Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

78 results

CVE-2026-24072-Analysis

meh098/cve-2026-24072-analysis

Technical analysis of CVE-2026-24072, a local privilege escalation in Apache HTTP Server mod_rewrite, including root cause, patches, and Dockerized…

curated-resourceseducationexploitation+3

4 months ago

Joomla-CMS-Full-Lifecycle-Pentest

marwan651/joomla-cms-full-lifecycle-pentest

A comprehensive full-lifecycle penetration testing project on Joomla 4.2.5 exploiting CVE-2023-23752 inside a Dockerized lab environment

educationexploitationinformation-gathering+7

4 months ago

Gitlab-CVE-2026-19478

punitdarji/gitlab-cve-2026-19478

Dockerized exploit lab and script for CVE-2026-19478, a critical unauthenticated GitLab GraphQL code injection enabling arbitrary Ruby method calls,…

api-security-testingeducationexploitation+4

1 month ago

CVE-2026-29000

lucastran05/cve-2026-29000

Local lab simulating CVE-2026-29000 JWT/JWE authentication bypass in pac4j-jwt. Provides login, token forging, and dashboard APIs for practicing web…

authenticationctfeducation+3

3 months ago

Text4shell--Automated-exploit---CVE-2022-42889

adarshpv9746/text4shell--automated-exploit---cve-2022-42889

Automated exploit for CVE-2022-42889 (Text4Shell) with a vulnerable Dockerized app for testing and manual exploitation guidance.

dynamic-analysis-sandboxingexploitationpayload-development+3

3 years ago

CVE-2019-16113-Dockerfile

kenun99/cve-2019-16113-dockerfile

Dockerized environment to reproduce CVE-2019-16113, a directory traversal and RCE vulnerability in Bludit CMS 3.9.2, with PoC for image upload…

container-securityeducationexploitation+3

6 years ago

Archived

Log4Shell-Honeypot

michaelsanford/log4shell-honeypot

Dockerized honeypot for CVE-2021-44228.

container-securityintrusion-detectionlog-analysis+2

41 year ago

Archived

redash-vulnerable

grantbirki/redash-vulnerable

A Dockerized Redash instance that is vulnerable to CVE-2021-21239

authenticationcontainer-securityeducation+3

1 year ago

CVE-2025-1868

itres-labs/cve-2025-1868

CVE-2025-1868: Advanced IP Scanner & Advanced Port Scanner NTLM Leakage HTTP Tester

authenticationexploitationinformation-gathering+3

28 months ago

CVE-2021-3156-Project

shams-ul-mehmood/cve-2021-3156-project

Educational lab environment for CVE-2021-3156 (Baron Samedit) with a Dockerized vulnerable sudo target, exploit scaffold, canary test, root-cause…

binary-exploitationeducationexploitation+3

1 month ago

OSWE-Labs-Poc

svdwi/oswe-labs-poc

Dockerized labs For Web Expert (OSWE) certification. Preparation for coming AWAE Training ...

ctfeducationexploitation+4

1365 years ago

CVE-2026-3854-lab

royaleybovich/cve-2026-3854-lab

Local intentionally vulnerable lab with a guided workshop and CTF challenges for practicing Git push-option RCE, unsafe deserialization,…

ctfeducationexploitation+4

91 month ago

CVE-2026-21877

cves-labs/cve-2026-21877

Dockerized vulnerable lab environment with a Python-based network monitor and dedicated exploit script, enabling hands-on exploitation, privilege…

ctfeducationexploitation+3

1 month ago

CVE-2022-42889

rockmelodies/cve-2022-42889

CVE-2022-42889 dockerized sample application (Apache Commons Text RCE)

educationexploitationlabs-practice+2

3 years ago

cve-2022-42889-text4shell-docker

karthikuj/cve-2022-42889-text4shell-docker

Dockerized proof-of-concept for CVE-2022-42889 (Text4Shell) with script, DNS, and URL lookup-based RCE payloads for security testing and education.

container-securityeducationexploitation+3

763 years ago

CVE-2021-4034

robemmerson/cve-2021-4034

Dockerized proof-of-concept for CVE-2021-4034 (PwnKit), a local privilege escalation in polkit's pkexec, demonstrating root access from an…

container-securityexploitationpenetration-testing+2

4 years ago

cve-2025-55182-poc

trax69/cve-2025-55182-poc

Proof of Concept for CVE-2025-55182 ("React2Shell"). A fully dockerized environment demonstrating Remote Code Execution (RCE) via insecure…

binary-exploitationctfeducation+6

9 months ago

study-CVE-2025-55182

itumo-arigatone/study-cve-2025-55182

Educational repository for learning CVE-2025-55182: a pre-authentication RCE in React Server Components. Includes step-by-step documentation,…

educationexploitationlabs-practice+3

8 months ago

Previous12 3 4 5 Next