Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

1009 results

minimal

rtvkiz/minimal

Minimal CVE Hardened container image collection

vulnerability-scannerscontainer-securityconfiguration-auditing+3

5131 day ago

kviklet

kviklet/kviklet

Pull Request-like Review/Approval flow for database queries. For compliant but smooth Engineering access to production.

authentication-authorizationcloud-securityidentity-access-management+1

6221 day ago

kube-linter

stackrox/kube-linter

KubeLinter is a static analysis tool that checks Kubernetes YAML files and Helm charts to ensure the applications represented in them adhere to best…

cloud-infrastructure-securitystatic-analysiscontainer-security+6

3.5k1 day ago

apex

pensarai/apex

AI-powered offensive security testing using autonomous agents, directly in your terminal.

reconnaissancevulnerability-scannersexploit-frameworks+7

2991 day ago

checkov

bridgecrewio/checkov

Static analysis tool for infrastructure as code that detects cloud misconfigurations, vulnerabilities, and secrets across Terraform, Kubernetes,…

cloud-infrastructure-securitystatic-analysisvulnerability-scanners+12

8.9k1 day ago

cnspec

mondoohq/cnspec

An open source, cloud-native security to protect everything from build to runtime

cloud-infrastructure-securitydefensive-toolsvulnerability-scanners+6

4401 day ago

threat-dragon

owasp/threat-dragon

An open source threat modeling tool from OWASP

defensive-toolsvulnerability-analysisweb-security+5

1.6k1 day ago

wrongsecrets

owasp/wrongsecrets

Vulnerable app with examples showing how to not use secrets

container-securityvulnerability-analysisctf+5

1.5k1 day ago

TeamPass

nilsteampassnet/teampass

Collaborative Passwords Manager

authentication-authorizationpassword-crackingencryption-decryption-tools+8

1.8k1 day ago

cloudsplaining

salesforce/cloudsplaining

Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized report.

cloud-infrastructure-securityvulnerability-analysisconfiguration-auditing+3

2.2k1 day ago

syswarden

duggytuxy/syswarden

Host-local Linux security orchestrator enforcing nftables policy with HIDS/HIPS telemetry, bounded threat-intelligence feeds, out-of-band WAAP log…

defensive-toolsconfiguration-auditingnetwork-security+4

3951 day ago

resiprocate

resiprocate/resiprocate

C++ implementation of SIP, ICE, TURN and related protocols.

encryption-decryption-toolsiot-securityweb-security+3

7911 day ago

falco

falcosecurity/falco

Real-time cloud-native runtime security agent for Linux that monitors syscalls and container/Kubernetes metadata to detect anomalous behavior and…

cloud-infrastructure-securitydefensive-toolscontainer-security+10

9.5k1 day ago

kics

checkmarx/kics

Static analysis scanner for infrastructure-as-code that detects security vulnerabilities, compliance violations, and misconfigurations across…

cloud-infrastructure-securityvulnerability-scannerscontainer-security+10

2.7k1 day ago

traccar

traccar/traccar

Traccar GPS Tracking System

embedded-systems-securityiot-securitynetwork-security+3

7.6k1 day ago

nuclei

projectdiscovery/nuclei

Fast YAML-based vulnerability scanner with template-driven detection engine for automated security testing across web apps, APIs, networks, DNS, and…

general-purpose-utilitiesvulnerability-scannersweb-vulnerability-scanners+21

30.4k1 day ago

frigate

blakeblackshear/frigate

NVR with realtime local object detection for IP cameras

defensive-toolsiot-securitycloud-security+2

35.0k1 day ago

carbon-identity-framework

wso2/carbon-identity-framework

Core framework for identity and access management, providing authentication, authorization, and identity governance capabilities for enterprise…

authentication-authorizationidentity-managementcloud-security+2

1371 day ago

Previous 1…456…57 Next