Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools for identifying, assessing, and prioritizing security weaknesses in systems and applications.

Newest Relevance Most popular Recently updated

25170 results

deepsec

vercel-labs/deepsec

Agent-powered vulnerability scanner for large-scale codebases. Uses LLMs to find hard-to-detect security issues via regex matchers and AI…

static-analysisvulnerability-scannerscode-analysis+5

6.7k

2 days ago

T3MP3ST

elder-plinius/t3mp3st

autonomous red teaming platform; multi-agent offensive-security meta-harness

penetration-testing-frameworksreconnaissanceexploit-frameworks+9

5.5k8 days ago

pmd

pmd/pmd

An extensible multilanguage static code analyzer.

static-analysisstatic-code-analysiscode-analysis

5.5k16h 3m ago

device-activity-tracker

gommzystudio/device-activity-tracker

A phone number can reveal whether a device is active, in standby or offline (and more). This PoC demonstrates how delivery receipts + RTT timing leak…

osintreconnaissancevulnerability-analysis+7

5.1k7 months ago

nono

nolabs-ai/nono

safe execution paths for agents - zero trust, zero setup, zero latency.

container-securitycode-analysisconfiguration-auditing+8

3.6k14h 13m ago

Claude-BugHunter

elementalsouls/claude-bughunter

A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curated across 24…

osintreconnaissancevulnerability-analysis+8

3.5k7h 41m ago

METATRON

sooryathejas/metatron

AI-powered penetration testing assistant using local LLM on linux (Parrot OS)

reconnaissancevulnerability-analysisexploitation+5

3.4k4 months ago

Smap

s0md3v/smap

a drop-in replacement for Nmap powered by shodan.io

reconnaissancevulnerability-scannersnetwork-mapping+2

3.3k5 days ago

FinalRecon

thewhiteh4t/finalrecon

Automated web reconnaissance tool providing header analysis, DNS enumeration, subdomain discovery, directory scanning, SSL inspection, and port…

osintreconnaissanceport-scanning+7

2.9k2 months ago

pentest-guide

voorivex/pentest-guide

Penetration tests guide based on OWASP including test cases, resources and examples.

privilege-escalationvulnerability-analysisinformation-gathering+6

2.8k5 years ago

SecGen

cliffe/secgen

Create randomly insecure VMs

vulnerability-scannerssecurity-virtualizationctf+3

2.8k20 days ago

Astra

flipkart-incubator/astra

Automated Security Testing For REST API's

vulnerability-scannersapi-security-testingweb-security+2

2.7k2 years ago

LibAFL

aflplusplus/libafl

Advanced Fuzzing Library - Slot your Fuzzer together in Rust! Scales across cores and machines. For Windows, Android, MacOS, Linux, no_std, ...

penetration-testing-frameworksdynamic-analysis-sandboxingexploit-frameworks+5

2.6k2 days ago

nodejsscan

ajinabraham/nodejsscan

nodejsscan is a static security code scanner for Node.js applications.

static-analysisvulnerability-scannerscode-analysis+2

2.6k1 year ago

jaeles

jaeles-project/jaeles

The Swiss Army knife for automated Web Application Testing

vulnerability-scannersweb-vulnerability-scannersweb-security+1

2.4k2 months ago

Ingram

jorhelp/ingram

网络摄像头漏洞扫描工具 | Webcam vulnerability scanning tool

vulnerability-scannersiot-securityexploitation+1

2.3k2 days ago

fuzzilli

googleprojectzero/fuzzilli

A JavaScript Engine Fuzzer

vulnerability-analysisfuzzingbinary-analysis+2

2.3k19h 34m ago

linWinPwn

lefayjey/linwinpwn

Bash script wrapping Active Directory tools for automated enumeration, vulnerability checks, exploitation, and password dumping via LDAP, RPC,…

password-crackingreconnaissancevulnerability-scanners+3

2.2k12 days ago

Previous 1…567…1399 Next