Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools for testing and securing serverless functions (e.g., AWS Lambda, Azure Functions) and their integrations.

Kitploit recommended

Top tools

10 selected

prowler

prowler-cloud/prowler

14.3k2 days ago

ScoutSuite

nccgroup/scoutsuite

7.8k2 years ago

pacu

rhinosecuritylabs/pacu

5.3k7 months ago

cloudfox

bishopfox/cloudfox

2.6k13 days ago

trivy

aquasecurity/trivy

37.4k2 days ago

checkov

bridgecrewio/checkov

8.9k2 days ago

kics

checkmarx/kics

2.7k6 days ago

cloud-custodian

cloud-custodian/cloud-custodian

6.0k3 days ago

#10

stratus-red-team

datadog/stratus-red-team

2.4k2 days ago

#11

Serverless-Goat

owasp/serverless-goat

3307 years ago

Newest Relevance Most popular Recently updated

41 results

CVE-2026-23007-Serverless-Cold-Start-Memory-Remanence-Data-Leakage-

george0papasotiriou/cve-2026-23007-serverless-cold-start-memory-remanence-data-leakage-

Simulates CVE-2026-23007 serverless cold-start memory remanence; demonstrates how persistent global state across Lambda invocations can leak secrets…

vulnerability-analysisexploitationserverless-security+2

3 months ago

roninforge-hono

roninforge/roninforge-hono

Cursor plugin for Hono v4 (TypeScript edge web framework). 59 LLM regressions with BAD/CORRECT pairs. Pinned to hono ^4.12.19 (>= 4.9.7 for…

static-code-analysisvulnerability-analysiscode-analysis+8

5 months ago

CTT-Serverless-RCE-v1.0---Convergent-Time-Theory-Enhanced-MCP-Exploit

simoesctt/ctt-serverless-rce-v1.0---convergent-time-theory-enhanced-mcp-exploit

Serverless Framework MCP Server (CVE-2025-69256) Base Score: 9.4/10 → CTT Enhanced Score: 9.9/10 A critical command injection vulnerability in…

vulnerability-analysisexploitationids-ips-evasion+8

9 months ago

Archived

LambdaGuard

skyscanner/lambdaguard

AWS Serverless Security

cloud-infrastructure-securityvulnerability-scannersstatic-code-analysis+3

4004 years ago

Archived

AlertResponder

m-mizutani/alertresponder

Automatic security alert response framework by AWS Serverless Application Model

defensive-toolsserverless-securitycloud-security+2

146 years ago

Previous 1 23Next