Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

212 results

lockc

lockc-project/lockc

Making containers more secure with eBPF and Linux Security Modules (LSM)

cloud-securitycontainer-securitydefensive-tools

2333 years ago

Python-Honeypot

owasp/python-honeypot

OWASP Honeypot, Automated Deception Framework.

api-securitycontainer-securitydefensive-tools+4

4832 years ago

vibebox

robcholz/vibebox

Ultrafast CLI on Apple Silicon macOS for fast, sandboxed development and LLM agents.

ai-securitycontainer-securitydevsecops+3

1908 months ago

azurelinux

microsoft/azurelinux

Hardened, Azure-optimized Linux distribution built from Fedora sources with RPM packaging, supply chain security, and declarative configuration for…

cloud-infrastructure-securitycloud-securityconfiguration-auditing+4

5.4k17h 15m ago

Archived

AgentSmith-HIDS

ebwi11/agentsmith-hids

By Kprobe technology Open Source Host-based Intrusion Detection System(HIDS), from E_Bwill.

container-securitydns-analysisincident-response+4

6005 years ago

kube-knark

chen-keinan/kube-knark

Open Source runtime tool which help to detect malware code execution and run time mis-configuration change on a kubernetes cluster

cloud-securitycontainer-securityintrusion-detection+1

364 years ago

Elkeid

bytedance/elkeid

Elkeid is an open source solution that can meet the security requirements of various workloads such as hosts, containers and K8s, and serverless. It…

cloud-securityconfiguration-auditingcontainer-security+6

2.7k5 months ago

cnspec

mondoohq/cnspec

An open source, cloud-native security to protect everything from build to runtime

cloud-infrastructure-securitycloud-securityconfiguration-auditing+6

44016h 9m ago

sast-scan

shiftleftsecurity/sast-scan

Scan is a free & Open Source DevSecOps tool for performing static analysis based security testing of your applications and its dependencies. CI and…

cloud-securitycode-analysisconfiguration-auditing+6

8833 years ago

Archived

legion

abacus-group-rto/legion

Legion is an open source, easy-to-use, super-extensible and semi-automated network penetration testing tool that aids in discovery, reconnaissance…

container-securityexploitationids-ips-evasion+8

1.1k1 year ago

bunkerweb

bunkerity/bunkerweb

🛡️ Open-source and cloud-native Web Application Firewall (WAF)

anti-botcloud-securitycontainer-security+6

11.1k6 days ago

weave-gitops

weaveworks/weave-gitops

Weave GitOps is transitioning to a community driven project! It provides insights into your application deployments, and makes continuous delivery…

cloud-infrastructure-securitycloud-securityconfiguration-auditing+3

1.1k8 months ago

vuln-scanner

zappaboy/vuln-scanner

Vulnerability Assessment Scanner with Report Generation

api-security-testingcloud-securityconfiguration-auditing+9

1223 days ago

vpod

capsulerun/vpod

Lightweight, secure Linux sandboxes for untrusted processes. Runs in the browser and on the server.

ai-securitycontainer-securitydefensive-tools+3

7629 days ago

bromure

rderaison/bromure

Proper sandboxing for agentic coding and web browsing

ai-securitycontainer-securitydynamic-analysis-sandboxing+6

3024 days ago

CVE-2023-1206-CVE-2025-40040-CVE-2024-49882

spiralbl0ck/cve-2023-1206-cve-2025-40040-cve-2024-49882

3 linux kernel bugs chains to do secure comm app using side channel to establish key and establish covert channe;

binary-exploitationcontainer-escapecontainer-security+3

1210 months ago

Z-Jail

division-36/z-jail

A lightweight, multi-layer Linux sandbox combining namespaces, pivot_root, seccomp-bpf, capability dropping, and an evidence-based verdict engine…

binary-analysiscontainer-securityctf+7

734 days ago

incus-os

lxc/incus-os

Immutable Linux OS image optimized for running Incus containers and virtual machines, with UEFI Secure Boot, TPM 2.0 disk encryption, and automated…

cloud-infrastructure-securityconfiguration-auditingcontainer-security+3

1.2k4h 18m ago

Previous12…12 Next