Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Categories

DevSecOps

Security integration in CI/CD pipelines, shift-left, and DevOps security automation tools.

Kitploit recommended

Top tools

10 selected
trivy preview#1

trivy

GitHubaquasecurity/trivy
37.4k1 day ago
semgrep preview#2

semgrep

GitHubsemgrep/semgrep
16.2k6 days ago
gitleaks preview#3

gitleaks

GitHubgitleaks/gitleaks
28.6k12 days ago
trufflehog preview#4

trufflehog

GitHubtrufflesecurity/trufflehog
27.4k1 day ago
checkov preview#5

checkov

GitHubbridgecrewio/checkov
8.9k2 days ago
grype preview#6

grype

GitHubanchore/grype
12.7k18h 54m ago
syft preview#7

syft

GitHubanchore/syft
9.8k16h 32m ago
dependency-track preview#8

dependency-track

GitHubdependencytrack/dependency-track
4.1k1 day ago
DependencyCheck preview#9

DependencyCheck

GitHubdependency-check/dependencycheck
7.8k4 days ago
osv-scanner preview#10

osv-scanner

GitHubgoogle/osv-scanner
10.8k11h 59m ago
NewestRelevanceMost popularRecently updated
1076 results
Vulfy preview

Vulfy

GitHubmindpatch/vulfy

🐺 Vulfy – Fast Rust based package version scanner

vulnerability-scannersvulnerability-analysiscode-analysis+2
161 year ago
Package-Inferno preview

Package-Inferno

GitHubmhaggis/package-inferno

A Public Package Scanner for The Community

static-analysisvulnerability-scannerscontainer-security+6
139 months ago
Bug-Bounty-Arsenal-v.3 preview

Bug-Bounty-Arsenal-v.3

GitHubfoxvr-sudo/bug-bounty-arsenal-v.3

Full-stack platform for authorized web application security scanning with a detector-based engine, async Celery workers, and a React dashboard for…

reconnaissancevulnerability-scannersweb-vulnerability-scanners+8
122 months ago
credactor preview

credactor

GitHubrxb06/credactor

Scan. Redact. Commit clean.

static-analysisvulnerability-scannerscode-analysis+3
813 days ago
exfil-scan preview

exfil-scan

GitHubvikasudasi/exfil-scan

Scan LLM outputs and AI-generated content for data exfiltration signals (EchoLeak, CVE-2025-32711) before they reach users or downstream systems

data-exfiltrationdevsecopssecret-detection+2
63 months ago
yc-mk8s-copy-fail-mitigation preview

yc-mk8s-copy-fail-mitigation

GitHubyandex-cloud-examples/yc-mk8s-copy-fail-mitigation

DaemonSet для митигации уязвимости CVE-2026-31431 (Copy Fail)

container-securityvulnerability-analysisconfiguration-auditing+2
105 months ago
nuclearpond-OFJAAAH preview

nuclearpond-OFJAAAH

GitHubkingofbugbounty/nuclearpond-ofjaaah

Nuclear Pond is a utility leveraging Nuclei to perform internet wide scans for the cost of a cup of coffee.

vulnerability-scannersweb-securitycloud-security+1
102 years ago
GoBfuscator preview

GoBfuscator

GitHubluftwaffe66/gobfuscator

Obfuscates Go source code via AES-256 string encryption with runtime decryption, identifier renaming, and comment removal to hinder reverse…

defensive-toolsstatic-analysisencryption-decryption-tools+5
131 year ago
SkillsGuard preview

SkillsGuard

GitHubteycir/skillsguard

Static security scanner for AI agent skill packages. Detects malicious SKILL.md files and bundled scripts before they run.

privilege-escalationstatic-analysisvulnerability-scanners+8
143 days ago
witcher preview

witcher

GitHubmf-labs/witcher

Managing GitHub Advanced Security (GHAS) Controls at Scale

vulnerability-scannerscode-analysisconfiguration-auditing+2
101 year ago
NetworkSandboxEngine preview

NetworkSandboxEngine

GitHubonyks-os/networksandboxengine

A deterministic network sandbox for testing nftables rules. It uses ephemeral Linux network namespaces (netns) and Scapy to validate firewall logic…

defensive-toolspacket-sniffing-analysisscripting-automation+3
62 days ago
CentralizedFirewall preview

CentralizedFirewall

GitHubadriyansyah-mf/centralizedfirewall

provides a Firewall Manager API designed to centralize and streamline the management of firewall configurations

configuration-auditingnetwork-securitydevsecops+1
101 year ago
o1js-scan preview

o1js-scan

GitHubauditinfra-io/o1js-scan

Dependency-free static analyzer for zk circuit soundness bugs in o1js/Mina zkApps and Noir circuits

defensive-toolsstatic-analysisvulnerability-scanners+5
424 days ago
matt.net preview

matt.net

GitHubnccgroup/matt.net

Matt.Net is a simple GUI wrapper around Microsoft's CAT.NET Code Auditing Tool

static-code-analysisvulnerability-analysiscode-analysis+2
812 years ago
Vulnvault preview

Vulnvault

GitHubviralmaniar/vulnvault

Developer-focused knowledge base of application security vulnerabilities with insecure vs secure code examples, prevention guidance, and OWASP/CWE…

vulnerability-analysiscode-analysisweb-security+5
41 month ago
f5-waf-enforce-sig-CVE-2021-44228 preview

f5-waf-enforce-sig-CVE-2021-44228

GitHubirgoncalves/f5-waf-enforce-sig-cve-2021-44228

This enforces signatures for CVE-2021-44228 across all policies on a BIG-IP ASM device

vulnerability-scannersconfiguration-auditingweb-security+3
64 years ago
Xpsd preview

Xpsd

GitHubowasp/xpsd

Reachability triage for vulnerability scans. Feeds scanner findings to an LLM agent that reads your source and decides which CVEs are actually…

static-analysisvulnerability-scannersvulnerability-analysis+6
411 days ago
next-cve-2025-66478 preview

next-cve-2025-66478

GitHubabtonc/next-cve-2025-66478

Scans local projects for CVE-2025-66478 vulnerability and reports affected instances without fixing them.

static-analysisvulnerability-scannersvulnerability-analysis+3
1111 months ago
Previous1…323334…60Next