Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

676 results

o1js-scan

auditinfra-io/o1js-scan

Dependency-free static analyzer for zk circuit soundness bugs in o1js/Mina zkApps and Noir circuits

defensive-toolsstatic-analysisvulnerability-scanners+5

7 days ago

bigint-buffer-js

disley15-collab/bigint-buffer-js

Pure-JS drop-in for [email protected] without the vulnerable native binding (CVE-2025-3194)

defensive-toolsvulnerability-analysiscryptography+2

1 month ago

Responsible-Alliance-Protocol

philippeabraxas-jpg/responsible-alliance-protocol

Safety cannot be a prompt instruction. TBP provides an external execution-layer boundary for autonomous agents, enforcing hard F/I/W invariants via…

authentication-authorizationdefensive-toolsconfiguration-auditing+7

7 days ago

pki-toolbox

youkyi/pki-toolbox

Client-side PKI toolbox that decodes X.509, CSR, chain, CRL, PKCS#7 and PKCS#12 artifacts, views ASN.1, converts formats, and generates self-signed…

defensive-toolsstatic-analysisencryption-decryption-tools+4

66 days ago

noble-curves

paulmillr/noble-curves

Audited & minimal JS implementation of elliptic curve cryptography.

encryption-decryption-toolshash-analysiscryptography+2

9621 month ago

gr-PHYSEC

c2a2-at-florida-atlantic-university/gr-physec

GNU Radio module for physical layer security using deep learning channel fingerprinting, feature quantization, and SHA3-512 key generation from SDR…

encryption-decryption-toolswireless-securitycryptography+2

26 months ago

tamarin-prover

tamarin-prover/tamarin-prover

Symbolic verification tool for security protocols using multiset rewriting and constraint solving to prove secrecy, authentication, and equivalence…

static-analysisvulnerability-analysiscryptography+2

55011 days ago

FORT-validator

nicmx/fort-validator

RPKI Relying Party and RTR server that validates BGP route origin authorizations and serves validated data to routers over the RTR protocol.

defensive-toolsconfiguration-auditingnetwork-security+3

645 days ago

openshield

owasp/openshield

Open source CSPM for Azure - scan for misconfigurations and quantum-unsafe cryptography, map findings to CIS/NIST/ISO27001/SOC2, and fix them with…

vulnerability-scannersconfiguration-auditingcryptography+4

594 days ago

deluded-openssl-3.2.0

gmh5225/deluded-openssl-3.2.0

Robust open-source toolkit implementing TLS, DTLS, and QUIC protocols with a full-strength cryptographic library, command-line tool for key…

general-purpose-utilitiesencryption-decryption-toolsnetwork-security+2

2 years ago

craw

davidc1212/craw

Robust audio watermarking framework embedding binary messages into magnitude spectrograms, with differentiable attack simulation, Q-Former pooling,…

steganographycryptographymachine-learning+1

61 month ago

javascript-obfuscator

javascript-obfuscator/javascript-obfuscator

Obfuscates JavaScript and Node.js code with variable renaming, string encryption, control flow flattening, and anti-debugging to protect source code…

defensive-toolscode-analysisreverse-engineering+3

16.3k15 days ago

LR-WebPKI

nserser/lr-webpki

Reference implementation of LR+ post-quantum authentication over WebPKI CA context, with corpus pipeline, reconstruction, evaluation, and provenance…

cloud-infrastructure-securitycryptographysupply-chain-security+2

1 month ago

qubes-secpack

qubesos/qubes-secpack

Curated repository of Qubes OS security bulletins, canaries, PGP keys, and ISO digests, with authenticated verification via git tags and detached…

cryptographythreat-intelligencesupply-chain-security+2

55411 days ago

ecdsa-private-key-recovery

barnew-st/ecdsa-private-key-recovery

A cryptographic research tool for analyzing signature vulnerabilities

vulnerability-analysisexploitationdigital-forensics+1

2110 months ago

PQCrypto-LWEKE

microsoft/pqcrypto-lweke

C library implementing FrodoKEM, a post-quantum key encapsulation mechanism based on the Learning with Errors problem, with variants for AES and…

encryption-decryption-toolssecurity-virtualizationcryptography

1671 month ago

JObfuscator

pelock/jobfuscator

Obfuscates Java source code to protect against reverse engineering, decompilation, and IP theft. Renames variables/methods, encrypts strings, and…

static-analysiscode-analysisreverse-engineering+1

682 months ago

weakrng-sweep

brendonlee20042004-sys/weakrng-sweep

Weak-RNG stream-sweep research (CVE-2026-71851 class): PRNG schemes x seeds -> BIP39 -> victim set membership

vulnerability-analysiscryptographyeducation+1

1 month ago

Previous 1 234…38 Next

Cryptography — Tools — Page 3 | Kitploit