Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
17 results
nginx-rift-check preview

nginx-rift-check

GitHubcynepmyx/nginx-rift-check

Detects the CVE-2026-42945 rewrite pattern in nginx configs: rewrite with ? in the replacement plus an unnamed capture consumed in the same location

configuration-auditingstatic-analysisvulnerability-analysis+2
7 days ago
vibe-coding-security preview

vibe-coding-security

GitHubboxed-dev/vibe-coding-security

Pre-launch security checklist for AI-generated apps (Lovable, v0, Bolt, Cursor). 69 checks covering Supabase RLS, exposed keys, and prompt injection.…

ai-securityapi-securityauthentication+9
1411 days ago
sbomlyze preview

sbomlyze

GitHubrezmoss/sbomlyze

Git diff for SBOMs—compare CycloneDX, SPDX, and Syft documents, detect tampering, and gate CI.

configuration-auditingdevsecopssecret-detection+5
2411 days ago
MSSQLand preview

MSSQLand

GitHubn3rada/mssqland

In-target C# post-exploitation tool for Microsoft SQL Server (MS SQL / MSSQL) traversing linked-server chains of any depth with cascading login…

configuration-auditingdatabase-securityimpersonation-tools+6
7527 days ago
linux-baseline preview

linux-baseline

GitHubdev-sec/linux-baseline

InSpec-based compliance profile for auditing Linux system hardening against security baselines, ensuring consistent configuration across…

configuration-auditingdevsecops
8742 months ago
Cordon preview
Archived

Cordon

GitHubvishnunandan555/cordon

Run any command inside a restricted filesystem view on Linux

configuration-auditingcontainer-securitydevsecops+6
23 months ago
trustlock preview

trustlock

GitHubtayyabt/trustlock

A Git-native dependency admission controller. Evaluates trust signals on every dependency change and blocks commits or builds when packages fail your…

configuration-auditingdevsecopssecret-detection+1
214 months ago
azuredevops-enum preview

azuredevops-enum

GitHubreverseclabs/azuredevops-enum
api-securitycloud-securityconfiguration-auditing+7
25 months ago
cve-2013-3900-winverifytrust-mitigation preview

cve-2013-3900-winverifytrust-mitigation

GitHubsdimitri05/cve-2013-3900-winverifytrust-mitigation

PowerShell remediation for CVE-2013-3900 (WinVerifyTrust) / Tenable Plugin 166555 using EnableCertPaddingCheck.

configuration-auditingincident-responsescripting-automation+1
6 months ago
ssh-baseline preview

ssh-baseline

GitHubdev-sec/ssh-baseline

DevSec SSH Baseline - InSpec Profile

cloud-infrastructure-securityconfiguration-auditingdevsecops
2952 years ago
mysql-baseline preview

mysql-baseline

GitHubdev-sec/mysql-baseline

DevSec MySQL Baseline - InSpec Profile

cloud-securityconfiguration-auditingdatabase-security+1
632 years ago
CVE-2020-9289 preview

CVE-2020-9289

GitHubsynacktiv/cve-2020-9289

Decrypt reversible secrets encrypted using the default hardcoded key related to CVE-2020-9289 on FortiAnalyzer/FortiManager (the only difference with…

configuration-auditingcryptographyencryption-decryption-tools+3
113 years ago
anteater preview
Archived

anteater

GitHubanteater/anteater

Anteater - CI/CD Gate Check Framework

code-analysisconfiguration-auditingdevsecops+6
1753 years ago
nginx-baseline preview

nginx-baseline

GitHubdev-sec/nginx-baseline

DevSec Nginx Baseline - InSpec Profile

cloud-infrastructure-securityconfiguration-auditingdevsecops+1
1083 years ago
Log4j-Updater preview

Log4j-Updater

GitHubvinnimarcon/log4j-updater

Log4J Updater Bash Script to automate the framework update process on numerous machines and prevent the CVE-2021-44228

configuration-auditingdevsecopsgeneral-purpose-utilities+3
24 years ago
hayat preview

hayat

GitHubdenizparlak/hayat

Hayat is a script for report and analyze Google Cloud Platform resources.

cloud-infrastructure-securitycloud-securityconfiguration-auditing+1
826 years ago
dawgmon preview

dawgmon

GitHubanvilsecure/dawgmon

dawg the hallway monitor - monitor operating system changes and analyze introduced attack surface when installing software

configuration-auditingdefensive-toolsincident-response+1
556 years ago