Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

55 results

LeitWacht

leitwacht/leitwacht

Leitwacht control plane — runtime security for GitLab Runner CI/CD: policy authoring, multi-tenancy, audit, GitLab integration

anomaly-detectioncloud-infrastructure-securitycloud-security+9

23 days ago

cloud_ip_ranges

nccgroup/cloud_ip_ranges

Identify IP addresses owned by public cloud providers

cloud-infrastructure-securityinformation-gatheringnetwork-mapping+2

1252 years ago

spaces-finder

appsecco/spaces-finder

A tool to hunt for publicly accessible DigitalOcean Spaces

cloud-infrastructure-securitycloud-securityinformation-gathering+4

1566 years ago

mailcow-dockerized

mailcow/mailcow-dockerized

Dockerized mail server suite with Postfix, Dovecot, Rspamd, and ClamAV. Provides secure email hosting with integrated spam filtering, antivirus, and…

authenticationcloud-infrastructure-securityconfiguration-auditing+4

13.4k16 days ago

kubeshark

kubeshark/kubeshark

eBPF-powered network observability for Kubernetes. Indexes L4/L7 traffic with full K8s context, decrypts TLS without keys. Queryable by AI agents via…

ai-securitycloud-infrastructure-securitycloud-security+9

12.1k20 days ago

ROADtools

dirkjanm/roadtools

A collection of Azure AD/Entra tools for offensive and defensive security purposes

authenticationcloud-infrastructure-securitycloud-security+5

2.7k28 days ago

dnscontrol

dnscontrol/dnscontrol

Infrastructure as code for DNS!

cloud-infrastructure-securityconfiguration-auditingdevsecops+1

3.9k21h 41m ago

pacu

rhinosecuritylabs/pacu

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

cloud-infrastructure-securitycloud-securitydata-exfiltration+7

5.3k5 months ago

MicroBurst

netspi/microburst

A collection of scripts for assessing Microsoft Azure security

cloud-infrastructure-securitycloud-securityconfiguration-auditing+6

2.4k2 months ago

cloudmapper

duo-labs/cloudmapper

CloudMapper helps you analyze your Amazon Web Services (AWS) environments.

cloud-infrastructure-securitycloud-securityconfiguration-auditing+6

6.3k2 years ago

cloudfox

bishopfox/cloudfox

Automating situational awareness for cloud penetration tests.

cloud-infrastructure-securitycloud-securityexploitation+7

2.6k13 days ago

axiom

pry0cc/axiom

The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf,…

cloud-infrastructure-securitynetwork-securitypenetration-testing+4

4.4k1 year ago

hacktricks-cloud

hacktricks-wiki/hacktricks-cloud

Community-driven knowledge base for pentesting cloud environments and CI/CD pipelines: attack techniques, enumeration, privilege escalation, and…

cloud-infrastructure-securitycloud-securitycurated-resources+3

7775 days ago

hawk

t0pcyber/hawk

Powershell Based tool for gathering information related to O365 intrusions and potential Breaches

cloud-infrastructure-securitycloud-securitydigital-forensics+3

9551 year ago

aws_pwn

dagrz/aws_pwn

A collection of AWS penetration testing junk

cloud-infrastructure-securitycloud-securitydata-exfiltration+6

1.2k8 years ago

awspx

reverseclabs/awspx

A graph-based tool for visualizing effective access and resource relationships in AWS environments.

cloud-infrastructure-securitycloud-securityinformation-gathering+3

1.0k5 years ago

natlas

natlas/natlas

Attack Surface Management since before Attack Surface Management was a thing

cloud-infrastructure-securityinformation-gatheringnetwork-mapping+2

6596 months ago

AzureADAssessment

azuread/azureadassessment

Tooling for assessing an Azure AD tenant state and configuration

cloud-infrastructure-securitycloud-securityconfiguration-auditing+3

8532 years ago

Previous12 3 4 Next