Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

126 results

meltdown-aws-scanner

jdmulloy/meltdown-aws-scanner

Naive shell script to verify Meltdown (CVE-2017-5754) patch status of EC2 instances

cloud-infrastructure-securitycloud-securityconfiguration-auditing+2

8 years ago

CVE-2024-10220-Kubernetes-gitRepo-Volume-Vulnerability

mrk336/cve-2024-10220-kubernetes-gitrepo-volume-vulnerability

CVE-2024-10220 reveals a critical flaw in Kubernetes’ deprecated gitRepo volume type, allowing attackers to execute arbitrary commands via malicious…

cloud-infrastructure-securitycloud-securitycontainer-security+6

11 months ago

cpra

ziad-hsn/cpra

CPRA is a high-performance infrastructure monitoring system designed for platform teams managing large-scale microservice architectures. Built on…

anomaly-detectioncloud-infrastructure-securityconfiguration-auditing+6

5 months ago

vmxnet3Hunter

lxkxc/vmxnet3hunter

Use this tool to prioritize cluster patching for the recent VMware advisory VMSA-2018-0027 related to CVE-2018-6981 and CVE-2018-6982.

cloud-infrastructure-securityconfiguration-auditingreconnaissance+2

7 years ago

tf-cve-2021-36782

fe-ax/tf-cve-2021-36782

A Terraform module to launch Rancher 2.6.6 for blog article about CVE-2021-36782

cloud-infrastructure-securityeducationexploitation+2

3 years ago

CVE-2024-6387-Mitigation-Ansible-Playbook

daniel-odrinski/cve-2024-6387-mitigation-ansible-playbook

An Ansible Playbook to mitigate the risk of RCE (CVE-2024-6387) until platforms update OpenSSH to a non-vulnerable version.

cloud-infrastructure-securityconfiguration-auditingdevsecops+2

2 years ago

azure-security-auditor

neelkotnis/azure-security-auditor

CLI tool to audit Azure security posture, RBAC, NSGs, storage, identity, and encryption

cloud-infrastructure-securitycloud-securityconfiguration-auditing+5

121 days ago

Archived

Azure-AD-Incident-Response-PowerShell-Module

azuread/azure-ad-incident-response-powershell-module

The Azure Active Directory Incident Response PowerShell module provides a number of tools, developed by the Azure Active Directory Product Group in…

cloud-infrastructure-securitycloud-securitydefensive-tools+3

4583 years ago

Archived

puppetlabs-cve20113872

puppetlabs-toy-chest/puppetlabs-cve20113872

Puppet Module to help fix and migrate a Puppet deployment (CVE-2011-3872)

cloud-infrastructure-securityconfiguration-auditingdevsecops+3

56 years ago

Archived

openclarity

openclarity/openclarity

OpenClarity is an open source platform built to enhance security and observability of cloud native applications and infrastructure

cloud-infrastructure-securitycloud-securitycontainer-security+7

1.5k2 months ago

Archived

metabadger

salesforce/metabadger

Prevent SSRF attacks on AWS EC2 via automated upgrades to the more secure Instance Metadata Service v2 (IMDSv2).

cloud-infrastructure-securitycloud-securityconfiguration-auditing+3

1431 year ago

thingsboard

thingsboard/thingsboard

Open-source IoT Platform - Device management, data collection, processing and visualization.

anomaly-detectioncloud-infrastructure-securityconfiguration-auditing+3

22.3k19h 59m ago

mailcow-dockerized

mailcow/mailcow-dockerized

Dockerized mail server suite with Postfix, Dovecot, Rspamd, and ClamAV. Provides secure email hosting with integrated spam filtering, antivirus, and…

authenticationcloud-infrastructure-securityconfiguration-auditing+4

13.3k2 days ago

cli

snyk/cli

Snyk CLI scans and monitors your projects for security vulnerabilities.

cloud-infrastructure-securitycode-analysiscontainer-security+4

5.6k13h 57m ago

ROADtools

dirkjanm/roadtools

A collection of Azure AD/Entra tools for offensive and defensive security purposes

authenticationcloud-infrastructure-securitycloud-security+5

2.7k15 days ago

dnscontrol

dnscontrol/dnscontrol

Infrastructure as code for DNS!

cloud-infrastructure-securityconfiguration-auditingdevsecops+1

3.9k2 days ago

AWSGoat

ine-labs/awsgoat

AWSGoat : A Damn Vulnerable AWS Infrastructure

cloud-infrastructure-securitycloud-securitycontainer-security+6

2.0k1 year ago

AutomatedLab

automatedlab/automatedlab

PowerShell-based provisioning framework for deploying complex lab environments on Hyper-V and Azure. Supports Windows, Linux, and products like AD,…

cloud-infrastructure-securityeducationlabs-practice+1

2.2k1 month ago

Previous 1 2 345 6 7 Next