Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
863 results
git-vuln-finder preview

git-vuln-finder

GitHubcve-search/git-vuln-finder

Finding potential software vulnerabilities from git commit messages

code-analysisosintvulnerability-analysis
4282 years ago
yaraQA preview

yaraQA

GitHubneo23x0/yaraqa

YARA rule analyzer to improve rule quality and performance

code-analysismalware-analysisstatic-analysis+1
1173 months ago
Bughound preview

Bughound

GitHubmhaskar/bughound

Static code analysis tool based on Elasticsearch

code-analysisdevsecopsstatic-code-analysis+2
1305 years ago
gitlab-watchman preview

gitlab-watchman

GitHubpapermtn/gitlab-watchman

Finding exposed secrets and personal data in GitLab

code-analysisdata-exfiltrationdevsecops+3
2061 year ago
hexora preview

hexora

GitHubrushter/hexora

Static analysis of malicious Python code

code-analysisioc-managementmachine-learning+4
17212 days ago
slowql preview

slowql

GitHubslowql/slowql

Next-generation SQL static analyzer written in Rust. 282+ rules. Zero false positives. Security, performance, reliability, cost, compliance, quality.…

code-analysisconfiguration-auditingdatabase-security+6
2272 months ago
gobee preview

gobee

GitHubboratanrikulu/gobee

Write your BPF programs in Go, not C. gobee transpiles a Go subset to BPF C and generates typed cilium/ebpf bindings.

binary-analysiscode-analysisdevsecops+3
3484 months ago
oneiromancer preview

oneiromancer

GitHub0xdea/oneiromancer

Reverse engineering assistant that uses a locally running LLM to aid with pseudocode analysis.

ai-assisted-reversingcode-analysisreverse-engineering+3
14317h 31m ago
gitcolombo preview

gitcolombo

GitHubsoxoj/gitcolombo

🧬 Extract and analyze contributors info from git repos

code-analysisinformation-gatheringosint
9718 days ago
gosentry preview

gosentry

GitHubtrailofbits/gosentry

Security-oriented Go toolchain, focused on state-of-the-art fuzzing capabilities.

binary-analysiscode-analysisdevsecops+5
1218 days ago
SEDATED preview

SEDATED

GitHubowasp/sedated

SEDATED® Project (Sensitive Enterprise Data Analyzer To Eliminate Disclosure)

code-analysisconfiguration-auditingdevsecops+3
1106 years ago
xyntia preview

xyntia

GitHubbinsec/xyntia

Xyntia, the black-box deobfuscator

binary-analysiscode-analysisdynamic-code-analysis+1
9716 days ago
gitbleed_tools preview

gitbleed_tools

GitHubnightwatchcybersecurity/gitbleed_tools

Shell scripts to clone and mirror Git repositories, compute deltas, and run gitleaks to detect secrets hidden in deleted or reset commits.

code-analysisinformation-gatheringsecret-detection+1
884 years ago
peach preview

peach

GitHubcalebstewart/peach

Simple vulnerability scanning framework

code-analysisfuzzingstatic-analysis+1
519 years ago
nova-tracer preview

nova-tracer

GitHubnova-hunting/nova-tracer

NOVA - Claude Code Protection System against prompt injection attacks

ai-securityanomaly-detectioncode-analysis+3
957 months ago
dotenv-diff preview

dotenv-diff

GitHubchrilleweb/dotenv-diff

Validate environment variable usage in codebase

code-analysisconfiguration-auditingdevsecops+3
805 days ago
honeyslop preview

honeyslop

GitHubgadievron/honeyslop

Code canaries to quickly triage hallucinated ('slop') vulnerability reports

code-analysisdefensive-toolseducation+6
1004 months ago
jsdeob-workbench preview

jsdeob-workbench

GitHubowl4444/jsdeob-workbench

Reverse engineer obfuscated JavaScript visually. Chain transforms, inspect AST changes, write reusable deobfuscation plugins.

binary-analysiscode-analysisdebuggers+5
1207 months ago
Previous1…303132…48Next