Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Security integration in CI/CD pipelines, shift-left, and DevOps security automation tools.

Kitploit recommended

Top tools

10 selected

trivy

aquasecurity/trivy

37.4k12h 25m ago

semgrep

semgrep/semgrep

16.2k5 days ago

gitleaks

gitleaks/gitleaks

28.6k11 days ago

trufflehog

trufflesecurity/trufflehog

27.4k6h 37m ago

checkov

bridgecrewio/checkov

8.9k1 day ago

grype

anchore/grype

12.7k1 day ago

syft

anchore/syft

9.8k8h 55m ago

dependency-track

dependencytrack/dependency-track

4.1k15h 9m ago

DependencyCheck

dependency-check/dependencycheck

7.8k2 days ago

#10

osv-scanner

google/osv-scanner

10.8k20h 55m ago

Newest Relevance Most popular Recently updated

1060 results

owasp-aibom

owasp/owasp-aibom

OWASP project defining an AI Bill of Materials (AIBOM) standard to document AI/ML components, dependencies, and supply chain risks for AI security…

vulnerability-analysisdevsecopssupply-chain-security+3

131 month ago

DevSecOps — Page 29 | Kitploit

GuardScan

ntanwir10/guardscan

100% Free & Open Source • Privacy-First Security Scanning and AI Code Review CLI

static-analysisvulnerability-scannerscode-analysis+8

1513 days ago

vault-conductor

pirafrank/vault-conductor

An SSH Agent that provides SSH keys stored in Bitwarden Secrets Manager

cloud-securitydevsecopsutilities-frameworks+3

382 months ago

hush

backbay-labs/hush

Portable security rules for the action boundary of AI agents

cloud-securitydevsecopssecret-detection+4

231 month ago

pkgxray

adamsjack711-ux/pkgxray

Pre-install security for AI agents, npm packages, and MCP servers. Zero-dep local static analysis; normal scans never execute package code.

static-analysisvulnerability-scannerscode-analysis+4

1121 days ago

mesh-kridik

chen-keinan/mesh-kridik

Automated security checker for Kubernetes clusters with Istio service mesh, enforcing best practices via OPA policies and generating remediation…

vulnerability-scannerscontainer-securityconfiguration-auditing+3

272 years ago

training-application-security

ransomleak/training-application-security

Interactive secure coding training with hands-on SCORM exercises covering OWASP Top 10 web and API vulnerabilities, Git/secrets exposure, and…

web-application-exploitationweb-securitypenetration-testing+7

181 month ago

React2Shell-Scanner

wi3memake/react2shell-scanner

Command-line security assessment framework for React and Next.js applications, analyzing React Server Components for misconfigurations, with…

vulnerability-scannersapi-security-testingwaf-bypass+3

3110 months ago

signatures

c3rb3ru5d3d53c/signatures

Community Detection Signature Build and Distribution Pipeline for YARA, Suricata, Snort and Sigma

defensive-toolsmalware-analysisdevsecops+3

273 years ago

glassworm-hunter

afine-com/glassworm-hunter

Detects GlassWorm supply chain attack payloads by scanning VS Code extensions, npm/PyPI packages, and git repos for invisible Unicode payloads,…

ioc-managementstatic-analysisvulnerability-scanners+9

315 months ago

abap-code-scanner

owasp/abap-code-scanner

ABAP Code Analyzer

vulnerability-scannersstatic-code-analysiscode-analysis+2

101 month ago

CIS GitLab Benchmark Scanner

gitlab-security-oss/cis/gitlabcis

Audits GitLab projects against the CIS GitLab Benchmark via read-only API checks, generating JSON reports on compliance and hardening recommendations.

vulnerability-analysisconfiguration-auditingdevsecops+2

152 months ago