Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

27 results

CVE-2025-1974

chhhd/cve-2025-1974

Proof-of-concept exploit for CVE-2025-1974 (IngressNightmare) targeting Kubernetes Ingress-NGINX Admission Controller to achieve remote code…

cloud-securitycontainer-securityexploitation+5

1 year ago

cve-2019-5736-poc

q3k/cve-2019-5736-poc

Unweaponized Proof of Concept for CVE-2019-5736 (Docker escape)

container-escapecontainer-securityexploitation+2

2107 years ago

redis-cve-2025-62507

gartonchan/redis-cve-2025-62507

Exploit scripts for CVE-2025-62507, a stack buffer overflow in Redis 8.2.0. Provides x86-64 and ARM64 ROP chain exploits with shellcode generation…

binary-exploitationcontainer-securitydebuggers+6

3 months ago

cve-2018-11776-docker

tuxotron/cve-2018-11776-docker

Dockerized proof-of-concept exploit for CVE-2018-11776 (Apache Struts2) with a Go-based command execution payload for penetration testing and…

container-securityexploitationpayload-development+3

38 years ago

CVE-2024-4701-POC

joebeeton/cve-2024-4701-poc

POC for CVE-2024-4701

container-securityexploitationpayload-development+3

22 years ago

POC-IngressNightmare-CVE-2025-1974

biitts/poc-ingressnightmare-cve-2025-1974

Builds a shell.so reverse shell payload for CVE-2025-1974 (IngressNightmare) using Alpine Linux in Docker, with hardcoded IP and port configuration.

container-securityexploitationpayload-development+3

1 year ago

text4shell-docker

aaronm-sysdig/text4shell-docker

Dockerized POC for CVE-2022-42889 Text4Shell

container-securityexploitationpayload-development+3

2 years ago

cve-2019-5736-poc

likekabin/cve-2019-5736-poc

Proof-of-concept exploit for CVE-2019-5736, appending a payload to the host runc binary via Docker container escape.

binary-exploitationcontainer-escapecontainer-security+3

7 years ago

ApacheStruts-CVE-2018-11776

freshdemo/apachestruts-cve-2018-11776

Python proof-of-concept exploit for Apache Struts2 CVE-2018-11776 remote code execution vulnerability, with Docker container for testing against…

container-securityexploitationpayload-development+3

6 years ago

My-Exploits

m4xsec/my-exploits

Metasploit modules, Python PoCs and throwaway Docker labs for four platform CVEs: Keycloak (CVE-2026-18963), Apache NiFi (CVE-2026-39816), HashiCorp…

cloud-securitycontainer-securityeducation+7

14 days ago

RunC-CVE-2019-5736

twistlock/runc-cve-2019-5736

CVE-2019-5736 POCs

container-escapecontainer-securityexploitation+3

866 years ago

ingressNightmare-CVE-2025-1974-exps

esonhugh/ingressnightmare-cve-2025-1974-exps

IngressNightmare POC. world first non-blind remote execution exploitation with multi-advanced exploitation methods. allow on disk exploitation.…

cloud-securitycontainer-securityexploitation+5

981 year ago

CVE-2025-53770

j4ck3lsyn-gen2/cve-2025-53770

Lab & PoC

container-securityeducationexploitation+5

15 months ago

PackMyPayload

mgeeky/packmypayload

A PoC that packages payloads into output containers to evade Mark-of-the-Web flag & demonstrate risks associated with container file formats.…

container-securityexploit-frameworkspayload-development+3

1.2k2 years ago

exploit-CVE-2017-7494

opsxcq/exploit-cve-2017-7494

SambaCry exploit and vulnerable container (CVE-2017-7494)

container-securityexploitationpayload-development+3

3803 years ago

Freeloader

authrequest/freeloader

Plex Unlocker

binary-analysiscontainer-securitydebuggers+8

932 months ago

CVE-2026-31431-CopyFail-Universal-LPE

shadowabi/cve-2026-31431-copyfail-universal-lpe

CVE-2026-31431 Copy Fail — Universal LPE exploit. Dynamic ELF offset + full-binary overwrite, Python 2/3 compatible with ctypes splice fallback

binary-exploitationcontainer-securityexploitation+6

584 months ago

ExploitTensorflowCVE-2021-37678

fran-cics/exploittensorflowcve-2021-37678

TP Seguridad Informática UTN FRBA 2021

ai-securitycontainer-securityeducation+3

24 years ago

Previous12 Next