Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

30 results

sctphantom

suominen/sctphantom

Tracking SCTPhantom (CVE-2026-64564), the Linux kernel SCTP ASCONF transport use-after-free

curated-resourcesthreat-intelligencevulnerability-analysis

13 days ago

drawio-threatmodeling

michenriksen/drawio-threatmodeling

Draw.io libraries for threat modeling diagrams

curated-resourcesdefensive-toolsdevsecops+1

8005 years ago

OSINT_Inception-links

c3n7ral051nt4g3ncy/osint_inception-links

Current links from the OSINT Inception start-me project

curated-resourcesdigital-forensicseducation+3

2153 years ago

Ukraine-Cyber-Operations

curated-intel/ukraine-cyber-operations

Curated Intelligence is working with analysts from around the world to provide useful information to organisations in Ukraine looking for additional…

curated-resourcesioc-managementmalware-analysis+3

9343 years ago

awesome-cyber-skills

joe-shenouda/awesome-cyber-skills

A curated list of hacking environments where you can train your cyber skills legally and safely

ctfcurated-resourceseducation+5

4.6k2 years ago

Awesome-CloudSec-Labs

iknowjason/awesome-cloudsec-labs

Awesome free cloud native security learning labs. Includes CTF, self-hosted workshops, guided vulnerability labs, and research labs.

cloud-securitycontainer-securityctf+7

2.2k10 months ago

obsidian-osint-templates

webbreacher/obsidian-osint-templates

These templates are suggestions of how the Obsidian notetaking tool can be used during an OSINT investigation. The example data in those files should…

curated-resourceseducationinformation-gathering+2

8022 months ago

s3-leaks

nagwww/s3-leaks

Curated timeline of AWS S3 bucket misconfigurations, exposed data, and leaked IAM credentials, with incident links for cloud security defenders and…

cloud-infrastructure-securitycloud-securitycurated-resources+2

4575 days ago

pintheft

suominen/pintheft

Tracking PinTheft (CVE-2026-43494, CVE-2026-43502), the RDS zerocopy double-free privilege escalation

curated-resourcesdefensive-toolsthreat-intelligence+1

17 days ago

routerfirmwares

dudux/routerfirmwares

A bunch of routers firmware images. Principally those that are not available and they do need to be extracted via JTAG, UART, desoldering flash or…

curated-resourcesembedded-systems-securityfirmware-analysis+2

11 years ago

mbadanoiu

mbadanoiu/mbadanoiu

Je suis "Mal"

curated-resourceseducationpapers-research+1

1 year ago

CVE-Disclosures

vettrivel007/cve-disclosures

A repository documenting security vulnerabilities discovered in Free and Open Source Software (FOSS) by VETTRIVEL U

curated-resourceseducationexploitation+3

57 months ago

awesome-privacy

pluja/awesome-privacy

Awesome Privacy - A curated list of services and alternatives that respect your privacy because PRIVACY MATTERS.

curated-resourceseducationencryption-decryption-tools+5

19.6k1 month ago

Awesome-Fuzzing

secfigo/awesome-fuzzing

A curated list of fuzzing resources ( Books, courses - free and paid, videos, tools, tutorials and vulnerable applications to practice on ) for…

binary-analysiscurated-resourceseducation+6

5.9k2 years ago

threat-team

google/threat-team

No longer maintained. Please refer to Google Threat Intelligence / Virus Total collections.

curated-resourceseducationioc-management+2

664 months ago

OSINT-Framework

lockfale/osint-framework

Curated framework of free OSINT tools and resources for gathering intelligence from public sources, organized by category with structured metadata…

curated-resourcesdns-subdomain-enumerationeducation+7

12.0k4 months ago

Query-Hub

byteray-labs/query-hub

CQL Hub is an open repository of detection and hunting queries for CrowdStrike NextGen SIEM and Falcon LogScale. All queries stored here are…

curated-resourceseducationlog-analysis+1

761 day ago

cybersecurity-interview-questions

excalibra/cybersecurity-interview-questions

Curated collection of 200+ cybersecurity interview questions and answers covering Red Team, Blue Team, Web Security, Incident Response, and network…

curated-resourceseducationincident-response+4

1326 days ago

Previous12 Next