Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
350 results
nuvola preview

nuvola

GitHubprimait/nuvola

Graph-based AWS security analysis tool that dumps cloud configurations, detects misconfigurations, and maps attack paths using a Neo4j digital twin…

cloud-infrastructure-securitycloud-securityconfiguration-auditing+5
144
1 day ago
kern preview

kern

GitHubgetkern/kern

Rootless container runtime and sandbox that launches kernel-enforced OCI images in milliseconds with no daemon, featuring resource profiles, seccomp…

ai-securitycloud-infrastructure-securitycontainer-security+3
4081 day ago
aws_exposable_resources preview

aws_exposable_resources

GitHubsummitroute/aws_exposable_resources

Curated catalog of AWS resource types that can be publicly exposed, with CLI commands for creating and auditing public access configurations across…

cloud-infrastructure-securitycloud-securitycurated-resources+1
3346 years ago
Aaia preview

Aaia

GitHubrams3sh/aaia

AWS Identity and Access Management Visualizer and Anomaly Finder

cloud-infrastructure-securitycloud-securityconfiguration-auditing+6
2972 years ago
opensoho preview

opensoho

GitHubrubenbe/opensoho

Lightweight OpenWRT device management platform for small networks. Centralized configuration, monitoring, and WiFi management for 2–20 devices with…

cloud-infrastructure-securityconfiguration-auditingdevsecops+3
19122h 34m ago
BucketLoot preview

BucketLoot

GitHubredhuntlabs/bucketloot

BucketLoot is an automated S3-compatible bucket inspector that can help users extract assets, flag secret exposures and even search for custom…

cloud-infrastructure-securitycloud-securityinformation-gathering+4
4448 months ago
chaos-operator preview

chaos-operator

GitHublitmuschaos/chaos-operator

Kubernetes operator for injecting chaos experiments into cloud-native workloads, automating resilience testing and workload hardening through…

chaos-engineeringcloud-infrastructure-securitycloud-security+1
15810 months ago
lssh preview

lssh

GitHubblacknon/lssh

A terminal-native remote access suite for SSH, cloud inventories, provider-backed connectors, parallel commands, mux workspaces, file transfer, and…

cloud-infrastructure-securitycloud-securitygeneral-purpose-utilities+4
3254 months ago
check_mdi preview

check_mdi

GitHubexpl0itabl3/check_mdi

Python script to enumerate valid Microsoft 365 domains, retrieve tenant name, and check for an MDI instance.

cloud-infrastructure-securitycloud-securityinformation-gathering+2
2251 year ago
KaiMonkey preview

KaiMonkey

GitHubtenable/kaimonkey

Deliberately vulnerable Terraform infrastructure for learning cloud security misconfigurations and validating IaC scanner detection across AWS and…

cloud-infrastructure-securitycloud-securityeducation+3
1072 years ago
cloud-middleware-dataset preview

cloud-middleware-dataset

GitHubwiz-sec-public/cloud-middleware-dataset

Curated dataset of cloud middleware agents installed by AWS, Azure, and GCP, documenting past vulnerabilities, privileges, and attack-surface risks…

cloud-infrastructure-securitycloud-securitycurated-resources+2
2492 years ago
chaostoolkit-kubernetes preview

chaostoolkit-kubernetes

GitHubchaostoolkit/chaostoolkit-kubernetes

Kubernetes driver extension of the Chaos Toolkit probes and actions API

chaos-engineeringcloud-infrastructure-securitycontainer-security+1
1902 years ago
HSC24RedTeamInfra preview

HSC24RedTeamInfra

GitHubdazzyddos/hsc24redteaminfra

Slides and Codes used for the workshop Red Team Infrastructure Automation

cloud-infrastructure-securityeducationred-teaming
1912 years ago
SkyWrapper preview

SkyWrapper

GitHubcyberark/skywrapper

SkyWrapper helps to discover suspicious creation forms and uses of temporary tokens in AWS

cloud-infrastructure-securitycloud-securityidentity-access-management+3
1075 years ago
IAMActionHunter preview

IAMActionHunter

GitHubrhinosecuritylabs/iamactionhunter

An AWS IAM policy statement parser and query tool.

cloud-infrastructure-securitycloud-securityconfiguration-auditing+4
2001 year ago
DIAL preview

DIAL

GitHubcred-club/dial

Event-driven AWS security misconfiguration detection framework that monitors multiple accounts in real-time, triggering alerts via Lambda for IAM,…

cloud-infrastructure-securitycloud-securitydefensive-tools+2
953 years ago
BlueCloud preview

BlueCloud

GitHubiknowjason/bluecloud

Cyber Range including Velociraptor + HELK system with a Windows VM for security testing and R&D. Azure and AWS terraform support.

cloud-infrastructure-securitycloud-securitydefensive-tools+7
1503 years ago
red-shadow preview

red-shadow

GitHublightspin-tech/red-shadow

Scans AWS IAM configurations for shadow admins by detecting misconfigured deny policies that fail to restrict user actions on groups, enabling…

cloud-infrastructure-securitycloud-securityidentity-access-management+3
965 years ago
Previous1…456…20Next