Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

394 results

core

opnsense/core

OPNsense GUI, API and systems backend

api-securitycaptcha-bypassconfiguration-auditing+4

4.8k12h 58m ago

packetfence

inverse-inc/packetfence

PacketFence is a fully supported, trusted, Free and Open Source network access control (NAC) solution. Boasting an impressive feature set including a…

authentication-authorizationconfiguration-auditingdefensive-tools+6

1.7k12h 5m ago

NetworkSandboxEngine

onyks-os/networksandboxengine

A deterministic network sandbox for testing nftables rules. It uses ephemeral Linux network namespaces (netns) and Scapy to validate firewall logic…

configuration-auditingdefensive-toolsdevsecops+3

619 days ago

dmz-security-monitoring-hardening

freeguy-6/dmz-security-monitoring-hardening

CY376 Blue Team project — pfSense DMZ, Suricata IDS/IPS, and automated host hardening against CVE-2014-6271

configuration-auditingdefensive-toolseducation+5

12 months ago

CVE-2024-6387

grupooruss/cve-2024-6387

Python script to scan and secure SSH configurations against the CVE-2024-6387 race condition vulnerability, with automated LoginGraceTime adjustment…

configuration-auditingnetwork-securitypenetration-testing+3

22 years ago

CVE-2025-49844-discovery

gopinaath/cve-2025-49844-discovery

Audits AWS ElastiCache Redis/Valkey clusters for network exposure, checking VPC, subnet, and internet gateway routes across multiple accounts and…

cloud-securityconfiguration-auditinginformation-gathering+2

1 year ago

How-To-Secure-A-Linux-Server

imthenachoman/how-to-secure-a-linux-server

Step-by-step guide for hardening a Linux server, covering SSH security, firewalls, intrusion detection, auditing, and system configuration to reduce…

authenticationconfiguration-auditingcurated-resources+7

31.9k1 month ago

jumpserver

jumpserver/jumpserver

JumpServer is an open-source Privileged Access Management (PAM) platform that provides DevOps and IT teams with on-demand and secure access to SSH,…

authentication-authorizationcloud-securityconfiguration-auditing+5

31.8k19h 5m ago

nuclei

projectdiscovery/nuclei

Fast YAML-based vulnerability scanner with template-driven detection engine for automated security testing across web apps, APIs, networks, DNS, and…

anti-botapi-securityapi-security-testing+21

32.3k8h 25m ago

teleport

gravitational/teleport

The easiest, and most secure way to access and protect all of your infrastructure.

api-securityauthentication-authorizationcloud-security+7

21.0k2 months ago

opa

open-policy-agent/opa

Declarative policy engine that enables authorization and policy enforcement across services, Kubernetes, Terraform, Docker, and APIs using the Rego…

api-securityauthenticationauthentication-authorization+10

12.4k2h 33m ago

the-bastion

ovh/the-bastion

Authentication, authorization, traceability and auditability for SSH accesses.

authentication-authorizationconfiguration-auditingidentity-access-management+4

2.2k27 days ago

securix

cloud-gouv/securix

SécurixOS is a NixOS-based secure operating system tailored for small to medium-sized teams. It provides a minimal, hardened environment with strong…

authenticationcloud-securityconfiguration-auditing+7

1.1k5 days ago

openclaw-dashboard

tugcantopaloglu/openclaw-dashboard

🔐 Secure, real-time monitoring dashboard for OpenClaw AI agents. Auth, TOTP MFA, cost tracking, live feed, memory browser and more.

api-securityauthenticationcloud-security+7

70117 days ago

bmcweb

openbmc/bmcweb

A do everything Redfish, KVM, GUI, and DBus webserver for OpenBMC

api-securityauthentication-authorizationcloud-infrastructure-security+6

24011 days ago

ADCollector

dev-2null/adcollector

A lightweight tool to quickly extract valuable information from the Active Directory environment for both attacking and defending.

authenticationconfiguration-auditinginformation-gathering+4

6351 year ago

chef-ssh-hardening

dev-sec/chef-ssh-hardening

This chef cookbook provides secure ssh-client and ssh-server configurations.

authenticationcloud-infrastructure-securityconfiguration-auditing+2

16816 days ago

cplt

navikt/cplt

Sandbox for AI coding agents. Runs Copilot CLI, Claude Code, OpenCode, Gemini CLI, Antigravity, Pi, goose or a plain shell inside a kernel-level…

ai-securitycommand-and-controlconfiguration-auditing+7

1395h 26m ago

Previous 123…22 Next