Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

156 results

cis-vsphere

karimhabush/cis-vsphere

A tool to assess the compliance of a VMware vSphere environment against the CIS Benchmark.

cloud-infrastructure-securityconfiguration-auditingvulnerability-scanners

543 years ago

IAMActionHunter

rhinosecuritylabs/iamactionhunter

An AWS IAM policy statement parser and query tool.

cloud-infrastructure-securitycloud-securityconfiguration-auditing+4

2001 year ago

yatas

padok-team/yatas

:owl::mag_right: A simple tool to audit your AWS/GCP infrastructure for misconfiguration or potential security issues with plugins integration

cloud-infrastructure-securitycloud-securityconfiguration-auditing+3

3433 months ago

slurp-old

0xbharath/slurp-old

A tool to enumerate S3 buckets manually or via certstream

cloud-infrastructure-securitycloud-securityinformation-gathering+3

843 years ago

aws-security-assessment-solution

awslabs/aws-security-assessment-solution

An AWS tool to help you create a point in time assessment of your AWS account using Prowler.

cloud-infrastructure-securitycloud-securityconfiguration-auditing+2

6273 days ago

kube-linter

stackrox/kube-linter

KubeLinter is a static analysis tool that checks Kubernetes YAML files and Helm charts to ensure the applications represented in them adhere to best…

cloud-infrastructure-securitycloud-securityconfiguration-auditing+6

3.5k22h 32m ago

vcenter_saml_login

horizon3ai/vcenter_saml_login

A tool to extract the IdP cert from vCenter backups and log in as Administrator

authentication-authorizationcloud-infrastructure-securityexploitation+4

5313 years ago

Archived

metabadger

salesforce/metabadger

Prevent SSRF attacks on AWS EC2 via automated upgrades to the more secure Instance Metadata Service v2 (IMDSv2).

cloud-infrastructure-securitycloud-securityconfiguration-auditing+3

1431 year ago

CVE-2024-6387-Mitigation-Ansible-Playbook

daniel-odrinski/cve-2024-6387-mitigation-ansible-playbook

An Ansible Playbook to mitigate the risk of RCE (CVE-2024-6387) until platforms update OpenSSH to a non-vulnerable version.

cloud-infrastructure-securityconfiguration-auditingdevsecops+2

2 years ago

thingsboard

thingsboard/thingsboard

Open-source IoT Platform - Device management, data collection, processing and visualization.

anomaly-detectioncloud-infrastructure-securityconfiguration-auditing+3

22.4k5 days ago

poc-2025-9074

xwpdx0/poc-2025-9074

Docker API CVE-2025-9074 PoC (Proof-Of-Concept). A sophisticated exploitation framework for CVE-2025-9074, targeting unauthenticated Docker API…

cloud-infrastructure-securitycommand-and-controlcontainer-security+7

49 months ago

copy.fail-mitigation-MLM

jbiniek/copy.fail-mitigation-mlm

Salt state to deploy a mitigation of the copy.fail vulnerability (CVE-2026-31431)

cloud-infrastructure-securityconfiguration-auditingdevsecops+1

4 months ago

cs-suite

securityftw/cs-suite

Cloud Security Suite - One stop tool for auditing the security posture of AWS/GCP/Azure infrastructure.

cloud-infrastructure-securitycloud-securityconfiguration-auditing+2

1.2k5 years ago

vmxnet3Hunter

lxkxc/vmxnet3hunter

Use this tool to prioritize cluster patching for the recent VMware advisory VMSA-2018-0027 related to CVE-2018-6981 and CVE-2018-6982.

cloud-infrastructure-securityconfiguration-auditingreconnaissance+2

7 years ago

nuvola

primait/nuvola

Graph-based AWS security analysis tool that dumps cloud configurations, detects misconfigurations, and maps attack paths using a Neo4j digital twin…

cloud-infrastructure-securitycloud-securityconfiguration-auditing+5

1445h 46m ago

repokid

netflix/repokid

AWS Least Privilege for Distributed, High-Velocity Deployment

cloud-infrastructure-securitycloud-securityconfiguration-auditing+3

1.1k5 years ago

remote-bitlocker-encryption-report

gdraperi/remote-bitlocker-encryption-report

PowerShell script to mitigate CVE-2018-12038. The script takes a list of PC as input, gets their BitLocker encryption type remotely, and outputs a…

cloud-infrastructure-securityconfiguration-auditingencryption-decryption-tools+3

27 years ago

s3crets_scanner

eilonh/s3crets_scanner

Automated scanner that hunts for secrets (API keys, credentials) accidentally uploaded to public S3 buckets, using truffleHog3 for detection and…

cloud-infrastructure-securitycloud-securitysecret-detection+1

5733 years ago

Previous12…9 Next