Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
198 results
lynis preview

lynis

GitHubcisofy/lynis

Agentless security auditing tool for Linux, macOS, and UNIX systems. Performs in-depth scans for vulnerabilities, configuration issues, and…

configuration-auditingdatabase-securitydefensive-tools+5
16.2k
20 days ago
AzureAD-Attack-Defense preview

AzureAD-Attack-Defense

GitHubcloud-architekt/azuread-attack-defense

This publication is a collection of various common attack scenarios on Microsoft Entra ID (formerly known as Azure Active Directory) and how they can…

authentication-authorizationcloud-securityconfiguration-auditing+5
2.5k1 month ago
the-bastion preview

the-bastion

GitHubovh/the-bastion

Authentication, authorization, traceability and auditability for SSH accesses.

authentication-authorizationconfiguration-auditingidentity-access-management+4
2.2k28 days ago
jumpserver preview

jumpserver

GitHubjumpserver/jumpserver

JumpServer is an open-source Privileged Access Management (PAM) platform that provides DevOps and IT teams with on-demand and secure access to SSH,…

authentication-authorizationcloud-securityconfiguration-auditing+5
31.4k1 day ago
packetfence preview

packetfence

GitHubinverse-inc/packetfence

Open-source network access control (NAC) system with captive portal, 802.1X, BYOD management, wired/wireless enforcement, and IDS/vulnerability…

authentication-authorizationconfiguration-auditingdefensive-tools+6
1.7k1 day ago
GPOHound preview

GPOHound

GitHubcogiceo/gpohound

Offensive GPO dumping and analysis tool that leverages and enriches BloodHound data

configuration-auditinginformation-gatheringmisconfiguration+4
4171 month ago
sparty preview
Archived

sparty

GitHub0xdevalias/sparty

Automated security auditing tool for Microsoft SharePoint and Frontpage web applications. Performs version detection, configuration flaw assessment,…

configuration-auditingexploitationinformation-gathering+4
9812 years ago
MSSQLand preview

MSSQLand

GitHubn3rada/mssqland

In-target C# post-exploitation tool for Microsoft SQL Server (MS SQL / MSSQL) traversing linked-server chains of any depth with cascading login…

configuration-auditingdatabase-securityimpersonation-tools+6
751 month ago
SuperDiagnosticTool preview

SuperDiagnosticTool

GitHubguettaf-hossam/superdiagnostictool

AI-powered Windows diagnostic & auto-repair tool using Google Gemini. Detect crashes, optimize performance, scan for malware, and generate PowerShell…

ai-securityconfiguration-auditingforensics+7
186 days ago
certbot preview

certbot

GitHubcertbot/certbot

Automated ACME client for obtaining and renewing Let's Encrypt TLS/SSL certificates, with plugins to deploy HTTPS on Apache, Nginx, and other web…

authentication-authorizationcloud-securityconfiguration-auditing+3
33.2k7 days ago
symfony preview

symfony

GitHubsymfony/symfony

PHP framework for building web applications and console tools with reusable components, security best practices, and a large ecosystem of bundles.

api-securityauthentication-authorizationconfiguration-auditing+3
31.1k2 days ago
infisical preview

infisical

GitHubinfisical/infisical

Open-source platform for secrets, certificates, and privileged access management with secret scanning, dynamic secrets, PKI, and CI/CD integrations.…

authentication-authorizationcloud-securityconfiguration-auditing+4
28.8k7 days ago
nginxconfig.io preview

nginxconfig.io

GitHubdigitalocean/nginxconfig.io

⚙️ NGINX config generator on steroids 💉

configuration-auditingdevsecopsutilities-frameworks+1
28.3k1 year ago
sops preview

sops

GitHubgetsops/sops

Simple and flexible tool for managing secrets

cloud-securityconfiguration-auditingcryptography+6
22.9k1 day ago
teleport preview

teleport

GitHubgravitational/teleport

The easiest, and most secure way to access and protect all of your infrastructure.

api-securityauthentication-authorizationcloud-security+7
20.8k12 days ago
opa preview

opa

GitHubopen-policy-agent/opa

Declarative policy engine that enables authorization and policy enforcement across services, Kubernetes, Terraform, Docker, and APIs using the Rego…

api-securityauthenticationauthentication-authorization+10
12.1k4 days ago
checkov preview

checkov

GitHubbridgecrewio/checkov

Static analysis tool for infrastructure as code that detects cloud misconfigurations, vulnerabilities, and secrets across Terraform, Kubernetes,…

cloud-infrastructure-securitycloud-securitycode-analysis+12
9.0k5 days ago
gixy preview

gixy

GitHubyandex/gixy

Nginx configuration static analyzer

configuration-auditingdevsecopsmisconfiguration+3
8.6k2 years ago
Previous12…11Next