Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools for reviewing system and application configurations for security weaknesses and compliance.

Kitploit recommended

Top tools

10 selected

lynis

cisofy/lynis

16.1k1 month ago

content

complianceascode/content

2.8k3h 50m ago

prowler

prowler-cloud/prowler

14.3k7h 54m ago

trivy

aquasecurity/trivy

37.4k1 day ago

checkov

bridgecrewio/checkov

8.9k19h 39m ago

kics

checkmarx/kics

2.7k2 days ago

cloud-custodian

cloud-custodian/cloud-custodian

6.0k22h 2m ago

kubescape

kubescape/kubescape

11.6k10h 56m ago

#10

kube-bench

aquasecurity/kube-bench

8.1k24 days ago

#11

kube-linter

stackrox/kube-linter

3.5k1 day ago

Newest Relevance Most popular Recently updated

1071 results

ssl-certificate-expiry-date-checker

password123456/ssl-certificate-expiry-date-checker

Scans SSL/TLS certificates for expiry dates, issuer details, and OCSP status. Sends notifications via webhook, Telegram, or Slack. Supports proxy per…

vulnerability-scannersconfiguration-auditingnetwork-security+2

123 years ago

CVE-2023-36884-Checker

tarraschk/cve-2023-36884-checker

Script to check for CVE-2023-36884 hardening

vulnerability-analysisscripting-automationconfiguration-auditing+1

153 years ago

signal-server-dropwizard-admin

abraxas/signal-server-dropwizard-admin

Signal-Server v20261007.0.0 - High - Remote - Privilege leftover - unauth Dropwizard admin :8081

defensive-toolsreconnaissancevulnerability-analysis+5

718 days ago

LWHP

51x/lwhp

Linux and Windows Hardening Points

configuration-auditinghardware-securityeducation+1

128 years ago

copy-fail-CVE-2026-31431-detection-probe

ochebotar/copy-fail-cve-2026-31431-detection-probe

Safe detection tooling for CVE-2026-31431 "Copy Fail" and CVE-2026-43284 "Dirty Frag" — a local privilege escalation in the Linux kernel's algif_aead…

privilege-escalationvulnerability-scannersvulnerability-analysis+7

105 months ago

security-baseline-ubuntu

eugexo/security-baseline-ubuntu

Production-grade Security Baseline & Hardening Guide for Ubuntu 24.04/26.04 LTS. Kernel isolation, Emergency Panic Button, custom AppArmor/Firejail…

vulnerability-scannersencryption-decryption-toolsconfiguration-auditing+6

91 month ago

kerneleye

abdeljalilait/kerneleye

Kernel-level security & attack response for Linux servers.

defensive-toolscontainer-securityconfiguration-auditing+8

157 days ago

CVE-2019-6693

gquere/cve-2019-6693

Decrypts FortiGate configuration secrets (CVE-2019-6693) for versions below 6.2.0, extracting encrypted passwords and keys from dumped configs using…

password-crackingencryption-decryption-toolsvulnerability-analysis+2

84 years ago

sunsetscan

nocoderrandom/sunsetscan

Local-network security auditing with EOL, CVE, device identity, and HTML reports

reconnaissancevulnerability-scannersiot-security+4

31 month ago

CVE-2022-22948

penteraio/cve-2022-22948

Scanner for CVE-2022-22948 an Information Disclosure in VMWare vCenter

vulnerability-scannersexploitationconfiguration-auditing+3

113 years ago

CVE-2020-9289

synacktiv/cve-2020-9289

Decrypt reversible secrets encrypted using the default hardcoded key related to CVE-2020-9289 on FortiAnalyzer/FortiManager (the only difference with…

encryption-decryption-toolsvulnerability-analysisexploitation+3

113 years ago