Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
50 results
SafeLine preview

SafeLine

GitHubchaitin/safeline

Self-hosted WAF and reverse proxy that filters malicious HTTP traffic, blocks SQL injection, XSS, and bot attacks, with rate limiting and dynamic…

anti-botapi-securityapi-security-testing+8
22.7k
4 days ago
opa preview

opa

GitHubopen-policy-agent/opa

Declarative policy engine that enables authorization and policy enforcement across services, Kubernetes, Terraform, Docker, and APIs using the Rego…

api-securityauthenticationauthentication-authorization+10
12.3k1 day ago
keeweb preview

keeweb

GitHubkeeweb/keeweb

Free cross-platform password manager compatible with KeePass

authenticationencryption-decryption-toolsgeneral-purpose-utilities+1
13.0k4 months ago
OpenSC preview

OpenSC

GitHubopensc/opensc

Open source smart card tools and middleware. PKCS#11/MiniDriver

authenticationcryptographyencryption-decryption-tools+2
3.1k4 days ago
cerbos preview

cerbos

GitHubcerbos/cerbos

Authorization engine for context-aware access control with YAML policies, RBAC/ABAC support, check/plan APIs, and GitOps-friendly deployment.

api-securityauthenticationauthentication-authorization+3
4.6k1 day ago
iDict preview

iDict

GitHubpr0x13/idict

PHP-based iCloud Apple ID dictionary attack tool that bypasses account lockout and secondary authentication to brute-force credentials.

authenticationexploitationpassword-attacks+3
9023 years ago
VibeSec-Skill preview

VibeSec-Skill

GitHubbehisecc/vibesec-skill

This skill helps Claude write secure code and prevent common vulnerabilities.

ai-securityapi-securityauthentication+8
1.3k7 months ago
RSA preview

RSA

GitHubrustcrypto/rsa

Pure Rust library for RSA public-key cryptography: key generation, PKCS#1 v1.5 and OAEP encryption/decryption, PSS signatures, plus key import/export.

authenticationcryptographyencryption-decryption-tools
6734 months ago
ad-password-protection preview

ad-password-protection

GitHublithnet/ad-password-protection

Active Directory password filter featuring breached password checking and custom complexity rules

authenticationconfiguration-auditingidentity-access-management+1
5771 month ago
puppet-os-hardening preview

puppet-os-hardening

GitHubdev-sec/puppet-os-hardening

This puppet module provides numerous security-related configurations, providing all-round base protection.

authenticationcloud-infrastructure-securityconfiguration-auditing+3
2919 days ago
bramble preview

bramble

GitHubflythenimbus/bramble

Local-first password manager with direct device-to-device sync

authenticationcryptographyencryption-decryption-tools+7
3983 days ago
Tyr preview

Tyr

GitHubjb-selfcompany/tyr

True P2P Email on top of Yggdrasil Network for Android

android-securityauthenticationemail-security+4
3492 months ago
enject preview

enject

GitHubgreatscott/enject

enject: Hide .env secrets from prAIng eyes: secrets live in local encrypted stores (per project) and are injected directly into apps at runtime,…

authenticationcloud-securitydevsecops+3
5037 months ago
Prox-Ez preview

Prox-Ez

GitHubsynacktiv/prox-ez

HTTP/HTTPS interception proxy for testing Windows authentication mechanisms, supporting NTLM, Kerberos, pass-the-hash, pass-the-ticket and relay…

authenticationimpersonation-toolslateral-movement+4
1133 months ago
WhoAmIMailBot preview

WhoAmIMailBot

GitHubmthbernardes/whoamimailbot

Self-hosted email alias masking service using Postfix and Telegram bot to create disposable addresses for signups, with full control over email…

authenticationemail-securityprivacy+1
688 years ago
dc34-vault preview

dc34-vault

GitHubbunnie/dc34-vault

Vault app for DC34 badge

authenticationcryptographyembedded-systems-security+2
611 month ago
c-sentinel preview

c-sentinel

GitHubspeytech/c-sentinel

Semantic Observability for UNIX Systems - A lightweight C-based system prober with AI-powered analysis

ai-securityanomaly-detectionauthentication+8
726 months ago
OpenSC.tokend preview

OpenSC.tokend

GitHubopensc/opensc.tokend

Tokend module for OS X with support for all cards supported by OpenSC

authenticationcryptographyhardware-security+1
362 years ago
Previous123Next