Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
13 results
awesome-windows-domain-hardening preview

awesome-windows-domain-hardening

GitHubpaulsec/awesome-windows-domain-hardening

A curated list of awesome Security Hardening techniques for Windows.

configuration-auditingcurated-resourceseducation+3
1.8k
6 years ago
awesome-entra preview

awesome-entra

GitHubmerill/awesome-entra

😎 Awesome list of all things related to Microsoft Entra

authentication-authorizationcloud-securityconfiguration-auditing+5
7722 months ago
Set-AuditRule preview

Set-AuditRule

GitHubotrf/set-auditrule

Useful access control entries (ACE) on system access control list (SACL) of securable objects to find potential adversarial activity

configuration-auditingdefensive-toolseducation+1
964 years ago
Startup-SBOM preview

Startup-SBOM

GitHubmorpheuslord/startup-sbom

A tool to reverse engineer and inspect the RPM and APT databases to list all the packages along with executables, service, versions and CVE.

cloud-securityconfiguration-auditingcontainer-security+4
174 months ago
remote-bitlocker-encryption-report preview

remote-bitlocker-encryption-report

GitHubgdraperi/remote-bitlocker-encryption-report

PowerShell script to mitigate CVE-2018-12038. The script takes a list of PC as input, gets their BitLocker encryption type remotely, and outputs a…

cloud-infrastructure-securityconfiguration-auditingencryption-decryption-tools+3
27 years ago
windows_hardening preview

windows_hardening

GitHub0x6d69636b/windows_hardening

Audits Windows security settings against CIS, Microsoft, STIG, and BSI baselines, scores compliance, and applies hardening changes via registry or…

configuration-auditingdefensive-toolsmisconfiguration
2.7k1 month ago
PowerHuntShares preview

PowerHuntShares

GitHubnetspi/powerhuntshares

Audits Active Directory SMB shares to inventory, analyze, and report excessive privileges. Discovers accessible systems, enumerates share ACLs,…

configuration-auditinginformation-gatheringnetwork-security+2
1.1k10 months ago
awesome-wazuh preview

awesome-wazuh

GitHubttlab-research/awesome-wazuh

🛡️Awesome lists about all kinds of interesting topics of Wazuh XDR/SIEM

cloud-securityconfiguration-auditingcurated-resources+8
1381 month ago
Cable preview

Cable

GitHublogangoins/cable

.NET post-exploitation toolkit for Active Directory reconnaissance and exploitation

authenticationconfiguration-auditingexploitation+8
4021 year ago
ConMachi preview

ConMachi

GitHubnccgroup/conmachi

Container Blackbox Security Auditing Tool: enumerates security configuration from within the target container

cloud-infrastructure-securityconfiguration-auditingcontainer-security+4
1067 years ago
Azure-AD-Password-Checker preview

Azure-AD-Password-Checker

GitHubquahac/azure-ad-password-checker

Azure AD Password Checker

authenticationcloud-securityconfiguration-auditing+3
861 year ago
witcher preview

witcher

GitHubmf-labs/witcher

Managing GitHub Advanced Security (GHAS) Controls at Scale

code-analysisconfiguration-auditingdevsecops+2
101 year ago
patch-openssl-CVE-2014-0291_CVE-2015-0204 preview

patch-openssl-CVE-2014-0291_CVE-2015-0204

GitHubniccox/patch-openssl-cve-2014-0291_cve-2015-0204
cloud-securityconfiguration-auditingdevsecops+2
111 years ago