Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools for managing user identities, authentication, authorization, and access controls within systems and networks.

Newest Relevance Most popular Recently updated

878 results

santa

northpolesec/santa

A binary and file access authorization system for macOS.

authentication-authorizationdefensive-toolsbinary-analysis+2

7223 days ago

gapps

bmarsh9/gapps

Security compliance platform - SOC2, CMMC, ASVS, ISO27001, HIPAA, NIST CSF, NIST 800-53, CSC CIS 18, PCI DSS, SSF tracking

vulnerability-analysisconfiguration-auditingcloud-security+2

6885 months ago

CredKing

ustayready/credking

Password spraying using AWS Lambda for IP rotation

password-attacksscripting-automationpenetration-testing+3

6688 years ago

PurpleCloud

iknowjason/purplecloud

A little tool to play with Azure Identity - Azure and Entra ID lab creation tool. Blog: https://medium.com/@iknowjason/sentinel-for-purple-teaming-1…

cloud-infrastructure-securitypenetration-testingcloud-security+4

6511 year ago

Archived

Mandiant-Azure-AD-Investigator

mandiant/mandiant-azure-ad-investigator

digital-forensicscloud-securitythreat-intelligence+4

6503 years ago

kviklet

kviklet/kviklet

Pull Request-like Review/Approval flow for database queries. For compliant but smooth Engineering access to production.

authentication-authorizationcloud-securityidentity-access-management+1

6222 days ago

BARK

bloodhoundad/bark

BloodHound Attack Research Kit

privilege-escalationreconnaissanceexploitation+6

6041 year ago

iam-vulnerable

bishopfox/iam-vulnerable

Use Terraform to create your own vulnerable by design AWS IAM privilege escalation playground.

privilege-escalationvulnerability-analysispenetration-testing+4

58511 months ago

ad-password-protection

lithnet/ad-password-protection

Active Directory password filter featuring breached password checking and custom complexity rules

password-crackingconfiguration-auditingidentity-access-management+1

57321 days ago

Aker

aker-gateway/aker

SSH bastion/jump host/jumpserver

authentication-authorizationcloud-infrastructure-securitynetwork-security+2

5715 years ago

WindowsProtocolTestSuites

microsoft/windowsprotocoltestsuites

⭐⭐ Join us at SNIA SDC for the SMB3 IO Lab (September 28 - October 1, 2026), see upcoming Interoperability Events

vulnerability-analysisconfiguration-auditingfuzzing+6

5648 days ago

SecurityExplained

harsh-bothra/securityexplained

SecurityExplained is a new series after the previous learning challenge series #Learn365. The aim of #SecurityExplained series is to create…

authentication-authorizationvulnerability-analysismobile-app-pentesting+7

5464 years ago

Grid-Mobile

rezivure/grid-mobile

Grid: Private Location Sharing mobile app for iOS/Android. E2EE with Matrix.

authentication-authorizationosintencryption-decryption-tools+2

5371 day ago

vcenter_saml_login

horizon3ai/vcenter_saml_login

A tool to extract the IdP cert from vCenter backups and log in as Administrator

authentication-authorizationcloud-infrastructure-securityprivilege-escalation+4

5292 years ago

MagicSigner

namazso/magicsigner

Signtool for expired certificates

authentication-authorizationdefensive-toolsreverse-engineering+2

5243 years ago

BadZure

mvelazc0/badzure

BadZure automates the deployment of intentionally misconfigured Entra ID tenants and Azure subscriptions, populating them with diverse entities and…

privilege-escalationctfpenetration-testing+6

51715 days ago

EntraFalcon

compasssecurity/entrafalcon

A lightweight PowerShell tool for assessing the security posture of Microsoft Entra ID environments. It helps identify privileged objects, risky…

vulnerability-scannersinformation-gatheringpenetration-testing+3

4582 months ago