Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
747 results
TrojanSourceFinder preview

TrojanSourceFinder

GitHubariary/trojansourcefinder

🔎 Help find Trojan Source vulnerability in code 👀 . Useful for code review in project with multiple collaborators (CI/CD)

code-analysisstatic-analysissupply-chain-security+1
47
2 years ago
ggshield preview

ggshield

GitHubgitguardian/ggshield

Detect and validate 500+ types of hardcoded secrets with advanced checks. Use it as a pre-commit hook, GitHub Action, or CLI for proactive secret…

code-analysisdevsecopssecret-detection+1
2.0k18h 53m ago
octoscan preview

octoscan

GitHubsynacktiv/octoscan

Octoscan is a static vulnerability scanner for GitHub action workflows.

code-analysisconfiguration-auditingdevsecops+5
2724 months ago
trivy preview

trivy

GitHubaquasecurity/trivy

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

cloud-securitycode-analysiscontainer-security+5
37.5k1 day ago
deepsec preview

deepsec

GitHubvercel-labs/deepsec

Agent-powered vulnerability scanner for large-scale codebases. Uses LLMs to find hard-to-detect security issues via regex matchers and AI…

ai-securitycode-analysisdevsecops+5
7.8k2 days ago
vigolium preview

vigolium

GitHubvigolium/vigolium

Vigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision

ai-securityapi-security-testingauthentication+9
1.0k1 day ago
semgrep-rules preview

semgrep-rules

GitHubelttam/semgrep-rules

Static analysis security rules for vulnerability detection and audit-focused code review across Java, Go, Python, C#, Kotlin, PHP, Kubernetes, and…

cloud-infrastructure-securitycode-analysiscontainer-security+6
24521 days ago
CVE-2026-49042 preview

CVE-2026-49042

GitHuboscerd/cve-2026-49042

PoC reproducer for CVE-2026-49042 (Apache Camel camel-langchain4j-tools): a prompt-injected LLM's tool-call arguments become unfiltered Exchange…

ai-securitycode-analysiseducation+5
127 days ago
text4shell preview

text4shell

GitHubhotblac/text4shell

A demonstration of CVE-2022-42889 (text4shell) remote code execution vulnerability

code-analysisexploitationpenetration-testing+2
3 years ago
osv-scanner preview

osv-scanner

GitHubgoogle/osv-scanner

Vulnerability scanner written in Go which uses the data provided by https://osv.dev

code-analysiscontainer-securitydevsecops+4
10.9k1 day ago
defending-code-reference-harness preview

defending-code-reference-harness

GitHubanthropics/defending-code-reference-harness

Skills for threat modeling, scanning, triage, patching, plus an autonomous scanning harness you can /customize

ai-securitycode-analysisdevsecops+6
7.3k14 days ago
brakeman preview

brakeman

GitHubpresidentbeef/brakeman

A static analysis security vulnerability scanner for Ruby on Rails applications

code-analysisdevsecopsstatic-analysis+2
7.3k7 days ago
skills preview

skills

GitHubtrailofbits/skills

Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows

ai-assisted-reversingcode-analysiscurated-resources+8
6.8k17h 1m ago
tplmap preview

tplmap

GitHubepinna/tplmap

Server-Side Template Injection and Code Injection Detection and Exploitation Tool

code-analysisexploitationpenetration-testing+2
4.2k4 years ago
awesome-nodejs-security preview

awesome-nodejs-security

GitHublirantal/awesome-nodejs-security

Curated directory of Node.js security tools, static analyzers, vulnerability scanners, and educational resources covering OWASP Top 10, supply chain…

code-analysiscurated-resourceseducation+5
3.0k6 days ago
vulnhuntr preview

vulnhuntr

GitHubprotectai/vulnhuntr

Zero shot vulnerability discovery using LLMs

ai-securitycode-analysispenetration-testing+3
2.7k1 year ago
bearer preview

bearer

GitHubbearer/bearer

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

code-analysisdevsecopsprivacy+2
2.7k21h 17m ago
archerysec preview

archerysec

GitHubarcherysec/archerysec

ASOC, ASPM, DevSecOps, Vulnerability Management Using ArcherySec.

api-securitycode-analysisconfiguration-auditing+5
2.5k1 year ago
Previous12…42Next