Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools for managing user identities, authentication, authorization, and access controls within systems and networks.

Newest Relevance Most popular Recently updated

877 results

kviklet

kviklet/kviklet

Pull Request-like Review/Approval flow for database queries. For compliant but smooth Engineering access to production.

authentication-authorizationcloud-securityidentity-access-management+1

622

2 days ago

infisical

infisical/infisical

Infisical is the open-source platform for secrets, certificates, and privileged access management.

authentication-authorizationconfiguration-auditingcryptography+4

28.5k2 days ago

CVE-2026-44848-PoC

boreas37/cve-2026-44848-poc

PoC for CVE-2026-44848: Portainer missing authorization on Docker plugin endpoints -> host RCE (GHSA-rrmm-9v76-h3p4). Stdlib-only Python.

authentication-authorizationcontainer-securityvulnerability-analysis+3

2 days ago

certbot

certbot/certbot

Certbot is EFF's tool to obtain certs from Let's Encrypt and (optionally) auto-enable HTTPS on your server. It can also act as a client for any…

authentication-authorizationencryption-decryption-toolsconfiguration-auditing+3

33.2k2 days ago

securix

cloud-gouv/securix

SécurixOS is a NixOS-based secure operating system tailored for small to medium-sized teams. It provides a minimal, hardened environment with strong…

encryption-decryption-toolsconfiguration-auditingnetwork-security+7

1.0k2 days ago

OpenSC

opensc/opensc

Open source smart card tools and middleware. PKCS#11/MiniDriver

encryption-decryption-toolscryptographyhardware-security+2

3.1k2 days ago

TeamPass

nilsteampassnet/teampass

Collaborative Passwords Manager

authentication-authorizationpassword-crackingencryption-decryption-tools+8

1.8k2 days ago

santa

northpolesec/santa

A binary and file access authorization system for macOS.

authentication-authorizationdefensive-toolsbinary-analysis+2

7223 days ago

opennhp

opennhp/opennhp

A lightweight, cryptography-powered, open-source toolkit built to enforce Zero Trust security for infrastructure, applications, and data in the…

authentication-authorizationdefensive-toolsencryption-decryption-tools+3

13.9k3 days ago

CVE-2026-71518

ilhomjonr/cve-2026-71518

Advisory and PoC for an unauthenticated authorization bypass in Typemill media downloads, using path-equivalent URL variants to access…

authentication-authorizationvulnerability-analysisexploitation+3

13 days ago

apm

aaravmaloo/apm

A local password manager for everyone

password-crackingencryption-decryption-toolscryptography+7

293 days ago

probo

getprobo/probo

Open source solutions for SOC2, GDPR, and ISO27001

defensive-toolscloud-securitydevsecops+3

1.3k3 days ago

zappzarapp-php-security

marcstraube/zappzarapp-php-security

PHP 8.4+ security library (mirror)

authentication-authorizationencryption-decryption-toolsvulnerability-analysis+6

3 days ago

bmcweb

openbmc/bmcweb

A do everything Redfish, KVM, GUI, and DBus webserver for OpenBMC

authentication-authorizationcloud-infrastructure-securityembedded-systems-security+6

2303 days ago

AddUser-SAMR

ricardojoserf/adduser-samr

Create local administrators with the SAMR API (lowest-level technique). Implemented in C#, Crystal, Python and Rust

privilege-escalationpayload-generationpersistence-mechanisms+5

953 days ago

TokenTacticsV2

f-bader/tokentacticsv2

A fork of the great TokenTactics with support for CAE and token endpoint v2

phishing-toolspenetration-testingcloud-security+3

4444 days ago

CVE-2026-71204-PoC

nel-droid/cve-2026-71204-poc

PoC: changedetection.io settings blind-merge mass assignment (CVE-2026-71204, Medium 6.3)

authentication-authorizationvulnerability-analysisexploitation+2

4 days ago

CVE-2026-72585-PoC

nel-droid/cve-2026-72585-poc

PoC: Grafana Editor role deletes protected contact points (CVE-2026-72585, Medium 6.5)