Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools for identifying, assessing, and prioritizing security weaknesses in systems and applications.

Kitploit recommended

Top tools

10 selected

nuclei

projectdiscovery/nuclei

30.4k6h 28m ago

zaproxy

zaproxy/zaproxy

15.6k6h 31m ago

openvas-scanner

greenbone/openvas-scanner

4.8k10h 43m ago

trivy

aquasecurity/trivy

37.4k7h 18m ago

vuls

future-architect/vuls

12.2k6 days ago

lynis

cisofy/lynis

16.1k1 month ago

prowler

prowler-cloud/prowler

14.3k4 days ago

ScoutSuite

nccgroup/scoutsuite

7.8k2 years ago

wapiti

wapiti-scanner/wapiti

1.9k1 month ago

#10

nikto

sullo/nikto

10.6k2 months ago

Newest Relevance Most popular Recently updated

28667 results

awesome-termux-hacking

may215/awesome-termux-hacking

⚡️An awesome list of the best Termux hacking tools

android-securityosintvulnerability-scanners+9

4.7k5 years ago

sandsifter

xoreaxeaxeax/sandsifter

The x86 processor fuzzer

vulnerability-analysisreverse-engineeringfuzzing+2

5.1k9 years ago

DefaultCreds-cheat-sheet

ihebski/defaultcreds-cheat-sheet

One place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️

defensive-toolsreconnaissancepassword-attacks+6

6.7k1 month ago

nono

nolabs-ai/nono

agent runtime security - zero trust, zero setup, zero latency agent sandboxing

container-securitycode-analysisconfiguration-auditing+8

3.6k4h 43m ago

pgbackrest

pgbackrest/pgbackrest

Parallel backup and restore solution for PostgreSQL with encryption, delta restore, and multi-cloud object store support for enterprise disaster…

encryption-decryption-toolsconfiguration-auditingdata-recovery+3

4.3k8h 19m ago

signature-base

neo23x0/signature-base

YARA signature and IOC database for my scanners and tools

ioc-managementthreat-feeds-aggregatorsvulnerability-analysis+7

3.0k5 days ago

joern

joernio/joern

Open-source code analysis platform for C/C++/Java/Binary/Javascript/Python/Kotlin based on code property graphs. Discord https://discord.gg/vv4MH284Hc

static-analysisvulnerability-analysiscode-analysis+2

3.3k1 day ago

cvelistV5

cveproject/cvelistv5

CVE cache of the official CVE List in CVE JSON 5 format

vulnerability-analysisinformation-gatheringthreat-intelligence+3

2.9k3h 17m ago

raptor

gadievron/raptor

Autonomous security research framework integrating static analysis, binary analysis, fuzzing, LLM-powered vulnerability validation, exploit…

penetration-testing-frameworksdynamic-analysis-sandboxingexploit-frameworks+7

3.6k49 minutes ago

IntelOwl

intelowlproject/intelowl

Scalable threat intelligence platform that enriches observables and files using 200+ analyzers, with built-in GUI, REST API, and automated workflows…

ioc-managementosintstatic-analysis+14

4.7k2 months ago

wfuzz

xmendez/wfuzz

Modular web fuzzer for automated security testing. Injects payloads into any HTTP request field to discover vulnerabilities, brute-force parameters,…

web-vulnerability-scannersvulnerability-analysisweb-security+2

6.5k9 months ago

payloads

foospidy/payloads

Git All the Payloads! A collection of web attack payloads.

password-crackingvulnerability-analysisinformation-gathering+6

4.0k5 years ago

php2shell-poc

ikow/php2shell-poc

CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.

memory-forensicsvulnerability-analysisexploitation+5

1.9k5 days ago

dnscontrol

dnscontrol/dnscontrol

Infrastructure as code for DNS!

cloud-infrastructure-securityconfiguration-auditingdevsecops+1

3.9k1 day ago

pyWhat

bee-san/pywhat

🐸 Identify anything. pyWhat easily lets you identify emails, IP addresses, and more. Feed it a .pcap file or some text and it'll tell you what it…

osintreconnaissancevulnerability-analysis+7

7.3k1 month ago

IntruderPayloads

1n3/intruderpayloads

A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.

vulnerability-scannersweb-securityfuzzing+3