Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
23 results
cloudflared preview

cloudflared

GitHubcloudflare/cloudflared

Client for Cloudflare Tunnel enabling secure outbound-only connections to origins via Zero Trust architecture. Supports HTTP, WebSocket, SSH, and RDP…

api-securitycloud-infrastructure-securitycloud-security+3
15.4k
5 days ago
opa preview

opa

GitHubopen-policy-agent/opa

Declarative policy engine that enables authorization and policy enforcement across services, Kubernetes, Terraform, Docker, and APIs using the Rego…

api-securityauthenticationauthentication-authorization+10
12.1k4 days ago
chaos-mesh preview

chaos-mesh

GitHubchaos-mesh/chaos-mesh

A Chaos Engineering Platform for Kubernetes.

chaos-engineeringcloud-infrastructure-securitycontainer-security
7.9k7 days ago
pacu preview

pacu

GitHubrhinosecuritylabs/pacu

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

cloud-infrastructure-securitycloud-securitydata-exfiltration+7
5.3k5 months ago
boundary preview

boundary

GitHubhashicorp/boundary

Identity-aware proxy providing secure, just-in-time access to hosts with session controls, dynamic credential management, and OIDC integration.

authentication-authorizationcloud-infrastructure-securityidentity-access-management+1
4.1k19 days ago
AWSGoat preview

AWSGoat

GitHubine-labs/awsgoat

Intentionally vulnerable AWS infrastructure for practicing cloud penetration testing, covering OWASP Top 10 web risks, IAM, S3, Lambda, EC2, and ECS…

cloud-infrastructure-securitycloud-securitycontainer-security+6
2.0k1 year ago
AzureGoat preview

AzureGoat

GitHubine-labs/azuregoat

Intentionally vulnerable Azure infrastructure for practicing cloud penetration testing, red teaming, and secure coding. Features OWASP Top 10 web…

cloud-infrastructure-securitycloud-securityeducation+5
9611 year ago
cli preview

cli

GitHubcloudgraphdev/cli

The universal GraphQL API and CSPM tool for AWS, Azure, GCP, K8s, and tencent.

api-securitycloud-infrastructure-securitycloud-security+3
8893 years ago
Aker preview

Aker

GitHubaker-gateway/aker

SSH bastion gateway with session recording, command extraction, and SIEM-ready logging. Integrates with FreeIPA for identity management and supports…

authentication-authorizationcloud-infrastructure-securitylog-analysis+2
5715 years ago
DVSA preview

DVSA

GitHubowasp/dvsa

a Damn Vulnerable Serverless Application

api-security-testingcloud-infrastructure-securitycloud-security+6
5452 years ago
GCPGoat preview

GCPGoat

GitHubine-labs/gcpgoat

Deliberately vulnerable GCP infrastructure for hands-on cloud security training. Features OWASP Top 10 web vulnerabilities, IAM privilege escalation,…

cloud-infrastructure-securitycloud-securityeducation+5
4531 year ago
bmcweb preview

bmcweb

GitHubopenbmc/bmcweb

A do everything Redfish, KVM, GUI, and DBus webserver for OpenBMC

api-securityauthentication-authorizationcloud-infrastructure-security+6
23215 days ago
PingCastleCloud preview
Archived

PingCastleCloud

GitHubnetwrix/pingcastlecloud

Azure AD security assessment tool that evaluates tenant configuration and identity risk, scoring findings through a maturity framework to prioritize…

authentication-authorizationcloud-infrastructure-securitycloud-security+4
1543 years ago
Azure-AccessPermissions preview
Archived

Azure-AccessPermissions

GitHubcsandker/azure-accesspermissions

PowerShell script to enumerate Azure Active Directory access permissions, including role assignments, service principals, and privileged access…

authentication-authorizationcloud-infrastructure-securitycloud-security+4
1103 years ago
atproto preview

atproto

GitHubblacksky-algorithms/atproto

Fork of the AT Protocol reference implementation with performance-optimized AppView, Rust-based firehose indexer, Redis caching, and community…

api-securityauthenticationcloud-infrastructure-security+6
945 days ago
csf preview

csf

GitHubarmourbird/csf

Extensible API-first framework for automated Docker security monitoring against CIS benchmarks, with distributed client-server architecture for…

api-securitycloud-infrastructure-securityconfiguration-auditing+4
446 years ago
auth preview

auth

GitHubplaceos/auth

OAuth 2.0 authentication service with JWT support, PKCE, and token management for API gatekeeping.

api-securityauthentication-authorizationcloud-infrastructure-security+2
21 month ago
kubernetes-client__java_CVE-2020-8570_client-java-parent-9_0_2_fixed preview

kubernetes-client__java_CVE-2020-8570_client-java-parent-9_0_2_fixed

GitHubshoucheng3/kubernetes-client__java_cve-2020-8570_client-java-parent-9_0_2_fixed

Java client library for the Kubernetes API, enabling programmatic management of clusters, pods, deployments, and other resources with support for…

api-securityauthentication-authorizationcloud-infrastructure-security+3
9 months ago
Previous12Next