Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Security integration in CI/CD pipelines, shift-left, and DevOps security automation tools.

Kitploit recommended

Top tools

10 selected

trivy

aquasecurity/trivy

37.4k9h 54m ago

semgrep

semgrep/semgrep

16.2k7 days ago

gitleaks

gitleaks/gitleaks

28.6k14 days ago

trufflehog

trufflesecurity/trufflehog

27.4k1 day ago

checkov

bridgecrewio/checkov

8.9k3 days ago

grype

anchore/grype

12.7k0 days ago

syft

anchore/syft

9.8k7h 17m ago

dependency-track

dependencytrack/dependency-track

4.1k21h 45m ago

DependencyCheck

dependency-check/dependencycheck

7.8k5 days ago

#10

osv-scanner

google/osv-scanner

10.8k21h 12m ago

Newest Relevance Most popular Recently updated

1080 results

bidi-guard

moshe-ship/bidi-guard

Scan code for invisible bidirectional Unicode characters (Trojan Source attack prevention, CVE-2021-42574)

static-analysisvulnerability-analysiscode-analysis+3

57 months ago

DevSecOps — Page 39 | Kitploit

rsc-security-auditor

abdozkaya/rsc-security-auditor

🛡️ Audit your Next.js & React Server Components stack for critical vulnerabilities (CVE-2025-66478, CVE-2025-55184). Detects risks & generates fix…

static-analysisvulnerability-scannerscode-analysis+3

510 months ago

log4j-check

xiaoqimikko/log4j-check

log4j 2025/2026 年 7 条「配置静默失效」CVE 自查:按 CVE×模块判定 4 个模块,结构化解析 log4j2 配置做 applicability 降噪,并算出该升到哪个版本才一次到位(6 条写 2.25.4,但有一条要 2.25.5,而它 Dependabot 报不出来)…

vulnerability-scannersvulnerability-analysisconfiguration-auditing+2

1 month ago

Dead.Letter-CVE-2026-45185

liamromanis101/dead.letter-cve-2026-45185

Shell-based vulnerability scanner for CVE-2026-45185 (Dead.Letter) in Exim MTA. Detects use-after-free in GnuTLS builds, checks version, TLS library,…

vulnerability-scannersvulnerability-analysisexploitation+5

25 months ago

cve-2024-3094

felipecosta09/cve-2024-3094

Step-by-step tutorial for detecting CVE-2024-3094 (XZ Backdoor) in container images using Trend Micro Vision One TMAS CLI, with automated scanning…

vulnerability-scannerscontainer-securitycloud-security+3

42 years ago

cicd-sensor

cicd-sensor/cicd-sensor

eBPF-powered runtime security sensor for CI/CD pipelines. Detects supply-chain attacks, logs process ancestry and file access, and provides forensic…

forensicscloud-securitydevsecops+3

110 days ago

shiro-check

xiaoqimikko/shiro-check

扫出你实际装的 Apache Shiro 模块与版本,逐条判定官方 26 条 CVE 里哪些真的落在你身上。按「CVE × 模块」判定,零依赖单 jar。 CVE-2026-49268

static-analysisvulnerability-scannersvulnerability-analysis+2

1 month ago

scc-check

xiaoqimikko/scc-check

Offline checker for Spring Cloud Config CVE-2026-40982 — tells you whether your version line has an OSS fix at all (3.1.x/4.1.x/4.2.x: it does not)

static-analysisvulnerability-scannersvulnerability-analysis+2

1 month ago

log4j-vulnerability-patcher-agent

saharnooby/log4j-vulnerability-patcher-agent

Fixes CVE-2021-44228 in log4j by patching JndiLookup class

static-analysisvulnerability-scannersvulnerability-analysis+3

34 years ago

enseal

fleralex/enseal

Secure, ephemeral secret sharing for developers.

encryption-decryption-toolsconfiguration-auditingdata-exfiltration+6

57 months ago

copyfail-guard

juliosuas/copyfail-guard

Fast, auditable Linux mitigation for CVE-2026-31431 Copy Fail: algif_aead block, verification, and AF_ALG seccomp hardening.

defensive-toolscontainer-securityvulnerability-analysis+4

21 month ago

CVE-2025-53652-Jenkins-Git-Parameter-Analysis

pl4tyz/cve-2025-53652-jenkins-git-parameter-analysis

CVE-2025-53652: Jenkins Git Parameter Analysis

vulnerability-analysiscode-analysisexploitation+3

21 year ago

CVE-2015-0235-cookbook

mikesplain/cve-2015-0235-cookbook

A chef cookbook to test the GHOST vulnerability

vulnerability-scannersvulnerability-analysisconfiguration-auditing+2

311 years ago

CVE-2026-0303

yonliud/cve-2026-0303

Checkov PoC: arbitrary code execution through auto-loaded configuration and unsigned external Python checks.

static-analysisvulnerability-analysiscode-analysis+5

1 month ago

Log4J-Mitigation-CVE-2021-44228--CVE-2021-45046--CVE-2021-45105--CVE-2021-44832

thedevappsecguy/log4j-mitigation-cve-2021-44228--cve-2021-45046--cve-2021-45105--cve-2021-44832

Log4J CVE-2021-44228 : Mitigation Cheat Sheet

vulnerability-analysiscloud-securitydevsecops+3

24 years ago

cve-2026-31431-ansible

aestechno/cve-2026-31431-ansible

Ansible playbook to detect and apply kernel cmdline mitigation for CVE-2026-31431 (Copy Fail) across Debian/Ubuntu/RHEL fleets, with read-only…

cloud-infrastructure-securityvulnerability-scannersconfiguration-auditing+1

36 months ago

supply-chain-guard

eris-ths/supply-chain-guard

Detect, assess, and respond to supply chain attacks across npm/yarn and Python (pip/poetry/uv). Claude Code skill + standalone scripts. Built during…

ioc-managementvulnerability-scannersscripting-automation+6

34 months ago

CVE_ADC_IOC_2026

derekpreston81/cve_adc_ioc_2026

Citrix NetScaler CVE Preconditions Checker as per CTX696604 | Supported CVE : CVE-2026-8451, CVE-2026-8452, CVE-2026-8655, CVE-2026-10816,…

cloud-infrastructure-securityvulnerability-analysisscripting-automation+3

24 months ago

Previous 1…383940…60 Next