Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

LLM security, prompt injection, model extraction, adversarial AI, and AI red teaming tools.

Kitploit recommended

Top tools

10 selected

promptfoo

promptfoo/promptfoo

24.1k17h 11m ago

garak

nvidia/garak

8.8k4 days ago

PyRIT

microsoft/pyrit

4.5k21h 18m ago

PurpleLlama

meta-llama/purplellama

4.4k26 days ago

giskard-oss

giskard-ai/giskard-oss

5.8k6 days ago

AI-Infra-Guard

tencent/ai-infra-guard

4.5k2 days ago

promptmap

utkusen/promptmap

1.2k9 months ago

agentic-radar

splx-ai/agentic-radar

1.1k9 months ago

#10

Guardrails

nvidia-nemo/guardrails

7.1k3 days ago

#11

agent-scan

snyk/agent-scan

2.9k3 days ago

Newest Relevance Most popular Recently updated

655 results

OWASP-WSTG-Rag

zilbonn/owasp-wstg-rag

OWASP Web Security Testing Guide RAG system with ChromaDB, MCP for Claude Code

vulnerability-analysisapi-security-testinginformation-gathering+8

229 months ago

cve-2025-32711

daryllundy/cve-2025-32711

PowerShell-based detection and remediation toolkit for CVE-2025-32711 (EchoLeak), a critical zero-click AI command injection vulnerability in…

vulnerability-scannersvulnerability-analysisconfiguration-auditing+4

31 year ago

cve-2025-32434-poc

cyhe50/cve-2025-32434-poc

Proof-of-concept exploit for CVE-2025-32434, a pickle deserialization vulnerability in PyTorch's weights_only mode, demonstrating malicious tar file…

vulnerability-analysisexploitationmachine-learning+3

9 months ago

CYBERDUDEBIVASH-ServiceNow-AI-Agent-Audit-Script

cyberdudebivash/cyberdudebivash-servicenow-ai-agent-audit-script

This script audits ServiceNow AI Agents for vulnerabilities like CVE-2025-12420, governance gaps, and compliance risks. Powered by CYBERDUDEBIVASH –…

vulnerability-scannersconfiguration-auditingcloud-security+2

7 months ago

o3_finds_cve-2025-37899

ccss17/o3_finds_cve-2025-37899

Artefacts for blog post on finding CVE-2025-37899 with o3

vulnerability-analysisexploitationweb-application-exploitation+3

10 months ago

ai-security-battle

binarybard27/ai-security-battle

A Red Team vs. Blue Team Adversarial AI Simulation.

defensive-toolsmachine-learningeducation+5

28 months ago

GuardModel

shivang0/guardmodel

GitHub Action that scans ML model files for malicious code and security vulnerabilities

static-analysisvulnerability-scannerscode-analysis+5

28 months ago

gaia

oksuzkayra/gaia

Attack surface discovery and AI-assisted triage for security researchers. Endpoint & parameter mapping with actionable testing hints.

osintreconnaissancevulnerability-analysis+7

468 months ago

rep-chrome

repplus/rep-chrome

rep+ — Burp-style HTTP Repeater for Chrome DevTools with built‑in AI to explain requests and suggest attacks

vulnerability-scannersweb-proxies-interceptionapi-security-testing+6

1.6k8 months ago

CVE-2025-68664

comerc/cve-2025-68664

Detailed disclosure of CVE-2025-68664, a critical deserialization vulnerability in LangChain core allowing secret exfiltration and potential RCE via…

vulnerability-analysisexploitationweb-application-exploitation+3

8 months ago

Agentic-SOC-Simulation

safelineman/agentic-soc-simulation

AI 驱动的 SOC 仿真平台

penetration-testing-frameworksvulnerability-analysisforensics+8

1668 months ago

CVE-2024-3660-PoC

aaryanbhujang/cve-2024-3660-poc

A PoC for CVE-2024-3660. Arbitrary Code Execution in Keras.

vulnerability-analysisexploitationpenetration-testing+3

41 year ago

claude_opus_cve_2023_0266

seanheelan/claude_opus_cve_2023_0266

Demo showing Claude Opus does not find CVE-2023-0266

static-analysisvulnerability-analysiscode-analysis+3

162 years ago

ml-CVE-2023-1177

hh-hunter/ml-cve-2023-1177

Machine learning-based exploit for CVE-2023-1177 vulnerability, enabling automated security testing and exploitation of the identified flaw.

vulnerability-analysisexploitationpenetration-testing+2

2 years ago

raxe-ce

raxe-ai/raxe-ce

Runtime protection for AI agents

defensive-toolsvulnerability-analysisthreat-intelligence+5

1175 months ago

EntropicaPublic

dwallener/entropicapublic

Public version of the Entropica repo

cryptographyhardware-securitymachine-learning+3

56 months ago

Vulnhalla

cyberark/vulnhalla

Automated security analysis pipeline that runs CodeQL queries on GitHub repositories and uses LLMs to classify and filter true vulnerabilities from…

static-analysisvulnerability-analysiscode-analysis+4

2011 month ago

Research-on-CVE-2025-9998

balajigund/research-on-cve-2025-9998

vulnerability in CVE 2025-9998 and solution for those vulnerability with help artificial intelligence

vulnerability-scannersvulnerability-analysispapers-research+2