Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

842 results

vigolium

vigolium/vigolium

Vigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision

ai-securityapi-security-testingauthentication+9

1.1k

10 days ago

pcc

sektioneins/pcc

Automated PHP configuration auditor that scans php.ini for security misconfigurations, supports CLI and web modes, and outputs results in text, HTML,…

code-analysisconfiguration-auditingvulnerability-scanners

8186 months ago

OffensiveDLR

byt3bl33d3r/offensivedlr

Toolbox containing research notes & PoC code for weaponizing .NET's DLR

code-analysiscommand-and-controldynamic-code-analysis+9

5255 years ago

sast-scan

shiftleftsecurity/sast-scan

Scan is a free & Open Source DevSecOps tool for performing static analysis based security testing of your applications and its dependencies. CI and…

cloud-securitycode-analysisconfiguration-auditing+6

8792 years ago

IDAssist

symgraph/idassist

AI-Powered Reverse Engineering Plugin for IDA Pro

ai-assisted-reversingbinary-analysiscode-analysis+7

7172 months ago

flawfinder

david-a-wheeler/flawfinder

a static analysis tool for finding vulnerabilities in C/C++ source code

code-analysisdevsecopsstatic-analysis+2

5813 months ago

ida_ifl

hasherezade/ida_ifl

IFL - Interactive Functions List (plugin for IDA Pro)

binary-analysiscode-analysismalware-analysis+2

4992 months ago

EagleVM

snowsnowsnows/eaglevm

Native code virtualizer for x64 binaries

binary-analysisbinary-exploitationcode-analysis+2

5441 year ago

tartufo

godaddy/tartufo

Searches through git repositories for high entropy strings and secrets, digging deep into commit history

code-analysisdevsecopssecret-detection+1

5175 months ago

DockSec

owasp/docksec

AI-powered Docker security scanner that explains vulnerabilities in plain English. An OWASP Lab Project.

ai-securitycode-analysiscontainer-security+5

4759 days ago

flounder

adshao/flounder

Autonomous white-hat security auditor for AI-driven code review, bug bounty research, exploit construction, and execution-grounded verification.

ai-securitycode-analysisdynamic-analysis-sandboxing+5

3305 days ago

entropy

ewenquim/entropy

CLI tool that scans codebases for high-entropy lines to detect potential secrets, with customizable file extension and top-N filtering.

code-analysissecret-detectionstatic-analysis

7333 months ago

nano-analyzer

weareaisle/nano-analyzer

A minimal LLM-powered zero-day vulnerability scanner by AISLE.

ai-securitybinary-analysiscode-analysis+5

3164 months ago

sage

gendigitalinc/sage

Lightweight Agent Detection & Response (ADR) layer for AI agents — guards commands, files, and web requests. Part of Gen Agent Trust Hub.

ai-securitycode-analysisdefensive-tools+6

26816 days ago

CoBRA

trailofbits/cobra

Coefficient-Based Reconstruction of Arithmetic — a Mixed Boolean-Arithmetic (MBA) expression simplifier for deobfuscation

binary-analysiscode-analysiscryptography+2

33217 days ago

kafel

google/kafel

A language and library for specifying syscall filtering policies.

code-analysisstatic-analysisutilities-frameworks

3654 months ago

semgrep-rules

elttam/semgrep-rules

Static analysis security rules for vulnerability detection and audit-focused code review across Java, Go, Python, C#, Kotlin, PHP, Kubernetes, and…

cloud-infrastructure-securitycode-analysiscontainer-security+6

2455 days ago

pyREtic

mynameismeerkat/pyretic

pyREtic is an extensible framework for in-memory Python 2.x bytecode reverse engineering

binary-analysiscode-analysisdebuggers+5

2683 years ago

Previous 1…789…47 Next