Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Security integration in CI/CD pipelines, shift-left, and DevOps security automation tools.

Kitploit recommended

Top tools

10 selected

trivy

aquasecurity/trivy

37.4k19h 7m ago

semgrep

semgrep/semgrep

16.2k9h 30m ago

gitleaks

gitleaks/gitleaks

28.6k3 months ago

trufflehog

trufflesecurity/trufflehog

27.4k16h 22m ago

checkov

bridgecrewio/checkov

8.9k1 day ago

grype

anchore/grype

12.7k2 days ago

syft

anchore/syft

9.7k11h 37m ago

dependency-track

dependencytrack/dependency-track

4.1k30 minutes ago

DependencyCheck

dependency-check/dependencycheck

7.7k9 days ago

#10

osv-scanner

google/osv-scanner

10.8k1 day ago

Newest Relevance Most popular Recently updated

1043 results

detect-secrets

yelp/detect-secrets

An enterprise friendly way of detecting and preventing secrets in code.

static-analysiscode-analysisdevsecops+1

4.6k6 months ago

sysbox

nestybox/sysbox

An open-source, next-generation "runc" that empowers rootless containers to run workloads such as Systemd, Docker, Kubernetes, just like VMs.

cloud-infrastructure-securitycontainer-securitysecurity-virtualization+2

3.9k3 days ago

skill-scanner

cisco-ai-defense/skill-scanner

Security Scanner for Agent Skills

static-analysisvulnerability-scannersdynamic-analysis-sandboxing+9

2.4k18h 19m ago

bearer

bearer/bearer

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

vulnerability-scannersstatic-code-analysiscode-analysis+3

2.7k9 days ago

PentestingEverything

m14r41/pentestingeverything

osintweb-securitynetwork-security+9

2.0k16 days ago

vuln-bank

commando-x/vuln-bank

Intentionally vulnerable banking platform for practicing web application, API, and AI/LLM security testing, secure code review, and DevSecOps…

code-analysisweb-securitypenetration-testing+5

98729 days ago

threat-dragon

owasp/threat-dragon

An open source threat modeling tool from OWASP

defensive-toolsvulnerability-analysisweb-security+5

1.6k1 day ago

ggshield

gitguardian/ggshield

Detect and validate 500+ types of hardcoded secrets with advanced checks. Use it as a pre-commit hook, GitHub Action, or CLI for proactive secret…

vulnerability-scannerscode-analysisdevsecops+1

2.0k11h 45m ago

sslyze

nabla-c0d3/sslyze

Fast and powerful SSL/TLS scanning library.

vulnerability-scannersconfiguration-auditingnetwork-security+1

3.8k6 months ago

rustsec

rustsec/rustsec

RustSec API & Tooling

static-analysisvulnerability-scannersvulnerability-analysis+3

1.9k8 days ago

wrongsecrets

owasp/wrongsecrets

Vulnerable app with examples showing how to not use secrets

container-securityvulnerability-analysisctf+5

1.5k1 day ago

f8x

ffffffff0x/f8x

红/蓝队环境自动化部署工具 | Red/Blue team environment automation deployment tool

vulnerability-scannersexploit-frameworksscripting-automation+7

2.2k6 days ago

akto

akto-api-security/akto

Open-source API security platform for continuous API discovery, vulnerability testing, and runtime threat detection. Integrates with CI/CD pipelines…

vulnerability-scannersapi-security-testingweb-security+2

1.5k2h 3m ago

collection-document

tom0li/collection-document

Collection of quality safety articles. Awesome articles.

osintvulnerability-analysisweb-security+9

2.1k5 years ago

tirith

sheeki03/tirith

Terminal security for developers and AI agents. Intercepts homograph URLs, pipe-to-shell, ANSI injection, obfuscated payloads, data exfiltration, and…

osintphishing-toolsvulnerability-scanners+8

2.7k1 day ago