Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

447 results

trivy

aquasecurity/trivy

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

cloud-infrastructure-securitycloud-securitycode-analysis+14

38.3k

22h 41m ago

apache__jspwiki_CVE-2022-46907_2-11-3

shoucheng3/apache__jspwiki_cve-2022-46907_2-11-3

Exploit module for Apache JSPWiki CVE-2022-46907, targeting a Java-based wiki platform with JAAS security integration. Provides vulnerability…

authentication-authorizationconfiguration-auditingeducation+3

11 months ago

nuclei

projectdiscovery/nuclei

Fast YAML-based vulnerability scanner with template-driven detection engine for automated security testing across web apps, APIs, networks, DNS, and…

anti-botapi-securityapi-security-testing+21

31.8k11h 43m ago

ChopChop

michelin/chopchop

YAML-driven CLI scanner that detects exposed services, files, and folders on web endpoints. Designed for developers to integrate security checks into…

configuration-auditingdevsecopsinformation-gathering+2

7135 years ago

cloud-security-audit

appliscale/cloud-security-audit

A command line security audit tool for Amazon Web Services

cloud-infrastructure-securitycloud-securityconfiguration-auditing+1

827 years ago

pcc

sektioneins/pcc

Automated PHP configuration auditor that scans php.ini for security misconfigurations, supports CLI and web modes, and outputs results in text, HTML,…

code-analysisconfiguration-auditingvulnerability-scanners

8177 months ago

sonicwall-audit-toolkit

anir0y/sonicwall-audit-toolkit

SonicWall security audit toolkit with vulnerable CTF lab (CVE-2021-20038, CVE-2024-53704)

authenticationconfiguration-auditingctf+5

7 months ago

terraform-aws-secure-baseline

nozaq/terraform-aws-secure-baseline

Terraform module to set up your AWS account with the secure baseline configuration based on CIS Amazon Web Services Foundations and AWS Foundational…

cloud-infrastructure-securitycloud-securityconfiguration-auditing+2

1.2k25 days ago

kcmapper

synacktiv/kcmapper

KcMapper is a security auditing tool for Keycloak. It exports your Keycloak configuration (realms, clients, users, roles, etc.) into a Neo4j graph…

authentication-authorizationconfiguration-auditingidentity-access-management+3

147 months ago

Detect_polyfill_CVE-2024-38537-

havoc10-sw/detect_polyfill_cve-2024-38537-

Here's a Python script that checks if the polyfill.io domain is present in the Content Security Policy (CSP) header of a given web application.

api-security-testingconfiguration-auditingmisconfiguration+2

2 years ago

CVE-2026-52200

lamaper/cve-2026-52200

Security advisory detailing broken access control in UZ801/ES-U3TS MifiService web API, allowing unauthenticated data extraction, config…

configuration-auditingexploitationinformation-gathering+4

4 months ago

hosting

danwin/hosting

Automated Tor-based shared web hosting server with PHP multi-version support, email routing, auto-scaling Tor instances, and built-in security…

configuration-auditingnetwork-securityprivacy+3

3716 months ago

cloudsploit

aquasecurity/cloudsploit

Multi-cloud security posture scanner that audits AWS, Azure, GCP, and OCI for misconfigurations, compliance violations (HIPAA, PCI, CIS), and…

cloud-securityconfiguration-auditingvulnerability-scanners

3.8k15 days ago

setup-wordpress-with-security-best-practice

password123456/setup-wordpress-with-security-best-practice

Comprehensive guide for hardening WordPress installations: covers admin user changes, HTTPS enforcement, plugin security, file permissions, and…

configuration-auditingeducationweb-security

292 years ago

apache__incubator-dubbo_CVE-2021-30181_2-6-8

shoucheng3/apache__incubator-dubbo_cve-2021-30181_2-6-8

High-performance Java RPC and microservices framework with service discovery, traffic management, observability, and built-in security for building…

api-securityauthentication-authorizationcloud-security+4

11 months ago

Archived

LambdaGuard

skyscanner/lambdaguard

AWS Serverless Security

cloud-infrastructure-securitycloud-securityconfiguration-auditing+3

4004 years ago

How-To-Secure-A-Linux-Server

imthenachoman/how-to-secure-a-linux-server

Step-by-step guide for hardening a Linux server, covering SSH security, firewalls, intrusion detection, auditing, and system configuration to reduce…

authenticationconfiguration-auditingcurated-resources+7

31.8k1 month ago

awesome-security-hardening

decalage2/awesome-security-hardening

A collection of awesome security hardening guides, tools and other resources

cloud-securityconfiguration-auditingcontainer-security+6

6.6k15 days ago

Previous12…25 Next