Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

289 results

Antignis

huntandhackett/antignis

Automates Windows host-based firewall management by importing network data into a central database, creating Active Directory groups, and generating…

configuration-auditingdefensive-toolsnetwork-access-control+1

3 years ago

AppArmor.d

roddhjav/apparmor.d

Comprehensive set of over 1500 AppArmor profiles to confine Linux system processes, desktops, and services, with support for multiple distributions…

configuration-auditingcurated-resourceseducation+1

71 day ago

NetworkSandboxEngine

onyks-os/networksandboxengine

A deterministic network sandbox for testing nftables rules. It uses ephemeral Linux network namespaces (netns) and Scapy to validate firewall logic…

configuration-auditingdefensive-toolsdevsecops+3

47 days ago

Setup IPsec VPN

hwdsl2/setup-ipsec-vpn

Automated IPsec VPN server setup with IPsec/L2TP, Cisco IPsec, and IKEv2 support. Includes helper scripts for user and certificate management, and…

configuration-auditingencryption-decryption-toolsnetwork-security+1

315 days ago

CVE-2026-42945-NGINX-Rift-Toolkit

gagaltotal/cve-2026-42945-nginx-rift-toolkit

Automated toolkit for scanning, exploiting, and patching CVE-2026-42945 (critical RCE in nginx). Includes network scanner, heap spray exploit, and…

configuration-auditingexploitationnetwork-mapping+3

44 months ago

asterion-network-minotaur

rodhnin/asterion-network-minotaur

Network and domain security auditor scanning Windows Active Directory, Linux systems, and network infrastructure with AI-powered hardening guides…

ai-securitycloud-securityconfiguration-auditing+5

35 months ago

guardskill

soemoescode/guardskill

Read-only scanner for what lets a repository run code in a coding agent (Claude Code, Codex, Cursor, Copilot): git settings, hooks, and committed MCP…

ai-securitycode-analysisconfiguration-auditing+4

122 days ago

Windows-Defender-Security-Auditor-CVE-2026-50656-

eh-amish/windows-defender-security-auditor-cve-2026-50656-

Read-only PowerShell security auditor for Windows endpoints and servers: checks Defender configuration, patch status, credentials, persistence,…

configuration-auditingdefensive-toolsincident-response+8

1 month ago

secure-boot-cert-servicing

ets-mse/secure-boot-cert-servicing

Standalone assessment and servicing for the Secure Boot 2011 to 2023 certificate rollover (CVE-2023-24932 / KB5025885). Assess-only by default; no…

configuration-auditingfirmware-analysisvulnerability-analysis

2 months ago

openclaw-hardening-check

cain66666/openclaw-hardening-check

Offline, read-only hardening check for a self-hosted OpenClaw install — gateway exposure, auth, CVE-2026-25253. Never prints secrets, makes no…

cloud-securityconfiguration-auditingmisconfiguration+3

2 months ago

cve-scanner

hargabyte/cve-scanner

Local CVE scanner for OpenClaw that checks versions against 522+ known vulnerabilities, displays recent HIGH-severity CVEs, and recommends upgrades.…

configuration-auditingdefensive-toolsdevsecops+3

36 months ago

CVE-2026-23918

hackervlogofficial/cve-2026-23918

This is a proactive tool for security auditing. For your GitHub repository, you’ll want a description that highlights its safety (non-intrusive) and…

configuration-auditingdevsecopsnetwork-security+2

15 months ago

CopyFail-Scanner-CVE-2026-31431

raptoratack/copyfail-scanner-cve-2026-31431

Scans systems for CVE-2026-31431 (CopyFile vulnerability), enumerates system details, evaluates exposure, reports vulnerable status, and optionally…

configuration-auditinginformation-gatheringpenetration-testing+3

5 months ago

nginx-rift-scanner

simota/nginx-rift-scanner

Detect-only scanner for CVE-2026-42945 (NGINX Rift), a heap overflow in ngx_http_rewrite_module. Version detection + nginx.conf pattern analysis.…

code-analysisconfiguration-auditingstatic-analysis+3

14 months ago

Multi-VLAN-Enterprise-Network-Security-Infrastructure

klairmanraj/multi-vlan-enterprise-network-security-infrastructure

Multi-VM virtual network lab with GRE tunneling, nftables firewall, Active Directory, BIND9 DNS, and Docker services. Includes vulnerability…

configuration-auditingdns-analysiseducation+4

5 months ago

Prober

isnic/prober

Automated, reproducible network security testing framework using Ansible and BATS to verify DNS, host availability, open ports, and TLS configuration…

configuration-auditingdns-analysisnetwork-security+3

15 years ago

Reachability-Check

abdullahaligun/reachability-check

Browser-based network connectivity checker for testing firewall rules, access restrictions, and corporate policy compliance. Supports HTTP Fetch and…

configuration-auditingdns-analysisinformation-gathering+3

16 months ago

dod-blue-team-network-lab

arisharazakhan-cpu/dod-blue-team-network-lab

High fidelity defensive security lab simulating a DoD aligned enterprise network with Active Directory, VLAN segmentation, STIG based hardening,…

configuration-auditingdefensive-toolseducation+6

7 months ago

Previous 123…17 Next