Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
337 results
reportly preview

reportly

GitHubsap8899/reportly

AzureAD/EntraID user activity reporter for blue teams. Input a suspicious user and time frame to receive a detailed report of user info, actions, and…

cloud-securityidentity-access-managementincident-response+2
96
3 years ago
SCOPE preview

SCOPE

GitHubtayontech/scope

AI agent set for cloud security purple teaming, runs inside Claude Code, Gemini CLI, and Codex.

ai-securitycloud-infrastructure-securitycloud-security+8
543 months ago
AzureADEnumeration preview

AzureADEnumeration

GitHublogisek/azureadenumeration

Microsoft Entra ID (Azure AD) Unauthenticated Enumeration

cloud-infrastructure-securitycloud-securitydns-analysis+6
798 months ago
GATOR preview

GATOR

GitHubanrbn/gator

Modular GCP attack toolkit for offensive research, enabling reconnaissance, authentication manipulation, and exploitation of cloud functions,…

cloud-securityexploitationpenetration-testing+2
893 years ago
CVE-2022-46463 preview

CVE-2022-46463

GitHub404tk/cve-2022-46463

harbor unauthorized detection

cloud-securitycontainer-securityexploitation+3
581 year ago
slurp-1 preview

slurp-1

GitHubgdraperi/slurp-1

S3 bucket enumerator

cloud-securityinformation-gatheringmisconfiguration+3
307 years ago
claudleak preview

claudleak

GitHubhazcod/claudleak

Hunt for AI coding artifacts containing secrets.

cloud-securitycode-analysisinformation-gathering+3
587 months ago
S3Scanner preview

S3Scanner

GitHubyehgdotnet/s3scanner

Scan for open S3 buckets and dump

cloud-securitydata-exfiltrationinformation-gathering+1
388 years ago
CloudHunter preview

CloudHunter

GitHub1n3/cloudhunter

Find unreferenced AWS S3 buckets which have CloudFront CNAME records pointing to them

cloud-securitydns-analysisinformation-gathering+2
358 years ago
POC-2020-8558 preview

POC-2020-8558

GitHubtabbysable/poc-2020-8558

Information about Kubernetes CVE-2020-8558, including proof of concept exploit.

cloud-securitycontainer-securityexploitation+5
436 years ago
sss3 preview

sss3

GitHubhalencarjunior/sss3

Automated S3 bucket security scanner that tests domain lists for publicly accessible buckets with listing permissions, exporting results for cloud…

cloud-securityinformation-gatheringpenetration-testing+1
324 years ago
s3-account-search preview

s3-account-search

GitHubwearecloudar/s3-account-search

S3 Account Search

cloud-infrastructure-securitycloud-securityinformation-gathering+1
531 year ago
RAGE preview

RAGE

GitHubtrustedsec/rage

Vendor-neutral NDJSON attack-graph format with node/edge taxonomy, AWS/GCP/Azure mappings, derivation rules, and an exposure DB for offensive…

cloud-securityconfiguration-auditingdefensive-tools+7
2121 days ago
strafer preview

strafer

GitHubadityaks/strafer

Strafer: A tool to detect potential infections in Elasticsearch instances

cloud-securitydatabase-securityinformation-gathering+4
275 years ago
CloudPulse preview

CloudPulse

GitHubyousseflahouifi/cloudpulse

SSL certificate-based reconnaissance engine for discovering AWS cloud assets, including IPs, subdomains, and domains, with active port scanning for…

cloud-securitydns-subdomain-enumerationinformation-gathering+3
202 years ago
sisu preview

sisu

GitHubsemonte/sisu

Mounts AWS resources as a local filesystem for infrastructure exploration, security auditing, and configuration analysis using standard Unix tools…

cloud-infrastructure-securitycloud-securityconfiguration-auditing+8
479 months ago
harbor preview

harbor

GitHubcodesecurityteam/harbor

CVE-2022-46463 harbor公开镜像全自动下载脚本

cloud-securitycontainer-securityexploitation+4
151 year ago
CVE-2022-22948 preview

CVE-2022-22948

GitHubpenteraio/cve-2022-22948

Scanner for CVE-2022-22948 an Information Disclosure in VMWare vCenter

cloud-securityconfiguration-auditingexploitation+3
113 years ago
Previous1…16171819Next