Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

677 results

ChameleonUltra

rfidresearchgroup/chameleonultra

The new generation chameleon based on NRF52840 makes the performance of card emulation more stable. And gave the chameleon the ability to read,…

embedded-systems-securityrfid-nfc-toolswireless-security+4

3.1k

12 days ago

macOS-Security-and-Privacy-Guide

drduh/macos-security-and-privacy-guide

Curated macOS security and privacy guide with practical instructions for threat modeling, disk encryption, firewall configuration, secure…

network-securitywireless-securitycryptography+4

22.6k18 days ago

chipwhisperer

newaetech/chipwhisperer

Open-source hardware security toolchain for power trace capture, side-channel analysis, and glitching/fault-injection attacks on embedded devices and…

embedded-systems-securityiot-securityrfid-nfc-tools+5

1.6k8h 2m ago

rustls

rustls/rustls

Memory-safe TLS library in Rust implementing TLS 1.2 and 1.3 with pluggable crypto providers, client/server modes, and certificate-based…

encryption-decryption-toolsnetwork-securitycryptography+2

7.7k10 days ago

boringssl

google/boringssl

Fork of OpenSSL implementing TLS, cryptographic primitives, and X.509 certificate handling for use in Chrome and Android, with no API/ABI…

encryption-decryption-toolsfuzzingnetwork-security+1

2.3k13 days ago

cryptomator

cryptomator/cryptomator

Cross-platform client-side encryption for cloud storage with AES-256, encrypted filenames, obfuscated folder structure, and transparent virtual drive…

encryption-decryption-toolscryptographycloud-security+1

16.3k3 days ago

freeipa

freeipa/freeipa

Centralizes identity, authentication, and access control for Linux/UNIX environments using LDAP, Kerberos, PKI, DNS, and Active Directory trust.

authentication-authorizationidentity-managementcryptography+2

1.3k10 days ago

securesystemslib

secure-systems-lab/securesystemslib

Cryptographic and general-purpose routines for Secure Systems Lab projects at NYU

cryptographyhardware-securitysupply-chain-security+1

545 days ago

cyclonedx-cli

cyclonedx/cyclonedx-cli

CLI for generating, analyzing, merging, diffing, validating, signing, and converting CycloneDX SBOMs across JSON, XML, Protobuf, CSV, and SPDX…

defensive-toolscryptographydevsecops+2

5492 months ago

rekor

sigstore/rekor

Software Supply Chain Transparency Log

cryptographydevsecopssupply-chain-security

1.2k6 days ago

fulcio

sigstore/fulcio

Certificate authority issuing short-lived code-signing certificates tied to OpenID Connect identities, enabling verifiable software supply chain…

authentication-authorizationcryptographyidentity-access-management+1

89015h 7m ago

professional-services

googlecloudplatform/professional-services

Collection of Google Cloud solution examples and operational utilities for audit log monitoring, DLP de-identification, encryption key management,…

general-purpose-utilitiescryptographycloud-security+5

3.1k13 days ago

bluez

bluez/bluez

Linux Bluetooth protocol stack with daemons, command-line clients, HCI monitor, and support for BR/EDR, LE, Mesh, audio profiles, providing device…

general-purpose-utilitiespacket-sniffing-analysisbluetooth-security+3

1.2k5 days ago

GlacierCTF2023_writeups

losfuzzys/glacierctf2023_writeups

Curated CTF writeup collection for GlacierCTF 2023 covering pwn, rev, web, crypto, and smart contract challenges with solutions and educational…

reverse-engineeringweb-securitycryptography+4

162 years ago

lsPass

leestripp/lspass

Local-first encrypted password manager for logins, notes, and API keys, using a SQLite vault sealed with Argon2id and XChaCha20-Poly1305; no cloud or…

encryption-decryption-toolscryptographyprivacy+1

2 months ago

dyen

cenobyte-vincit/dyen

In-memory Mach-O dylib loader for stock macOS Python; decrypts, maps, and runs payloads without dlopen or writing to disk, with optional encrypted…

payload-generationids-ips-evasionpost-exploitation+4

2 months ago

filekey

rockwellshah/filekey

Offline, open-source web app for passkey-based file encryption and sharing. AES-256-GCM/HPKE, no cloud, no accounts; encrypt to recipients with…

encryption-decryption-toolsdata-recoverycryptography+2

4861 month ago

bitcoin-security

xaxis/bitcoin-security

Educational study of Bitcoin key entropy: weak-RNG wallet enumeration (Milk Sad / CVE-2023-39910 class) vs. the infeasibility of brute-forcing a good…

vulnerability-analysiscryptographyeducation

2 months ago

Previous 1…567…38 Next