Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

2185 results

threat-modeling-mcp-server

awslabs/threat-modeling-mcp-server

MCP server for structured STRIDE-based threat modeling with automatic code validation, business context analysis, and comprehensive report generation…

cloud-securitycode-analysisdevsecops+3

12h 22m ago

opentaint

seqra/opentaint

Formal inter-procedural taint analysis engine for application security. Tracks untrusted data across function boundaries, persistence layers, and…

ai-securityapi-securitycode-analysis+7

1272 days ago

rev-dep

jayu/rev-dep

Dependency analysis and optimization toolkit for modern JavaScript and TypeScript codebases. Enforce dependency graph hygiene and remove unused code…

code-analysisdevsecopsmisconfiguration+2

25221 days ago

Bughound

mhaskar/bughound

Static code analysis tool based on Elasticsearch

code-analysisdevsecopsstatic-code-analysis+2

1305 years ago

hexora

rushter/hexora

Static analysis of malicious Python code

code-analysisioc-managementmachine-learning+4

16825 days ago

Argus-SAF

arguslab/argus-saf

Scala-based static analysis framework for Android and Java bytecode with flow analysis, decompilation, and native code analysis via symbolic…

android-securitybinary-analysiscode-analysis+2

1994 years ago

grepmarx

orange-cyberdefense/grepmarx

A source code static analysis platform for AppSec enthusiasts.

code-analysisdevsecopsstatic-analysis+3

2788 months ago

deepsecrets

ntoskernel/deepsecrets

Offline secrets scanner combining regex rules, lexer-based semantic analysis, and hashed-value matching to detect exposed credentials in code with…

code-analysisdefensive-toolsdevsecops+5

1851 month ago

MATE

galoisinc/mate

Interactive program analysis suite using Code Property Graphs to hunt for bugs in C and C++ code, unifying application-specific and low-level…

binary-analysiscode-analysisstatic-analysis+1

1984 years ago

android-check

noveogroup/android-check

Static code analysis plugin for Android project. (Checkstyle, PMD)

android-securitycode-analysisdevsecops+1

2659 years ago

FileInsight-plugins

nmantani/fileinsight-plugins

FileInsight-plugins: decoding toolbox of McAfee FileInsight hex editor for malware analysis

binary-analysiscode-analysiscryptography+7

1641 year ago

oneiromancer

0xdea/oneiromancer

Reverse engineering assistant that uses a locally running LLM to aid with pseudocode analysis.

ai-assisted-reversingcode-analysisreverse-engineering+3

1444 days ago

nuguard

nuguardai/nuguard

opensource repo for validating agentic AI applications: redteam, behavior, supply-chain, static analysis

ai-securityapi-security-testingcode-analysis+8

214 days ago

deepsecrets

avito-tech/deepsecrets

Static analysis tool that scans source code for hardcoded secrets, API keys, and credentials using semantic understanding of code context.

code-analysisdevsecopssecret-detection+1

1933 years ago

mole

cyber-defence-campus/mole

A Binary Ninja plugin using backward slicing of variables as a driver for static taint analysis

ai-assisted-reversingbinary-analysiscode-analysis+4

8213 days ago

scodescanner

agrawalsmart7/scodescanner

Command-line static analysis scanner that detects critical vulnerabilities in PHP and YAML source code using custom semgrep rules, with Jira and…

code-analysisdevsecopsstatic-code-analysis+1

1623 years ago

kin

firelock-ai/kin

Semantic graph-based version control for AI-written code. Tracks entities and relations instead of file diffs, enabling blast radius analysis, shadow…

ai-securitycode-analysiscurated-resources+4

4415 days ago

malware-check

momenbasel/malware-check

Static and dynamic analysis tool for detecting malicious code, suspicious binaries, and privacy violations

binary-analysiscode-analysisdevsecops+7

6311 days ago

Previous 1…8910…100 Next