Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

1008 results

Interview_Tips

jigerjain/interview_tips

Summary of Cyber Security interview questions I have been through, hope this helps

web-securitynetwork-securitycryptography+5

6 years ago

purple-team-exercise-framework

scythe-io/purple-team-exercise-framework

Purple Team Exercise Framework

cloud-securitydevsecopsthreat-intelligence+5

8126 months ago

AzureAD-Attack-Defense

cloud-architekt/azuread-attack-defense

This publication is a collection of various common attack scenarios on Microsoft Entra ID (formerly known as Azure Active Directory) and how they can…

authentication-authorizationdefensive-toolspassword-attacks+5

2.5k13 days ago

SSRF-Testing

cujanovic/ssrf-testing

SSRF (Server Side Request Forgery) testing resources

payload-generationweb-application-exploitationinformation-gathering+6

2.5k2 years ago

SnaffPoint

nheiniger/snaffpoint

A tool for pointesters to find candies in SharePoint

reconnaissanceinformation-gatheringpenetration-testing+3

2883 years ago

cloud-middleware-dataset

wiz-sec-public/cloud-middleware-dataset

Curated dataset of cloud middleware agents installed by AWS, Azure, and GCP, documenting past vulnerabilities, privileges, and attack-surface risks…

cloud-infrastructure-securityvulnerability-analysiscloud-security+2

2492 years ago

AzureAttackKit

zephrfish/azureattackkit

Collection of Azure Tools to Pull down for Attacking an Environment + quick tips and other useful information

reconnaissanceexploitationpost-exploitation+6

792 months ago

AzTokenFinder

hackmichnet/aztokenfinder

Offensive token-harvesting utility that searches x64 process memory and TokenBroker cache files for Azure AD/O365 JWT tokens across Office, Edge,…

memory-forensicspost-exploitationpenetration-testing+3

1093 years ago

DEFCON-CICD-pipelines-workshop

wavestone-cdt/defcon-cicd-pipelines-workshop

Hands-on CI/CD pipeline security workshop with Terraform lab, AWS exploitation, Kubernetes escape, and artifact backdooring exercises for offensive…

privilege-escalationcontainer-securitylateral-movement+8

944 years ago

AWSome-Pentesting

pop3ret/awsome-pentesting

My cheatsheet notes to pentest AWS infrastructure

cloud-infrastructure-securitypenetration-testingcloud-security+3

7164 years ago

sysmon-parser

olafhartong/sysmon-parser

Automatically generated Sysmon parser for Azure Sentinel

defensive-toolsscripting-automationcloud-security+1

189 months ago

ScubaGear

cisagov/scubagear

Automation to assess the state of your M365 tenant against CISA's baselines

defensive-toolsconfiguration-auditingcloud-security+3

2.6k3 days ago

CloudPentestCheatsheets

dafthack/cloudpentestcheatsheets

This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.

reconnaissanceinformation-gatheringpenetration-testing+2

2.8k6 months ago

TokenMan

secureworks/tokenman

Post-exploitation toolkit for Azure AD: fetch/search Microsoft Graph data, swap FOCI refresh tokens, and generate Azure CLI auth files from tokens.

lateral-movementinformation-gatheringpost-exploitation+2

1033 years ago

Awesome-Pentest

kc57/awesome-pentest

A list of awesome penetration testing tools and resources.

password-crackingprivilege-escalationstatic-code-analysis+9

843 years ago

Threat_Model_Examples

taleliyahu/threat_model_examples

A collection of real-world threat model examples across various technologies, providing practical insights into identifying and mitigating security…

container-securityiot-securityweb-security+6

5141 year ago

My-Presentation-Slides

dhiyaneshgeek/my-presentation-slides

Collection's of Tech Talk that are presented by me :)

reconnaissancevulnerability-analysisweb-security+6

1012 months ago

azbelt

daddycocoaman/azbelt

AAD related enumeration in Nim

reconnaissanceinformation-gatheringpost-exploitation+5

1323 years ago

Previous 1…678…56 Next