Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

423 results

nono

nolabs-ai/nono

agent runtime security - zero trust, zero setup, zero latency agent sandboxing

container-securitycode-analysisconfiguration-auditing+8

3.6k1 hour ago

cli

snyk/cli

Snyk CLI scans and monitors your projects for security vulnerabilities.

cloud-infrastructure-securityvulnerability-scannerscontainer-security+6

5.6k1h 24m ago

wrongsecrets

owasp/wrongsecrets

Vulnerable app with examples showing how to not use secrets

container-securityvulnerability-analysisctf+5

1.5k3h 12m ago

kics

checkmarx/kics

Static analysis scanner for infrastructure-as-code that detects security vulnerabilities, compliance violations, and misconfigurations across…

cloud-infrastructure-securityvulnerability-scannerscontainer-security+10

2.7k3h 32m ago

installer

mondoohq/installer

Linux, macOS and Windows Install scripts for cnquery & cnspec

general-purpose-utilitiesvulnerability-scannerscontainer-security+1

834h 6m ago

content

complianceascode/content

Generates SCAP, Ansible, Bash, and CEL security content for compliance evaluation and automated hardening across Linux hosts, containers, and…

defensive-toolscontainer-securityconfiguration-auditing+3

2.8k4h 50m ago

beelzebub

beelzebub-labs/beelzebub

A secure low code deception runtime framework, leveraging AI for System Virtualization.

defensive-toolscontainer-securitysecurity-virtualization+7

2.1k5h 11m ago

agent-bom

msaad00/agent-bom

Open security scanner and self-hosted control plane for AI, MCP, and cloud. One evidence model — run scans in your environment, centralize findings,…

vulnerability-scannerscontainer-securitycloud-security+6

296h 19m ago

grype

anchore/grype

A vulnerability scanner for container images and filesystems

static-analysisvulnerability-scannerscontainer-security+4

12.7k6h 36m ago

WhatTheHack

microsoft/whatthehack

A collection of challenge based hack-a-thons including student guide, coach guide, lecture presentations, sample/instructional code and templates. …

cloud-infrastructure-securitycontainer-securityiot-security+6

1.9k7 hours ago

jumpserver

jumpserver/jumpserver

JumpServer is an open-source Privileged Access Management (PAM) platform that provides DevOps and IT teams with on-demand and secure access to SSH,…

authentication-authorizationcontainer-securityconfiguration-auditing+5

31.2k9h 14m ago

smolvm

smol-machines/smolvm

An embeddable, portable, branchable virtual machine to safely run Agents locally.

cloud-infrastructure-securitycontainer-securitysecurity-virtualization+2

4.4k10h 46m ago

prismor

prismorsec/prismor

Self-hosted runtime control plane for AI agents. Observe or HITL approve or Block rogue tool calls before it executes: secret leaks, prompt…

defensive-toolscontainer-securitydevsecops+5

28311h 15m ago

discover

leebaird/discover

Custom Bash and Python scripts used to automate various penetration testing tasks including recon, scanning, enumeration, and malicious payload…

osintreconnaissancevulnerability-scanners+9

3.9k12h 55m ago

kyverno

kyverno/kyverno

Enforce security and compliance on Kubernetes clusters via admission controls, resource mutation, background scans, and container image signature…

cloud-infrastructure-securitycontainer-securityconfiguration-auditing+4

8.3k13h 33m ago

minimal

rtvkiz/minimal

Minimal CVE Hardened container image collection

vulnerability-scannerscontainer-securityconfiguration-auditing+3

51314h 35m ago

zeroboot

zerobootdev/zeroboot

Sub-millisecond VM sandboxes for AI agents via copy-on-write forking

container-securitydynamic-analysis-sandboxingsecurity-virtualization+3

2.4k19h 56m ago

node9-proxy

node9-ai/node9-proxy

Access control for AI agents. Set what Claude Code, Codex, Gemini, Cursor and any MCP server are allowed to do, review risky actions before they run,…

vulnerability-scannerscontainer-securitycloud-security+7

21020h 18m ago

Previous12…24 Next