Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
208 results
cve-2021-44228 preview

cve-2021-44228

GitHubdidoatanasov/cve-2021-44228

Ansible playbook that applies a global JVM environment variable to mitigate the Log4j CVE-2021-44228 remote code execution vulnerability across all…

cloud-securityconfiguration-auditingdevsecops+1
4 years ago
CYBERDUDEBIVASH-ServiceNow-AI-Agent-Audit-Script preview

CYBERDUDEBIVASH-ServiceNow-AI-Agent-Audit-Script

GitHubcyberdudebivash/cyberdudebivash-servicenow-ai-agent-audit-script

This script audits ServiceNow AI Agents for vulnerabilities like CVE-2025-12420, governance gaps, and compliance risks. Powered by CYBERDUDEBIVASH –…

ai-securityapi-securitycloud-security+2
7 months ago
cve-2022-30190-mitigate preview

cve-2022-30190-mitigate

GitHubhilt86/cve-2022-30190-mitigate

PowerShell script to apply a registry-based mitigation for CVE-2022-30190 (Follina) vulnerability in Microsoft Support Diagnostic Tool.

configuration-auditingdefensive-toolsscripting-automation+1
4 years ago
msiscan preview

msiscan

GitHubsec-consult/msiscan

Scanning tool for identifying local privilege escalation issues in vulnerable MSI installers

configuration-auditingpenetration-testingprivilege-escalation+2
1291 year ago
AegisJava preview

AegisJava

GitHubrashedhasan090/aegisjava

I have created AegisJava, a tool to fix (detect and mitigate) CVE-2025-30749.

code-analysisconfiguration-auditingdevsecops+3
4 days ago
apache__incubator-dubbo_CVE-2021-30181_2-6-8 preview

apache__incubator-dubbo_CVE-2021-30181_2-6-8

GitHubshoucheng3/apache__incubator-dubbo_cve-2021-30181_2-6-8

High-performance Java RPC and microservices framework with service discovery, traffic management, observability, and built-in security for building…

api-securityauthentication-authorizationcloud-security+4
10 months ago
ff4j__ff4j_CVE-2022-44262_1_8_13_fixed preview

ff4j__ff4j_CVE-2022-44262_1_8_13_fixed

GitHubshoucheng3/ff4j__ff4j_cve-2022-44262_1_8_13_fixed

Feature toggle framework for Java enabling runtime feature activation, role-based access, AOP-driven toggling, monitoring, audit trails, and a web…

authentication-authorizationconfiguration-auditingdevsecops+3
11 months ago
fabric8io__kubernetes-client_CVE-2021-4178_5-0-2 preview

fabric8io__kubernetes-client_CVE-2021-4178_5-0-2

GitHubshoucheng3/fabric8io__kubernetes-client_cve-2021-4178_5-0-2

Java client providing fluent DSL access to Kubernetes and OpenShift REST APIs for managing cloud-native infrastructure, pods, services, and…

api-securityauthentication-authorizationcloud-infrastructure-security+3
1 year ago
jenkinsci__script-security-plugin_CVE-2023-24422_1228.vd93135a_2fb_25 preview

jenkinsci__script-security-plugin_CVE-2023-24422_1228.vd93135a_2fb_25

GitHubshoucheng3/jenkinsci__script-security-plugin_cve-2023-24422_1228.vd93135a_2fb_25

Jenkins plugin providing script approval workflows and Groovy sandboxing to enforce secure script execution, with ACL-aware permission checks and…

api-securityauthentication-authorizationcode-analysis+5
6 months ago
ff4j__ff4j_CVE-2022-44262_1-8-13 preview

ff4j__ff4j_CVE-2022-44262_1-8-13

GitHubshoucheng3/ff4j__ff4j_cve-2022-44262_1-8-13

Feature toggle framework for Java enabling runtime feature activation, role-based access, AOP-driven toggling, monitoring, audit trails, and a web…

authentication-authorizationconfiguration-auditingdevsecops+3
1 year ago
oauth-scan preview

oauth-scan

GitHubportswigger/oauth-scan

Burp Suite Extension useful to verify OAUTHv2 and OpenID security

authentication-authorizationconfiguration-auditinginformation-gathering+3
1921 year ago
CVE-2021-1675 preview

CVE-2021-1675

GitHubtanarchytan/cve-2021-1675

Fix without disabling Print Spooler

authentication-authorizationconfiguration-auditingmisconfiguration+2
5 years ago
cloud-security-audit preview

cloud-security-audit

GitHubappliscale/cloud-security-audit

A command line security audit tool for Amazon Web Services

cloud-infrastructure-securitycloud-securityconfiguration-auditing+1
827 years ago
certbot preview

certbot

GitHubcertbot/certbot

Certbot is EFF's tool to obtain certs from Let's Encrypt and (optionally) auto-enable HTTPS on your server. It can also act as a client for any…

authentication-authorizationcloud-securityconfiguration-auditing+3
33.2k3 days ago
KubiScan preview

KubiScan

GitHubcyberark/kubiscan

A tool to scan Kubernetes cluster for risky permissions

authentication-authorizationcloud-securityconfiguration-auditing+8
1.4k1 year ago
bulwark preview

bulwark

GitHubsoftrams/bulwark

An organizational asset and vulnerability management tool, with Jira integration, designed for generating application security reports.

api-securityauthentication-authorizationconfiguration-auditing+3
1879 months ago
OutOfTune preview

OutOfTune

GitHubstra-x/outoftune

Rogue device enrollment tool for Entra ID and Intune MDM. Automates device join, token acquisition, MDM enrollment, and OMA-DM checkin to extract…

authentication-authorizationcloud-securityconfiguration-auditing+9
315 months ago
kcmapper preview

kcmapper

GitHubsynacktiv/kcmapper

KcMapper is a security auditing tool for Keycloak. It exports your Keycloak configuration (realms, clients, users, roles, etc.) into a Neo4j graph…

authentication-authorizationconfiguration-auditingidentity-access-management+3
146 months ago
Previous12…12Next