Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Code Analysis — Page 22 | Kitploit
Categories

Code Analysis

Static and dynamic code analysis, SAST, DAST, and code review tools.

Kitploit recommended

Top tools

10 selected
semgrep preview#1

semgrep

GitHubsemgrep/semgrep
16.2k8 days ago
codeql preview#2

codeql

GitHubgithub/codeql
10.3k14h 4m ago
sonarqube preview#3

sonarqube

GitHubsonarsource/sonarqube
11.2k11h 38m ago
infer preview#4

infer

GitHubfacebook/infer
15.7k2 days ago
ghidra preview#5

ghidra

GitHubnationalsecurityagency/ghidra
71.1k12h 11m ago
radare2 preview#6

radare2

GitHubradareorg/radare2
24.5k11h 41m ago
capa preview#7

capa

GitHubmandiant/capa
6.1k21h 41m ago
bandit preview#8

bandit

GitHubpycqa/bandit
8.2k11 days ago
gosec preview#9

gosec

GitHubsecurego/gosec
8.9k3 days ago
bearer preview#10

bearer

GitHubbearer/bearer
2.7k7 days ago
NewestRelevanceMost popularRecently updated
2199 results
cq preview

cq

GitHubchris-anley/cq

CQ, a code security scanner

static-code-analysisvulnerability-analysiscode-analysis+1
998 months ago
gosentry preview

gosentry

GitHubtrailofbits/gosentry

Security-oriented Go toolchain, focused on state-of-the-art fuzzing capabilities.

static-analysisdynamic-analysis-sandboxingvulnerability-analysis+5
1171 month ago
safe-svg preview

safe-svg

GitHubbgalek/safe-svg

Simple and lightweight library that helps to validate SVG files in security manners.

defensive-toolsstatic-analysisvulnerability-analysis+2
484 days ago
lfi preview

lfi

GitHublfi-project/lfi

Top-level repository for LFI: Practical, Efficient, and Secure Software-based Sandboxing

embedded-systems-securitystatic-analysisdynamic-analysis-sandboxing+4
1169 months ago
wp2shell-scanner preview

wp2shell-scanner

GitHubzephrfish/wp2shell-scanner

CVE-2026-63030, CVE-2026-60137, wp2shell scanner

vulnerability-scannerscode-analysisexploitation+5
513 months ago
lightkeeper preview

lightkeeper

GitHubworksbutnottested/lightkeeper

Maps execution-coverage data onto Ghidra disassembly to highlight visited code paths and accelerate reverse-engineering workflows.

code-analysisdynamic-code-analysisreverse-engineering+1
755 days ago
SSLPinDetect preview

SSLPinDetect

GitHubaancw/sslpindetect

SSLPinDetect is a tool for analyzing Android APKs to detect SSL pinning implementations by scanning for known patterns in decompiled code. It helps…

android-securitystatic-analysisvulnerability-analysis+4
871 year ago
brotli-checker preview

brotli-checker

GitHubtrailofbits/brotli-checker

Claude Code and Codex skill for finding potentially vulnerable Brotli copies and guiding updates for CVE-2026-111497.

defensive-toolsstatic-analysisvulnerability-scanners+7
6810 days ago
react2shell preview

react2shell

GitHubfreeqaz/react2shell

RCE exploit toolkit for CVE-2025-55182 and CVE-2025-66478 in React Server Components. Includes multiple exploit variants, detection scripts, a…

dynamic-analysis-sandboxingvulnerability-analysiscode-analysis+6
6811 months ago
sast-rules preview

sast-rules

GitLabgitlab-org/security-products/sast-rules

Curated Semgrep rule repository for GitLab SAST, providing static analysis patterns to detect security vulnerabilities across multiple programming…

static-code-analysisvulnerability-analysiscode-analysis+2
292 days ago
web_exploit_detector preview

web_exploit_detector

GitHubpolaris64/web_exploit_detector

The Web Exploit Detector is a Node.js application used to detect possible infections, malicious code and suspicious files in web hosting environments

vulnerability-scannerscode-analysisweb-security+1
869 years ago
nimcrypt preview

nimcrypt

GitHubicyguider/nimcrypt

PE Crypter written in Nim

encryption-decryption-toolsexploit-frameworkspayload-generation+9
1025 years ago
PulseAPK preview

PulseAPK

GitHubdeemoun/pulseapk

PulseAPK is a WPF frontend for apktool and uber-signer with drag-and-drop support, live decompilation output, smali analysis, and integrated APK…

android-securitystatic-analysisvulnerability-analysis+5
1026 months ago
revsync preview

revsync

GitHublunixbochs/revsync

realtime cross-tool collaborative reverse engineering

code-analysisreverse-engineeringbinary-analysis
1004 years ago
DakshSCRA preview

DakshSCRA

GitHubcoffeeandsecurity/dakshscra

Framework-aware static code analysis tool for automated source code review with platform-specific rules, taint analysis, effort estimation, and…

static-analysisvulnerability-scannersstatic-code-analysis+7
453 days ago
database-sentinel preview

database-sentinel

GitHubfarenhytee/database-sentinel

Open-source security audits for Supabase: a read-only MCP server, a CLI agent and a Claude Skill. Finds RLS misconfigurations, exposed keys and risky…

authentication-authorizationvulnerability-scannerscode-analysis+8
411 month ago
log4j2_vul_local_scanner preview

log4j2_vul_local_scanner

GitHublijiejie/log4j2_vul_local_scanner

Log4j 漏洞本地检测脚本。 Scan all java processes on your host to check whether it's affected by log4j2 remote code execution vulnerability (CVE-2021-45046)

vulnerability-scannerscontainer-securityvulnerability-analysis+3
854 years ago
CVE-2024-7965 preview

CVE-2024-7965

GitHubbi-zone/cve-2024-7965

This repository contains PoC for CVE-2024-7965. This is the vulnerability in the V8 that occurs only within ARM64.

vulnerability-analysiscode-analysisexploitation+2
492 years ago
Previous1…212223…100Next