Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
358 results
redStackPRO preview

redStackPRO

GitHubdevzero-security/redstackpro

A canvas for red team infrastructure and cyber ranges. Compose a topology, export runnable Terraform and Ansible, and deploy it yourself. Your cloud…

cloud-infrastructure-securitycloud-securitycommand-and-control+8
137
8 days ago
vc5 preview

vc5

GitHubdavidcoles/vc5

A horizontally scalable Direct Server Return layer 4 load balancer for Linux using XDP/eBPF

cloud-infrastructure-securitydevsecopsdns-analysis+1
1261 month ago
chaos-operator preview

chaos-operator

GitHublitmuschaos/chaos-operator

Kubernetes operator for injecting chaos experiments into cloud-native workloads, automating resilience testing and workload hardening through…

chaos-engineeringcloud-infrastructure-securitycloud-security+1
15810 months ago
DFIR4vSphere preview

DFIR4vSphere

GitHubanssi-fr/dfir4vsphere

Powershell module for VMWare vSphere forensics

cloud-infrastructure-securityconfiguration-auditingdefensive-tools+5
1891 year ago
BlueCloud preview

BlueCloud

GitHubiknowjason/bluecloud

Cyber Range including Velociraptor + HELK system with a Windows VM for security testing and R&D. Azure and AWS terraform support.

cloud-infrastructure-securitycloud-securitydefensive-tools+7
1514 years ago
DIAL preview

DIAL

GitHubcred-club/dial

Event-driven AWS security misconfiguration detection framework that monitors multiple accounts in real-time, triggering alerts via Lambda for IAM,…

cloud-infrastructure-securitycloud-securitydefensive-tools+2
954 years ago
spaces-finder preview

spaces-finder

GitHubappsecco/spaces-finder

A tool to hunt for publicly accessible DigitalOcean Spaces

cloud-infrastructure-securitycloud-securityinformation-gathering+4
1566 years ago
netfence preview

netfence

GitHubdanthegoodman1/netfence

Like Envoy xDS, but for eBPF filters

cloud-infrastructure-securitycloud-securitycontainer-security+5
10322 days ago
lowkey preview

lowkey

GitHubinceptionstack/lowkey

Deploy self-hosted AI coding agents (OpenClaw, Claude Code, Codex) into your AWS account with CloudFormation, IAM profiles, and sandbox isolation for…

ai-securitycloud-infrastructure-securitycloud-security+7
7322h 14m ago
EscalateGPT preview

EscalateGPT

GitHubtenable/escalategpt

An AI-powered tool for discovering privilege escalation opportunities in AWS IAM configurations.

ai-securitycloud-infrastructure-securitycloud-security+3
1232 years ago
aad-bofs preview

aad-bofs

GitHubkozmer/aad-bofs

Cobalt Strike BOF collection for attacking Azure AD during red team operations, covering authentication, enumeration, and post-exploitation vectors.

adversarial-attackcloud-infrastructure-securitycloud-security+5
13910 months ago
cloud-security-audit preview

cloud-security-audit

GitHubappliscale/cloud-security-audit

A command line security audit tool for Amazon Web Services

cloud-infrastructure-securitycloud-securityconfiguration-auditing+1
827 years ago
atproto preview

atproto

GitHubblacksky-algorithms/atproto

Fork of the AT Protocol reference implementation with performance-optimized AppView, Rust-based firehose indexer, Redis caching, and community…

api-securityauthenticationcloud-infrastructure-security+6
9424 days ago
red-shadow preview

red-shadow

GitHublightspin-tech/red-shadow

Scans AWS IAM configurations for shadow admins by detecting misconfigured deny policies that fail to restrict user actions on groups, enabling…

cloud-infrastructure-securitycloud-securityidentity-access-management+3
955 years ago
CanaryHunter preview

CanaryHunter

GitHubc0axx/canaryhunter

Canary Hunter aims to be a quick PowerShell script to check for Common Canaries in various formats generated for free on canarytokens.org

adversarial-attackcloud-infrastructure-securityconfiguration-auditing+4
1363 years ago
hayat preview

hayat

GitHubdenizparlak/hayat

Hayat is a script for report and analyze Google Cloud Platform resources.

cloud-infrastructure-securitycloud-securityconfiguration-auditing+1
816 years ago
SCOPE preview

SCOPE

GitHubtayontech/scope

AI agent set for cloud security purple teaming, runs inside Claude Code, Gemini CLI, and Codex.

ai-securitycloud-infrastructure-securitycloud-security+8
544 months ago
iac-scan-runner preview

iac-scan-runner

GitHubxlab-si/iac-scan-runner

Service that scans your Infrastructure as Code for common vulnerabilities

api-securitycloud-infrastructure-securityconfiguration-auditing+2
492 years ago
Previous1…456…20Next