Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

492 results

BloodBash

squidsec/bloodbash

Offline AD/Entra attack-path analyzer for SharpHound/AzureHound JSON. Surfaces prioritized privilege escalation, credential, and misconfiguration…

cloud-securityconfiguration-auditingidentity-access-management+6

406

1 day ago

iron-proxy

paradigmxyz/iron-proxy

An egress firewall for untrusted workloads.

cloud-securitycontainer-securitydatabase-security+5

6126 days ago

CVE-2026-64849.yaml

zavisco/cve-2026-64849.yaml

Detects unauthenticated MLflow webhook SSRF (CVE-2026-64849) that accesses internal or cloud metadata services and leaks response details via…

api-security-testingcloud-securityexploitation+3

1 day ago

azure-security-auditor

neelkotnis/azure-security-auditor

CLI tool to audit Azure security posture, RBAC, NSGs, storage, identity, and encryption

cloud-infrastructure-securitycloud-securityconfiguration-auditing+5

122 days ago

kata-containers

kata-containers/kata-containers

Secure OCI container runtime that runs workloads inside lightweight VMs, providing strong isolation across Kubernetes, containerd, and CRI-O with…

cloud-infrastructure-securitycloud-securitycontainer-security+2

8.5k5 days ago

POC-CVE-2026-42826-2026-42826-Microsoft-Azure-DevOps-Information-Disclosure-Vulnerability

sam00/poc-cve-2026-42826-2026-42826-microsoft-azure-devops-information-disclosure-vulnerability

cloud-securityexploitationinformation-gathering+4

17 days ago

awesome-security-hardening

decalage2/awesome-security-hardening

A collection of awesome security hardening guides, tools and other resources

cloud-securityconfiguration-auditingcontainer-security+6

6.5k3 months ago

Penetration-Testing-Tools

mgeeky/penetration-testing-tools

A collection of more than 170+ tools, scripts, cheatsheets and other loots that I've developed over years for Red Teaming/Pentesting/IT Security…

cloud-securitycurated-resourcesexploitation+8

3k3 years ago

secret-regex-list

h33tlit/secret-regex-list

List of regex for scraping secret API keys and juicy information.

api-securitycloud-securityinformation-gathering+3

7304 years ago

AzureADAssessment

azuread/azureadassessment

Tooling for assessing an Azure AD tenant state and configuration

cloud-infrastructure-securitycloud-securityconfiguration-auditing+3

8512 years ago

Interview_Tips

jigerjain/interview_tips

Summary of Cyber Security interview questions I have been through, hope this helps

binary-exploitationcloud-securitycryptography+5

716 years ago

purple-team-exercise-framework

scythe-io/purple-team-exercise-framework

Purple Team Exercise Framework

adversarial-attackai-securitycloud-security+5

8154 months ago

SSRF-Testing

cujanovic/ssrf-testing

SSRF (Server Side Request Forgery) testing resources

cloud-securitycurated-resourceseducation+6

2.5k1 year ago

SnaffPoint

nheiniger/snaffpoint

A tool for pointesters to find candies in SharePoint

cloud-securityinformation-gatheringpenetration-testing+3

2893 years ago

AzureAttackKit

zephrfish/azureattackkit

Collection of Azure Tools to Pull down for Attacking an Environment + quick tips and other useful information

cloud-securitycurated-resourcesexploitation+6

7921 days ago

AzTokenFinder

hackmichnet/aztokenfinder

authenticationcloud-securitymemory-forensics+3

1093 years ago

DEFCON-CICD-pipelines-workshop

wavestone-cdt/defcon-cicd-pipelines-workshop

cloud-securitycontainer-escapecontainer-security+8

943 years ago

CloudPentestCheatsheets

dafthack/cloudpentestcheatsheets

This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.

cloud-securitycurated-resourcesinformation-gathering+2

2.8k4 months ago

Previous12…28 Next