Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

1079 results

screenpipe

screenpipe/screenpipe

YC (S26) | Open Computer History | Continuously record your company computer work, map your workflows, help you find work worth automating, and power…

osintscripting-automationinformation-gathering+8

20.9k

3h 21m ago

pocindex

0xmarcio/pocindex

Search public CVE proof-of-concept exploits from GitHub, Nuclei, ExploitDB, Metasploit and Vulhub, with CVSS, EPSS and CISA KEV context.

osintvulnerability-scannersexploit-frameworks+5

1.5k4h 9m ago

SharpCollection

flangvik/sharpcollection

Nightly builds of common C# offensive tools, fresh from their respective master branches built and released in a CDI fashion using Azure DevOps…

privilege-escalationreconnaissancepassword-attacks+6

2.9k4h 25m ago

awesome-game-security

gmh5225/awesome-game-security

Curated index of game security research: anti-cheat internals, DMA attacks, reverse engineering, kernel/mobile protections, and graphics API hooking…

android-securitydefensive-toolsios-security+8

3.6k5h 46m ago

Nest

owasp/nest

Your gateway to OWASP. Discover, engage, and help shape the future!

osintinformation-gatheringeducation+2

4215h 53m ago

nuclei-templates

projectdiscovery/nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

vulnerability-scannersweb-vulnerability-scannersexploit-frameworks+6

12.8k7h 20m ago

HowToHunt

kathanp19/howtohunt

Collection of methodology and test case for various web vulnerabilities.

vulnerability-analysisweb-securitypenetration-testing+4

7.2k8h 8m ago

vulnrichment

cisagov/vulnrichment

A repo to conduct vulnerability enrichment.

defensive-toolsioc-managementthreat-feeds-aggregators+5

8748h 12m ago

privacyguides.org

privacyguides/privacyguides.org

Protect your data against global mass surveillance programs.

privacyeducationcurated-resources

4.3k8h 26m ago

Exploits + Shellcode + GHDB

exploit-database/exploitdb

exploitdb // The official Exploit-Database repository

reconnaissanceexploit-frameworksvulnerability-analysis+7

2529h 13m ago

cvelistV5

cveproject/cvelistv5

CVE cache of the official CVE List in CVE JSON 5 format

vulnerability-analysisinformation-gatheringthreat-intelligence+3

2.9k9h 29m ago

awesome-lists

mthcht/awesome-lists

Curated repository of threat intelligence feeds, IoC lists, YARA rules, and DFIR tool references for SOC/CERT/CTI detection and incident response.

ioc-managementthreat-feeds-aggregatorsdigital-forensics+4

1.9k9h 30m ago

opencti

opencti-platform/opencti

Open Cyber Threat Intelligence Platform

ioc-managementosintthreat-feeds-aggregators+6

9.8k9h 34m ago

awesome-list

0xor0ne/awesome-list

Cybersecurity oriented awesome list

vulnerability-analysisexploitationreverse-engineering+6

3.9k11h 9m ago

hacktricks

hacktricks-wiki/hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

osintpassword-crackingprivilege-escalation+11

12.1k11h 21m ago

bounty-targets-data

arkadiyt/bounty-targets-data

This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for reports

osintreconnaissanceinformation-gathering+1

3.9k11h 24m ago

KingOfBugBountyTips

kingofbugbounty/kingofbugbountytips

Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are…

osintreconnaissancevulnerability-scanners+5

5.5k11h 27m ago

Azure-Sentinel

azure/azure-sentinel

Cloud-native SIEM for intelligent security analytics for your entire enterprise.

defensive-toolscloud-securitythreat-intelligence+5

6.1k11h 41m ago

Previous12…60 Next