Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

18 results

AzTokenFinder

hackmichnet/aztokenfinder

authenticationcloud-securitymemory-forensics+3

1093 years ago

IPSpinner

synacktiv/ipspinner

IPSpinner works as a local proxy that redirects requests through external services.

cloud-securityids-ips-evasionpassword-attacks+3

1231 year ago

trivy-enforcer

aquasecurity/trivy-enforcer

[EXPERIMENTAL] Kubernetes Operator for Image Assurance

cloud-securitycontainer-securitydevsecops+3

206 years ago

cloudfoundry_uaa

shanika04/cloudfoundry_uaa

CVE-2016-4468

api-securityauthentication-authorizationcloud-infrastructure-security+3

5 years ago

cve-2019-5736-reproducer

takumak/cve-2019-5736-reproducer

cloud-securitycontainer-escapecontainer-security+3

4 years ago

Anthropic-Cybersecurity-Skills

mukul975/anthropic-cybersecurity-skills

817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3…

ai-securitycloud-securitycurated-resources+9

30.3k14h 3m ago

Pentest-Collaboration-Framework

invuls/pentest-projects/pcf

Opensource, cross-platform and portable toolkit for automating routine processes when carrying out various works for testing!

api-security-testingcloud-securitycontainer-security+4

1123 months ago

GuardScan

ntanwir10/guardscan

100% Free & Open Source • Privacy-First Security Scanning and AI Code Review CLI

ai-securityapi-securitycloud-security+8

152 months ago

bouvet

vrn21-arcanist/bouvet

Sandbox for Agents

ai-securitycloud-securitycontainer-security+3

1026 months ago

layerleak

brumbelow/layerleak

layerleak the Docker Hub Secret Scanner

api-securitycloud-securitycontainer-security+3

427 days ago

hermetic

hermetic-sys/hermetic

Agent-Isolated Credential Broker for AI Agents

api-securityauthentication-authorizationcloud-security+7

110 days ago

CVE-2025-54914-PoC

ash1996x/cve-2025-54914-poc

cloud-securityexploitationids-ips-evasion+4

411 months ago

AWSTESTEXPLOIT

catnip-express-maxim/awstestexploit

Testing if AWS exploit CVE-2025-2598 still works

cloud-securityexploitationpenetration-testing+2

8 months ago

aws_public_ips

arkadiyt/aws_public_ips

Fetch all public IP addresses tied to your AWS account. Works with IPv4/IPv6, Classic/VPC networking, and across all AWS services

cloud-infrastructure-securitycloud-securityinformation-gathering+1

6416 years ago

s3tk

ankane/s3tk

A security toolkit for Amazon S3

cloud-infrastructure-securitycloud-securityconfiguration-auditing+3

4591 month ago

Aaia

rams3sh/aaia

AWS Identity and Access Management Visualizer and Anomaly Finder

cloud-infrastructure-securitycloud-securityconfiguration-auditing+6

2966 months ago

flumberboozle

fellchase/flumberboozle

Suite of programs meant to aid in bug hunting and security assessments

cloud-securityinformation-gatheringmisconfiguration+3

776 years ago

Archived

metabadger

salesforce/metabadger

Prevent SSRF attacks on AWS EC2 via automated upgrades to the more secure Instance Metadata Service v2 (IMDSv2).

cloud-infrastructure-securitycloud-securityconfiguration-auditing+3

1431 year ago