Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

2175 results

nono

nolabs-ai/nono

agent runtime security - zero trust, zero setup, zero latency agent sandboxing

ai-securitycloud-securitycode-analysis+8

3.6k3h 15m ago

rea

morluto/rea

Reverse engineer anything with agents, from app behavior down to native binaries.

ai-assisted-reversingai-securitybinary-analysis+5

421.2k3h 26m ago

opentaint

seqra/opentaint

Formal inter-procedural taint analysis engine for application security. Tracks untrusted data across function boundaries, persistence layers, and…

ai-securityapi-securitycode-analysis+7

1273h 31m ago

alter-zero

linuztx/alter-zero

RAM efficient terminal agent harness for coding, cybersecurity, and automation.

ai-securitycode-analysiscommand-and-control+6

1174h 3m ago

cli

snyk/cli

Snyk CLI scans and monitors your projects for security vulnerabilities.

cloud-infrastructure-securitycode-analysiscontainer-security+6

5.6k5h 21m ago

magika

google/magika

Fast and accurate AI powered file content types detection

code-analysisforensicsgeneral-purpose-utilities+3

17.9k5h 58m ago

phpstan

phpstan/phpstan

PHP Static Analysis Tool - discover bugs in your code without running it!

code-analysisstatic-code-analysis

14.1k6h 10m ago

fickling

trailofbits/fickling

A Python pickling decompiler and static analyzer

ai-securitybinary-analysiscode-analysis+5

6766h 12m ago

monty

pydantic/monty

A secure Python sandbox, written in Rust, for code written by AI.

ai-securitycode-analysiseducation+2

8.0k6h 39m ago

gstack

garrytan/gstack

Use Garry Tan's exact Claude Code setup: 23 opinionated tools that serve as CEO, Designer, Eng Manager, Release Manager, Doc Engineer, and QA

ai-securitycode-analysisdevsecops+8

127.4k6h 46m ago

js-x-ray

nodesecure/js-x-ray

JavaScript & Node.js open-source SAST scanner. A static analyser for detecting most common malicious patterns 🔬.

code-analysismalware-analysisstatic-analysis+2

2857h 37m ago

trivy

aquasecurity/trivy

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

cloud-infrastructure-securitycloud-securitycode-analysis+14

37.4k8h 34m ago

nuclei-templates

projectdiscovery/nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

code-analysiscrawlercurated-resources+6

12.8k9h 48m ago

Recaf

col-e/recaf

The modern Java bytecode editor

binary-analysiscode-analysisdebuggers+2

7.3k9h 54m ago

ddc

ejfkdev/ddc

Android DEX → Java decompiler in Rust — quality-first: javac-verified output, exact semantic-preserving simplification (cure), full apps in seconds,…

android-securitybinary-analysiscode-analysis+6

42710h 6m ago

oss-scanner

anthropics/oss-scanner

Service that builds enrolled open-source repositories in isolated offline VMs and scans them for security vulnerabilities, emailing findings with…

ai-securitycode-analysisdefensive-tools+7

1.7k10h 38m ago

infer

facebook/infer

A static analyzer for Java, C, C++, and Objective-C

code-analysisdevsecopsstatic-analysis+1

15.7k11h 3m ago

pyghidra-mcp

clearbluejar/pyghidra-mcp

Python Command-Line Ghidra MCP

ai-assisted-reversingbinary-analysiscode-analysis+7

40413h 18m ago

Previous12…100 Next