Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
21 results
Threat_Model_Examples preview

Threat_Model_Examples

GitHubtaleliyahu/threat_model_examples

A collection of real-world threat model examples across various technologies, providing practical insights into identifying and mitigating security…

ai-securityapi-securitycloud-security+6
515
1 year ago
Presentations preview

Presentations

GitHubstar-sg/presentations

Curated collection of offensive security conference slide decks covering kernel and mobile exploitation, VM/container escapes, and…

binary-exploitationcontainer-securitycurated-resources+6
1372 months ago
awesome-linux-attack-forensics-purplelabs preview

awesome-linux-attack-forensics-purplelabs

GitHubcr0nx/awesome-linux-attack-forensics-purplelabs

This page is a result of the ongoing hands-on research around advanced Linux attacks, detection and forensics techniques and tools.

container-securitycurated-resourcesdigital-forensics+8
3423 years ago
Dirty-Frag-Research-CVE-2026-43284- preview

Dirty-Frag-Research-CVE-2026-43284-

GitHubnabhan-mohy/dirty-frag-research-cve-2026-43284-

Comprehensive technical research on CVE-2026-43284 (Dirty Frag), including Linux kernel internals, root cause analysis, patch analysis, detection…

container-securityincident-responseintrusion-detection+2
20 days ago
OWASP-Subtractive-Hardening-Top-10 preview

OWASP-Subtractive-Hardening-Top-10

GitHubowasp/owasp-subtractive-hardening-top-10

The OWASP Subtractive Security Top 10 Project is an initiative to identify, document, and promote the highest-impact opportunities for reducing cyber…

ai-securitycloud-securitycontainer-security+6
211 day ago
CVE-Factory preview

CVE-Factory

GitHublivecvebench/cve-factory

CVE-Factory

ai-securitycontainer-securitycurated-resources+6
1704 months ago
CVE-2026-31431 preview

CVE-2026-31431

GitHubthemalwareguardian/cve-2026-31431

A structured explanation of CVE-2026-31431 (Copy Fail), connecting the three kernel changes that introduced the vulnerability and enabled its…

binary-exploitationcontainer-escapeeducation+4
23 months ago
CVE-2026-31413-BPF-Container-Escape preview

CVE-2026-31413-BPF-Container-Escape

GitHubrat5ak/cve-2026-31413-bpf-container-escape

CVE-2026-31413: BPF verifier soundness bug - container escape

binary-exploitationcontainer-escapeeducation+5
14 months ago
helm-plugin-path-traversal-security-assessment preview

helm-plugin-path-traversal-security-assessment

GitHubamnsecurity/helm-plugin-path-traversal-security-assessment

Professional vulnerability assessment report for Helm plugin path traversal risk, including technical analysis, impact, remediation, and mitigation…

cloud-securitycontainer-securitycurated-resources+6
11 month ago
Porting-CVE-2026-31431-Copy-Fail-to-a-Constrained-Java-Runner preview

Porting-CVE-2026-31431-Copy-Fail-to-a-Constrained-Java-Runner

GitHubkarollooool/porting-cve-2026-31431-copy-fail-to-a-constrained-java-runner

CVE-2026-31431 (copy.fail) — adapted for constrained Java execution environments via FFM syscall layer + javac annotation processor delivery

binary-exploitationcontainer-escapeeducation+7
125 days ago
DIRTYFAIL preview

DIRTYFAIL

GitHubkarazajac/dirtyfail

Detector + PoC for Linux page-cache write vulnerabilities: Copy Fail (CVE-2026-31431) and Dirty Frag (CVE-2026-43284/43500). Authorized security…

binary-exploitationcontainer-escapeeducation+7
273 months ago
Copy-Fail-CVE-2026-31431-Kubernetes-PoC preview

Copy-Fail-CVE-2026-31431-Kubernetes-PoC

GitHubpercivalll/copy-fail-cve-2026-31431-kubernetes-poc

PoC: fully unprivileged container escape to node-level code execution on Kubernetes via CVE-2026-31431 page-cache corruption + shared image layers.…

cloud-securitycontainer-escapeeducation+4
1873 months ago
mcpguard-dynamic preview

mcpguard-dynamic

GitHubfacebook/mcpguard-dynamic

Kernel-level eBPF sandbox for securing LLM agent tool calls made through the Model Context Protocol (MCP)

ai-securitycode-analysiscontainer-security+8
711 month ago
container-escape-ebpf preview

container-escape-ebpf

GitHubscherepiuk/container-escape-ebpf

POCs and Tetragon Rules for CVE-2024-21626 and CVE-2025-31133

container-escapecontainer-securityeducation+3
11 month ago
AI-Infra-Guard preview

AI-Infra-Guard

GitHubtencent/ai-infra-guard

A full-stack AI Red Teaming platform securing AI ecosystems via Agent Scan, Skills Scan, MCP scan, AI Infra scan and LLM jailbreak evaluation.

ai-securitycloud-securitycontainer-security+7
5.0k2 days ago
CVE-2025-1974 preview

CVE-2025-1974

GitHubiteride/cve-2025-1974
cloud-securitycontainer-securityeducation+4
11 months ago
CVE-2018-11788 preview

CVE-2018-11788

GitHubbrianwrf/cve-2018-11788

Apache Karaf XXE Vulnerability (CVE-2018-11788)

code-analysiseducationexploitation+3
377 years ago
CVE-2026-43499 preview

CVE-2026-43499

GitHub0xblackash/cve-2026-43499

CVE-2026-43499

binary-exploitationcontainer-escapeeducation+5
61 month ago
Previous12Next