Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

324 results

Cappriciosec-University

cappricio-securities/cappriciosec-university

A Hacker's E-learning App for Tamil People

osintiot-securityweb-security+6

1 month ago

gatekeeper

open-policy-agent/gatekeeper

Kubernetes policy engine with OPA-based admission control, mutation, and audit for enforcing security and compliance configurations.

container-securityconfiguration-auditingcloud-security+3

4.3k6 days ago

auth

placeos/auth

PlaceOS authentication service and API gatekeeper.

authentication-authorizationcloud-infrastructure-securityencryption-decryption-tools+2

23 months ago

OpenAM

openidentityplatform/openam

Open-source access management platform offering single sign-on, adaptive authentication, authorization, and federation for secure access to web,…

authentication-authorizationidentity-managementweb-security+3

8823 days ago

carbon-identity-framework

wso2/carbon-identity-framework

Core framework for identity and access management, providing authentication, authorization, and identity governance capabilities for enterprise…

authentication-authorizationidentity-managementcloud-security+2

1377h 23m ago

xmlsec

lsh123/xmlsec

XML Security Library

authentication-authorizationencryption-decryption-toolsweb-security+2

1627 days ago

teleport

gravitational/teleport

The easiest, and most secure way to access and protect all of your infrastructure.

authentication-authorizationcontainer-securityconfiguration-auditing+7

20.8k1 month ago

MicroserviceCVE-2021-39156

mostafaanouarghorab/microservicecve-2021-39156

vulnerability-analysisexploitationweb-application-exploitation+3

6 months ago

exfil-scan

vikasudasi/exfil-scan

Scan LLM outputs and AI-generated content for data exfiltration signals (EchoLeak, CVE-2025-32711) before they reach users or downstream systems

data-exfiltrationdevsecopssecret-detection+2

62 months ago

clawshield-public

sleuthco/clawshield-public

Security proxy for AI agents. Scans every message for prompt injection, PII, and secrets. Defense-in-depth: Go proxy + iptables firewall + eBPF…

defensive-toolsvulnerability-scannersweb-security+6

1307 months ago

gimmepatz

6mile/gimmepatz

Personal Access Token (PAT) recon tool for bug bounty hunters, pentesters & red teams

authentication-authorizationreconnaissancedata-exfiltration+7

431 year ago

cve-mcp-server

mukul975/cve-mcp-server

Production-grade MCP server giving Claude 27 security intelligence tools across 21 APIs — CVE lookup, EPSS scoring, CISA KEV, MITRE ATT&CK, Shodan,…

osintreconnaissancevulnerability-scanners+6

1.1k3 months ago

traccar

traccar/traccar

Traccar GPS Tracking System

embedded-systems-securityiot-securitynetwork-security+3

7.6k11h 13m ago

quill-router

lore-hex/quill-router

TrustedRouter.com repo for secure LLM proxying

authentication-authorizationencryption-decryption-toolsconfiguration-auditing+6

1813h 37m ago

Securekit

roxanne_ardary/securekit

Securekit is a protocol-agnostic security kernel that enforces zero-trust, sandboxed execution for AI tool use. It sits between any LLM or agent…

container-securitydynamic-analysis-sandboxingsecurity-virtualization+5

2 months ago

apicheck

owasp/apicheck

Modular DevSecOps toolset for REST API security testing, designed for developers, sysadmins, and penetration testers to automate security checks…

vulnerability-scannersapi-security-testingweb-security+3

371 year ago

UAP-protocol

rajsidwadkar/uap-protocol

A unified, security-first wire protocol for tool access and agent coordination. UAP eliminates CVE-2025-49596 and MCP tool-poisoning vulnerabilities…

authentication-authorizationpenetration-testing-frameworkscontainer-security+8

14 months ago

ASVS

owasp/asvs

Application Security Verification Standard

vulnerability-analysiscode-analysisweb-security+3

3.5k4 days ago

Previous 1…456…18 Next