-VULNERABILITY-CVE-2026-25172-CVE-2026-25173-CVE-2026--26111

dhananjayasj/rras-vulnerability-cve-2026-25172-cve-2026-25173-cve-2026--26111

Isolated lab environment to simulate and study integer overflow vulnerabilities (CVE-2026-25172, CVE-2026-25173, CVE-2026-26111) in Windows RRAS…

educationexploitationlabs-practice+2

4 months ago

CVE-2025-1974

zsxen/cve-2025-1974

Windows 11-first educational lab for studying CVE-2025-1974 in ingress-nginx. Provides safe attack emulation and defense validation with local…

cloud-securitycontainer-securitydefensive-tools+7

6 months ago

Previous12…11 Next