Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Static and dynamic code analysis, SAST, DAST, and code review tools.

Kitploit recommended

Top tools

10 selected

semgrep

semgrep/semgrep

16.2k2 days ago

codeql

github/codeql

10.3k18h 41m ago

sonarqube

sonarsource/sonarqube

11.1k4 days ago

infer

facebook/infer

15.7k1 day ago

ghidra

nationalsecurityagency/ghidra

71.1k1 day ago

radare2

radareorg/radare2

24.5k19h 27m ago

capa

mandiant/capa

6.1k1 day ago

bandit

pycqa/bandit

8.2k4 days ago

gosec

securego/gosec

8.9k2 days ago

#10

bearer

bearer/bearer

2.7k1 day ago

Newest Relevance Most popular Recently updated

2172 results

rev-dep

jayu/rev-dep

Dependency analysis and optimization toolkit for modern JavaScript and TypeScript codebases. Enforce dependency graph hygiene and remove unused code…

static-analysiscode-analysisdevsecops+2

25216 days ago

FindFunc

felixber/findfunc

IDA Pro plugin for filtering functions by assembly patterns, byte sequences, string/name references, and size constraints, with rule-based search and…

static-analysiscode-analysisreverse-engineering+2

36211 months ago

Bughound

mhaskar/bughound

Static code analysis tool based on Elasticsearch

vulnerability-scannersstatic-code-analysisvulnerability-analysis+2

1305 years ago

Spring-Cloud-Gateway-CVE-2022-22947

lucksec/spring-cloud-gateway-cve-2022-22947

Exploit for CVE-2022-22947: remote code execution in Spring Cloud Gateway via crafted requests to the Actuator endpoint. Includes Python script and…

vulnerability-analysiscode-analysisexploitation+3

2234 years ago

hexora

rushter/hexora

Static analysis of malicious Python code

ioc-managementstatic-analysisvulnerability-analysis+4

16821 days ago

dragondance

0ffffffffh/dragondance

Binary code coverage visualizer plugin for Ghidra

dynamic-analysis-sandboxingcode-analysisreverse-engineering+3

3005 years ago

ConcoLLMic

concollmic/concollmic

LLM-agent-powered concolic execution engine that instruments source code, summarizes path constraints in natural language, and generates test cases…

static-analysisdynamic-analysis-sandboxingvulnerability-analysis+8

1541 month ago

rdx

ch0pin/rdx

A native APK and DEX decompiler written in Rust

android-securitystatic-analysiscode-analysis+6

1622 days ago

chimera

penberg/chimera

Sandbox untrusted code with safe access to the host.

dynamic-analysis-sandboxingcode-analysissecurity-virtualization+3

12313 days ago

ASST

owasp/asst

OWASP ASST (Automated Software Security Toolkit) | A Novel Open Source Web Security Scanner.

vulnerability-scannersweb-vulnerability-scannersstatic-code-analysis+2

1901 year ago

heartwood

radicle-dev/heartwood

Peer-to-peer code collaboration and publishing stack with a secure, decentralized protocol, CLI tool, and network daemon for sovereign code forges.

authentication-authorizationcode-analysisnetwork-security+2

2574 months ago

Argus-SAF

arguslab/argus-saf

Scala-based static analysis framework for Android and Java bytecode with flow analysis, decompilation, and native code analysis via symbolic…

android-securitystatic-analysiscode-analysis+2

1994 years ago

reposcanner

dionach/reposcanner

Python script to scan Git repos for interesting strings

code-analysisinformation-gatheringdevsecops+1

1606 years ago

gobee

boratanrikulu/gobee

Write your BPF programs in Go, not C. gobee transpiles a Go subset to BPF C and generates typed cilium/ebpf bindings.

static-analysiscode-analysisscripting-automation+3

3456 months ago

obfuscation_analysis

mrphrazer/obfuscation_analysis

Binary Ninja plugin to analyze and simplify obfuscated code

static-analysiscode-analysisreverse-engineering+3

2585 months ago

MagiskEoP

canyie/magiskeop

Exploit and writeup for installed app to root privilege escalation through CVE-2024-48336 (Magisk Bug #8279), Privileges Escalation / Arbitrary Code…

android-securityprivilege-escalationvulnerability-analysis+5

2011 year ago

grepmarx

orange-cyberdefense/grepmarx

A source code static analysis platform for AppSec enthusiasts.

static-analysisvulnerability-analysiscode-analysis+3

2788 months ago

MATE

galoisinc/mate

Interactive program analysis suite using Code Property Graphs to hunt for bugs in C and C++ code, unifying application-specific and low-level…

static-analysisvulnerability-analysiscode-analysis+1

1984 years ago

Previous 1…151617…100 Next