Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

390 results

aide

aide/aide

File integrity monitoring tool that detects unauthorized changes to monitored files and directories using attribute checks, multiple hash algorithms,…

configuration-auditingdefensive-toolsforensics+4

757

1 day ago

php2shell-exposurehunt

deathbydata/php2shell-exposurehunt

Repository for PHP2Shell exposure hunting and related analysis

configuration-auditingdefensive-toolsincident-response+4

1 day ago

sandboxed-untrusted-code-execution-runner

kavryxdev-group/sandboxed-untrusted-code-execution-runner

Executes untrusted Python, JavaScript, and Bash in a hardened jail with 5-second, 128 MB, 0.5-core, PID and output limits.

api-securityconfiguration-auditingcontainer-security+5

3 days ago

aws-pentest

capture0x/aws-pentest

Automated AWS security assessment CLI with 30 modules covering IAM privilege escalation, S3 exposure, compute, network, logging and misconfiguration…

cloud-infrastructure-securitycloud-securityconfiguration-auditing+9

345 months ago

get-trust-anchor

iana-org/get-trust-anchor

Tool for fetching/refreshing DNS Root Zone trust anchors

configuration-auditingcryptographydefensive-tools+3

1131 month ago

nextjs-supabase-stripe-security-checker

edtrackai/nextjs-supabase-stripe-security-checker

Local static security scanner for Next.js, Supabase and Stripe apps: 24 AST-based checks for leaked keys, missing RLS and grants, unsafe webhooks.…

authentication-authorizationcloud-securitycode-analysis+7

7 days ago

Vader-Pro-VDR

tridents10/vader-pro-vdr

AI-assisted Vulnerability Detection & Remediation platform featuring a Go endpoint agent, centralized dashboard, and vulnerability intelligence…

ai-securitycloud-securityconfiguration-auditing+5

15 days ago

pfsense-bsnmpd-conf

abraxas/pfsense-bsnmpd-conf

pfSense CE 2.9.0-DEVELOPMENT - Medium - Remote - Config injection - bsnmpd syslocation

configuration-auditingexploitationlabs-practice+5

8 days ago

adit

joda32/adit

Active Directory recon and read-only security audit over ADWS (net.tcp/9389), in Go

authenticationconfiguration-auditingdefensive-tools+8

18 days ago

opnsense-wlan-wpa-line

abraxas/opnsense-wlan-wpa-line

OPNsense 26.7.6 - High - Remote - Config line injection - WLAN WPA identity

configuration-auditingexploitationlabs-practice+4

10 days ago

spark-connect-copy-local

abraxas/spark-connect-copy-local

Apache Spark 4.2.0 - High - Remote - File write - Connect session SET copyFromLocalToFs.allowDestLocal

cloud-securityconfiguration-auditingexploitation+5

10 days ago

scan4secrets

m14r41/scan4secrets

Find credentials and secret with 170+ rules covering across source code, Web URL, and CI/CD, verifies them against vendor APIs, and generates SARIF,…

code-analysisconfiguration-auditingcrawler+9

1231 month ago

wazuhlabproject

swastiksagar/wazuhlabproject

Hands-on Wazuh SIEM/XDR home lab covering OVA deployment, agent enrollment, file integrity monitoring, VirusTotal malware detection, and MITRE ATT&CK…

configuration-auditingdefensive-toolsdigital-forensics+7

22 months ago

signal-server-dropwizard-admin

abraxas/signal-server-dropwizard-admin

Signal-Server v20261007.0.0 - High - Remote - Privilege leftover - unauth Dropwizard admin :8081

configuration-auditingdefensive-toolsinformation-gathering+5

712 days ago

vsftpd-cmds-denied-alias

abraxas/vsftpd-cmds-denied-alias

vsftpd 3.0.5 - High - Remote - Privilege leftover - cmds_denied misses RFC aliases (XRMD)

configuration-auditingdefensive-toolsexploitation+5

11 days ago

CloudGarrison

vighnesh91/cloudgarrison

Offline browser-based multi-cloud posture workbench that simulates attack paths, audits IaC compliance, analyzes identity graphs, and maps audit logs…

cloud-infrastructure-securitycloud-securityconfiguration-auditing+6

14 days ago

cloudflare-security-art

buybitart/cloudflare-security-art

Cloudflare Free Plan security rules (Zero Trust approach) for small websites

anti-botconfiguration-auditingcurated-resources+5

2254 months ago

Linux-IPTables-firewall-UltraFirewall

gmh5225/linux-iptables-firewall-ultrafirewall

Defensive Linux firewall toolkit combining IPTables rules and kernel configuration to protect hosts and servers against DoS, DDoS, and network…

configuration-auditingdefensive-toolsnetwork-security

3 years ago

Previous12…22 Next