Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Cybersecurity research, materials, labs, and learning paths, including CTFs and curated educational resources.

Kitploit recommended

Top tools

10 selected

hacktricks

hacktricks-wiki/hacktricks

12.1k6h 45m ago

PayloadsAllTheThings

swisskyrepo/payloadsallthethings

79.9k3 days ago

CheatSheetSeries

owasp/cheatsheetseries

32.9k1 day ago

Awesome-Hacking

hack-with-github/awesome-hacking

118.0k6 days ago

the-book-of-secret-knowledge

trimstray/the-book-of-secret-knowledge

237.8k1 year ago

awesome-pentest

enaqx/awesome-pentest

26.9k3 months ago

awesome-security

sbilly/awesome-security

14.7k9 months ago

h4cker

the-art-of-hacking/h4cker

28.9k10 days ago

awesome-osint

jivoi/awesome-osint

28.0k2 days ago

#10

awesome-malware-analysis

rshipp/awesome-malware-analysis

14.1k2 years ago

Newest Relevance Most popular Recently updated

11163 results

stego-toolkit

dominicbreuker/stego-toolkit

Collection of steganography tools - helps with CTF challenges

forensicssteganographyctf+2

2.7k6 years ago

awesome-lists

mthcht/awesome-lists

Curated repository of threat intelligence feeds, IoC lists, YARA rules, and DFIR tool references for SOC/CERT/CTI detection and incident response.

ioc-managementthreat-feeds-aggregatorsdigital-forensics+4

1.9k57 minutes ago

responsible-ai-toolbox

microsoft/responsible-ai-toolbox

Interactive dashboards and libraries for responsible AI model debugging, covering error analysis, fairness, interpretability, counterfactuals, causal…

utilities-frameworksmachine-learningeducation+2

1.9k7 days ago

pi-pwnbox-rogueap

koutto/pi-pwnbox-rogueap

Homemade Pwnbox :rocket: / Rogue AP :satellite: based on Raspberry Pi — WiFi Hacking Cheatsheets + MindMap :bulb:

wi-fi-auditinginformation-gatheringwireless-security+4

2.1k4 months ago

wrongsecrets

owasp/wrongsecrets

Vulnerable app with examples showing how to not use secrets

container-securityvulnerability-analysisctf+5

1.5k11h 2m ago

ST3GG

elder-plinius/st3gg

All-in-one steganography suite

osintencryption-decryption-toolsdata-exfiltration+8

1.7k4 months ago

APTs-Adversary-Simulation

s3n4t0r-0x0/apts-adversary-simulation

This repository contains detailed adversary simulation APT campaigns targeting various critical sectors. Each simulation includes custom tools, C2…

privilege-escalationreconnaissancepersistence-mechanisms+9

1.1k6 days ago

rosenbridge

xoreaxeaxeax/rosenbridge

Hardware backdoors in x86 CPUs

privilege-escalationvulnerability-analysisexploitation+8

2.6k8 years ago

Cybersecurity-Resources

nickyie/cybersecurity-resources

A Library of various cybersecurity resources

educationcurated-resourceslearning-paths-courses

2.6k4 years ago

vulnerable-AD

safebuffer/vulnerable-ad

Create a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab

penetration-testingeducationlabs-practice

2.3k4 years ago

AIL-framework

circl/ail-framework

AIL framework - Analysis Information Leak framework. Project moved to https://github.com/ail-project

ioc-managementosintthreat-feeds-aggregators+8

1.4k7h 6m ago

SSRF-Testing

cujanovic/ssrf-testing

SSRF (Server Side Request Forgery) testing resources

payload-generationweb-application-exploitationinformation-gathering+6

2.5k2 years ago

f8x

ffffffff0x/f8x

红/蓝队环境自动化部署工具 | Red/Blue team environment automation deployment tool

vulnerability-scannersexploit-frameworksscripting-automation+7

2.2k17 days ago

ICS-Security-Tools

iti/ics-security-tools

Tools, tips, tricks, and more for exploring ICS Security.

defensive-toolsvulnerability-analysisscada-ics-security+4

2.1k1 day ago

HUNT

bugcrowd/hunt

Flags parameters commonly associated with injection, SSRF, path traversal, IDOR, and SSTI, via passive Burp/ZAP scanning; also organizes manual…

web-vulnerability-scannersvulnerability-analysisweb-proxies-interception+3

2.3k2 months ago

exploitation-course

ashemery/exploitation-course

Offensive Software Exploitation Course

exploitationreverse-engineeringshellcode+7

2.5k3 years ago

Awesome-Android-Reverse-Engineering

user1342/awesome-android-reverse-engineering

A curated list of awesome Android Reverse Engineering training, resources, and tools.

android-securitystatic-analysisdynamic-analysis-sandboxing+7

2.6k1 year ago

NodeGoat

owasp/nodegoat

The OWASP NodeGoat project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how…

vulnerability-analysisweb-securitypenetration-testing+3

2.1k3 years ago

Previous 1…222324…100 Next