Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

27 results

OpenShell

nvidia/openshell

Sandboxed runtime for autonomous AI agents with declarative YAML policies enforcing filesystem, network, and process constraints, plus endpoint-bound…

ai-securityauthentication-authorizationcloud-security+7

21.0k

13h 37m ago

DFIR-Companion

hasamba/dfir-companion

DFIR forensics companion server + capture extension

ai-securitydefensive-toolsdigital-forensics+9

365 days ago

ActiveScanPlusPlus

albinowax/activescanplusplus

Burp Suite extension that extends active and passive scanning with checks for host header attacks, XXE, expression language injection, shellshock and…

api-security-testingdefensive-toolsexploitation+7

66814 days ago

BurpIA

dragonjar/burpia

Extensión de Burp Suite que incorpora detección pasiva de vulnerabilidades mediante inteligencia artificial.

ai-securityapi-security-testingdefensive-tools+7

231 month ago

privacybadger

efforg/privacybadger

Privacy Badger is a browser extension that automatically learns to block hidden trackers

anti-botdefensive-toolsprivacy

3.8k1 day ago

Archived

https-everywhere

efforg/https-everywhere

A browser extension that encrypts your communications with many websites that offer HTTPS but still allow unencrypted connections.

defensive-toolsencryption-decryption-toolsprivacy+1

3.4k3 years ago

claude-code-backdoor-check

happyhackingspace/claude-code-backdoor-check

Read-only scanner for the backdoored Claude Code 2.1.313 extension (Cursor marketplace, Oct 2026): SSH key, persistence, reverse tunnel. macOS +…

defensive-toolsdigital-forensicsincident-response+4

14 days ago

RedactKit

iqlip/redactkit

https://addons.mozilla.org/addon/redactkit/ A Firefox extension that redacts sensitive words (e.g., names, emails, phone no.) in real-time across…

defensive-toolsprivacy

1 year ago

CVE2026-42926

ikarolaborda/cve2026-42926

Controlled NGINX HTTP/2 frame injection lab for CVE-2026-42926 patch validation and defensive research

configuration-auditingdefensive-toolseducation+3

4 months ago

malicious_extension_sentry

toborrm9/malicious_extension_sentry

Malicious Extension Database

curated-resourcesdefensive-toolseducation+6

1881 day ago

chrome-vuln-scanner

virologi-info/chrome-vuln-scanner

Check for CVE-2026-79266. A use-after-free in the DevTools component allows arbitrary code execution inside the sandbox via a malicious Chrome…

defensive-toolseducationstatic-analysis+2

2 months ago

enhanced-iframe-protection

malwarecube/enhanced-iframe-protection

A lightweight extension to automatically detect and provide verbose warnings for embedded iframe elements in order to protect against…

defensive-toolseducationphishing+1

5110 days ago

PentagridResponseOverview

pentagridsec/pentagridresponseoverview

Response Overview Extension for BurpSuite - Find exotic responses by grouping response bodies

anomaly-detectiondefensive-toolsinformation-gathering+6

119 months ago

behave

mindedsecurity/behave

Behave! A monitoring browser extension for pages acting as "bad boi"

defensive-toolsdns-analysisnetwork-security+3

3486 years ago

pisiguard

mohamed--abdel-maksoud/pisiguard

Browser extension that detects PII and sensitive data in AI chats, masks it with placeholders before sending, and restores originals in replies—all…

ai-securitydefensive-toolsprivacy+1

233 months ago

CVE-2026-20127-Exploit-Extension

anuththara2007-w/cve-2026-20127-exploit-extension

Offline browser extension providing defensive analysis and detection guidance for CVE-2026-20127, with packet visualization, IOC extraction, and…

curated-resourcesdefensive-toolseducation+6

3 months ago

GetBlocked

alex-w-developer/getblocked

Lightweight, local-only MV3 Chrome extension for reducing common third-party web tracking.

curated-resourcesdefensive-toolseducation+2

2321 days ago

CVE-2026-88789

oscerd/cve-2026-88789

Runnable proof-of-concept reproducer for CVE-2026-88789, demonstrating XXE and SSRF in Apache Camel Quarkus camel-quarkus-support-xalan via the XSLT…

defensive-toolseducationexploitation+2

1 month ago

Previous12 Next