Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
13678 results
betterleaks preview

betterleaks

GitHubbetterleaks/betterleaks

Fast, configurable secrets scanner for filesystems, git history, containers, and cloud sources, with Expr-based filtering, credential validation, and…

static-analysisvulnerability-scannerscode-analysis+6
2.3k
1 day ago
opengrep preview

opengrep

GitHubopengrep/opengrep

🔎 Static code analysis engine to find security issues in code.

defensive-toolsstatic-analysisvulnerability-scanners+7
3.2k1 day ago
cdxgen preview

cdxgen

GitHubcdxgen/cdxgen

Creates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package managers. Integrate…

static-analysiscontainer-securityvulnerability-analysis+6
1.1k1 day ago
win-def-clickfix preview

win-def-clickfix

GitHubbackdoorskid/win-def-clickfix

A scanner that estimates whether Microsoft Defender is likely to flag a command as ClickFix.

defensive-toolsstatic-analysisvulnerability-analysis+3
21 day ago
ShellSCope preview

ShellSCope

GitHubd0rb/shellscope

Defensive exposure auditor for Plex2Shell and php2shell — find your own before they find you.

defensive-toolsreconnaissancevulnerability-scanners+7
3 days ago
OBS-graphics-hook32-Hook preview

OBS-graphics-hook32-Hook

GitHubgmh5225/obs-graphics-hook32-hook

Demonstrates hooking OBS graphics-hook32.dll's D3D9 Present pointer to achieve stream-proof rendering that evades anti-cheat game capture detection.

web-proxies-interceptionids-ips-evasionreverse-engineering+4
24 years ago
OffensiveDriver preview

OffensiveDriver

GitHubgmh5225/offensivedriver

Windows kernel driver prototype that toggles process protection, adjusts process privileges, patches DSE policy, and manipulates AV/EDR kernel…

defensive-toolsprivilege-escalationexploitation+5
13 years ago
ollama-hunter preview

ollama-hunter

GitHubgmh5225/ollama-hunter

Scans Shodan for publicly exposed Ollama and llama.cpp servers, enumerating hosts, locations, and available models for security research.

osintreconnaissancevulnerability-scanners+4
71 year ago
ollytlscatch preview

ollytlscatch

GitHubgmh5225/ollytlscatch

OllyDbg plugin that intercepts and dumps TLS/SSL plaintext traffic during debugging sessions, aiding reverse engineering and malware analysis of…

encryption-decryption-toolsdynamic-code-analysisreverse-engineering+2
13 years ago
MarauderBox preview

MarauderBox

GitHubrianhanft/marauderbox

A fork of the marauder firmware with Nyan box capabilities

embedded-systems-securitywi-fi-auditingbluetooth-security+5
1 day ago
dsh-infinite-gen-5 preview

dsh-infinite-gen-5

GitHubminglink/dsh-infinite-gen-5

DeepSeek v4.1 flash 逆向工具(无限五代) 求 Star 收藏 ⭐欢迎大家提交项目的改进

packet-sniffing-analysisstatic-analysisdynamic-analysis-sandboxing+8
3.4k4 days ago
SudoStamp preview

SudoStamp

GitLabritwick7/sudostamp

Approve sudo on a Linux workstation with a fingerprint on your Android phone. LAN only; the ECDSA key never leaves the phone's TEE and speaks the…

android-securityauthentication-authorizationprivilege-escalation+5
1 day ago
ShipProof preview

ShipProof

GitLabdivyanshukumar0014/shipproof

SOC 2 evidence that collects itself in GitLab CI: every merge emits a signed bundle, an OPA gate blocks releases with missing proof, and auditors get…

defensive-toolsstatic-analysiscode-analysis+6
21h 8m ago
pycdc preview

pycdc

GitHubejfkdev/pycdc

Decompile and disassemble Python bytecode (.pyc/.pyo) back to readable source. Supports Python 2.0 - 3.15 (CPython, PyPy and other implementations).…

static-analysiscode-analysisreverse-engineering+4
81 day ago
NetSpecter preview

NetSpecter

GitHubmrhackercharlie/netspecter

Real-time system monitoring tool for detecting process activity and network exposure!

defensive-toolsvulnerability-analysisinformation-gathering+4
27 months ago
regextokens preview

regextokens

GitHubodomojuli/regextokens

list of regex patterns for oauth / api tokens with provided source

defensive-toolsstatic-analysisvulnerability-scanners+5
2933 months ago
agenttriage-open-source preview

agenttriage-open-source

GitHubasngs/agenttriage-open-source

Cross-agent tracing and security-diagnosis system for tool-using LLM agents: normalizes trace events, builds provenance graphs, extracts…

dynamic-analysis-sandboxingcode-analysisforensics+6
2 months ago
Windows-LPE-Auditor preview

Windows-LPE-Auditor

GitHub0xby7eme/windows-lpe-auditor

A small Windows local-privilege-escalation (LPE) misconfiguration auditor with a terminal UI, built with C++20 and FTXUI

authentication-authorizationdefensive-toolsprivilege-escalation+5
21 day ago
Previous12…100Next