Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Dependency scanning, SBOM generation, package integrity, and supply chain risk tools.

Kitploit recommended

Top tools

10 selected

osv-scanner

google/osv-scanner

10.8k3 days ago

trivy

aquasecurity/trivy

37.4k2 days ago

grype

anchore/grype

12.7k2 days ago

syft

anchore/syft

9.8k18h 4m ago

scorecard

ossf/scorecard

5.6k4 days ago

cosign

sigstore/cosign

6.2k7 days ago

in-toto

in-toto/in-toto

1.1k2 months ago

python-tuf

theupdateframework/python-tuf

1.7k18 days ago

securesystemslib

secure-systems-lab/securesystemslib

545 days ago

#10

dependency-track

dependencytrack/dependency-track

4.1k11h 9m ago

Newest Relevance Most popular Recently updated

826 results

VulnFanatic-NG

martyx00/vulnfanatic-ng

BianryNinja plugin for identifying vulnerabilities in decompiled binaries with both programmatic scans and LLM support.

static-code-analysisvulnerability-analysiscode-analysis+9

144 months ago

CVE-2023-51385_test

ltmthink/cve-2023-51385_test

一个验证对CVE-2023-51385

vulnerability-analysisexploitationweb-application-exploitation+2

72 years ago

vibe-coding-security

boxed-dev/vibe-coding-security

Pre-launch security checklist for AI-generated apps (Lovable, v0, Bolt, Cursor). 69 checks covering Supabase RLS, exposed keys, and prompt injection.…

vulnerability-analysisconfiguration-auditingweb-security+9

132 months ago

CVE-2026-43813

eastarctica/cve-2026-43813

CVE-2026-43813: CloudAttestation enforceEnvironment bypass

authentication-authorizationios-securityvulnerability-analysis+5

63 months ago

harbor

codesecurityteam/harbor

CVE-2022-46463 harbor公开镜像全自动下载脚本

container-securityvulnerability-analysisexploitation+4

151 year ago

conduit

anee769/conduit

On-prem API gateway for AI coding agents with per-engineer cost attribution, hard budgets, egress governance (secrets/entity scanning), context-rot…

cloud-infrastructure-securitycloud-securitydevsecops+4

84 months ago

scopeblind-gateway

tomjwxf/scopeblind-gateway

Security gateway for MCP servers with per-tool policy enforcement, Ed25519-signed audit receipts, and shadow-mode logging. Supports Cedar, OPA, and…

authentication-authorizationencryption-decryption-toolscloud-security+6

96 months ago

vexhub-crawler

aquasecurity/vexhub-crawler

Collect VEX documents and update VEX Hub

threat-feeds-aggregatorsvulnerability-analysisinformation-gathering+3

711 months ago

xz-backdoor-github

emirkmo/xz-backdoor-github

History of commits related to the xz backdoor Discovered On March 29, 2024: CVE-2024-3094.

malware-analysisdigital-forensicsthreat-intelligence+3

112 years ago

CVE-2021-42574

simplylu/cve-2021-42574

Generate malicious files using recently published bidi-attack (CVE-2021-42574)

static-analysispayload-generationvulnerability-analysis+3

83 years ago

binfinder

aquasecurity/binfinder

Find binary files not installed through package manager

container-securitybinary-analysissupply-chain-security

115 years ago

CVE-2017-1000117

timwr/cve-2017-1000117

Proof of concept of CVE-2017-1000117

vulnerability-analysisexploitationpenetration-testing+2

79 years ago

authproof-sdk

commonguy25/authproof-sdk

Cryptographically signed delegation receipts for AI agents. Define exactly what an AI can and can't do — signed, verifiable, tamper-proof.

authentication-authorizationcryptographyidentity-access-management+3

623 days ago

log4j-samples

mergebase/log4j-samples

Public testing data. Samples of log4j library versions to help log4j scanners / detectors improve their accuracy for detecting CVE-2021-45046 and…

vulnerability-scannersvulnerability-analysissupply-chain-security+2

144 years ago

DeepTrap

zjuicsr/deeptrap

Security benchmark for evaluating OpenClaw agents against adversarial execution contexts including poisoned files, injected skills, misleading tool…

privilege-escalationdata-exfiltrationpenetration-testing+8

105 months ago

Vulfy

mindpatch/vulfy

🐺 Vulfy – Fast Rust based package version scanner

vulnerability-scannersvulnerability-analysiscode-analysis+2

161 year ago

Package-Inferno

mhaggis/package-inferno

A Public Package Scanner for The Community

static-analysisvulnerability-scannerscontainer-security+6

139 months ago

credactor

rxb06/credactor

Scan. Redact. Commit clean.

static-analysisvulnerability-scannerscode-analysis+3

810 days ago

Previous 1…161718…46 Next