Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Categories

Code Analysis

Static and dynamic code analysis, SAST, DAST, and code review tools.

Kitploit recommended

Top tools

10 selected
semgrep preview#1

semgrep

GitHubsemgrep/semgrep
16.2k5 days ago
codeql preview#2

codeql

GitHubgithub/codeql
10.3k11h 56m ago
sonarqube preview#3

sonarqube

GitHubsonarsource/sonarqube
11.1k12h 42m ago
infer preview#4

infer

GitHubfacebook/infer
15.7k1 day ago
ghidra preview#5

ghidra

GitHubnationalsecurityagency/ghidra
71.1k9h 37m ago
radare2 preview#6

radare2

GitHubradareorg/radare2
24.5k8h 45m ago
capa preview#7

capa

GitHubmandiant/capa
6.1k10h 5m ago
bandit preview#8

bandit

GitHubpycqa/bandit
8.2k8 days ago
gosec preview#9

gosec

GitHubsecurego/gosec
8.9k13h 1m ago
bearer preview#10

bearer

GitHubbearer/bearer
2.7k4 days ago
NewestRelevanceMost popularRecently updated
2176 results
yls preview

yls

GitHubavast/yls

YARA Language Server

static-code-analysiscode-analysismalware-analysis
749 months ago
x64dbg-xfg-marker preview

x64dbg-xfg-marker

GitHubm417z/x64dbg-xfg-marker

An x64dbg plugin which marks XFG call signatures as data

code-analysisreverse-engineeringdebuggers+1
843 years ago
C0deVari4nt preview

C0deVari4nt

GitHubwhitesquirrell/c0devari4nt

A variant analysis and visualisation tool that scans codebases for similar vulnerabilities

static-code-analysisvulnerability-analysiscode-analysis
744 years ago
combobulator preview

combobulator

GitHubapiiro/combobulator

Modular framework to detect and prevent dependency confusion attacks by analyzing package manifests across multiple sources and package management…

vulnerability-scannerscode-analysisdevsecops+1
952 years ago
jfrog-CVE-2022-21449 preview

jfrog-CVE-2022-21449

GitHubjfrog/jfrog-cve-2022-21449

Scans compiled Java archives (JAR/WAR) for ECDSA algorithm usage to detect CVE-2022-21449 vulnerability. Recursively examines .class files with…

static-analysisvulnerability-scannerscode-analysis+1
374 years ago
CVE-2021-26084_PoC preview

CVE-2021-26084_PoC

GitHubalt3kx/cve-2021-26084_poc

Proof-of-concept exploit for CVE-2021-26084, an OGNL injection vulnerability in Confluence Server and Data Center, demonstrating unauthenticated…

payload-generationvulnerability-analysiscode-analysis+3
535 years ago
Aura-State preview

Aura-State

GitHubmunshi007/aura-state

Python framework for building LLM workflows as state machines with formal verification via Z3 theorem proving, CTL model checking, and conformal…

static-analysiscode-analysismachine-learning+4
281 month ago
CVE-2023-29007 preview

CVE-2023-29007

GitHubethiack/cve-2023-29007

Proof-of-concept exploit for CVE-2023-29007, a Git arbitrary configuration injection vulnerability. Demonstrates exploitation via crafted repository…

vulnerability-analysiscode-analysisexploitation+2
363 years ago
react2shell-scanner preview

react2shell-scanner

GitHubgensecaihq/react2shell-scanner

Detects CVE-2025-55182 RCE in React Server Components by scanning npm/pnpm/yarn lockfiles, Docker images, SBOMs, and live URLs. Includes auto-fix,…

vulnerability-scannerscontainer-securitycode-analysis+4
5911 months ago
CVE-2019-17571 preview

CVE-2019-17571

GitHubshadow-horse/cve-2019-17571

Apache Log4j 1.2.X存在反序列化远程代码执行漏洞

vulnerability-analysiscode-analysisexploitation+2
786 years ago
CVE-2025-48543 preview

CVE-2025-48543

GitHubgamesarchive/cve-2025-48543

Proof-of-concept exploit for CVE-2025-48543, written in C++. Demonstrates exploitation of a specific vulnerability for security testing and research…

vulnerability-analysiscode-analysisexploitation+3
5310 months ago
CVE-2025-48384 preview

CVE-2025-48384

GitHubacheong08/cve-2025-48384

Breaking git with a carriage return and cloning RCE

vulnerability-analysiscode-analysisexploitation+2
531 year ago
CVE-2019-7609 preview

CVE-2019-7609

GitHubmpgn/cve-2019-7609

RCE on Kibana versions before 5.6.15 and 6.6.0 in the Timelion visualizer

payload-generationvulnerability-analysiscode-analysis+2
566 years ago
log4shell preview

log4shell

GitHubliveoverflow/log4shell

Small example repo for looking into log4j CVE-2021-44228

vulnerability-analysiscode-analysisexploitation+2
724 years ago
binaryninja-ollama preview

binaryninja-ollama

GitHubahaggard2013/binaryninja-ollama

Plugin for Binary Ninja that integrates local Ollama models to rename functions and variables in decompiled HLIL code, preserving privacy by keeping…

code-analysisreverse-engineeringprivacy+3
831 year ago
CVE-2023-30547 preview

CVE-2023-30547

GitHubrvzsec/cve-2023-30547

PoC Exploit for VM2 Sandbox Escape Vulnerability

payload-generationvulnerability-analysiscode-analysis+3
452 years ago
AutoIt-Obfuscator preview

AutoIt-Obfuscator

GitHubpelock/autoit-obfuscator

Obfuscates AutoIt scripts to protect source code from analysis, reverse engineering, and decompilation using advanced obfuscation and polymorphic…

code-analysisreverse-engineeringcryptography
504 months ago
codetotal preview

codetotal

GitHuboxsecurity/codetotal

Analyze any snippet, file, or repository to detect possible security flaws such as secret in code, open source vulnerability, code security,…

vulnerability-scannerscode-analysissecret-detection+1
783 years ago
Previous1…242526…100Next