Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

406 results

malicious_extension_sentry

toborrm9/malicious_extension_sentry

Malicious Extension Database

curated-resourcesdefensive-toolseducation+6

197

8h 17m ago

Spip-Go

honeylabshq/spip-go

Spip network sensor written in Go

defensive-toolsincident-responseinformation-gathering+7

79h 35m ago

uBlock

gorhill/ublock

Wide-spectrum content blocker for browsers that blocks ads, trackers, coin miners, and malicious sites using filter lists and customizable privacy…

defensive-toolsfingerprint-spoofingprivacy+1

67.6k10h 9m ago

DOMPurify

cure53/dompurify

DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of…

api-securitycode-analysisdefensive-tools+3

17.4k12h 20m ago

gvisor

google/gvisor

Sandboxes containers via a userspace application kernel that intercepts system calls, limits host kernel access, and integrates with…

cloud-infrastructure-securitycloud-securitycontainer-escape+4

19.2k12h 21m ago

rspamd

rspamd/rspamd

Spam filtering and email processing framework with regex rules, statistical analysis, custom Lua plugins, and external blocklists for MTA integration.

defensive-toolsemail-securityphishing+1

2.5k13h 6m ago

FIR

certsocietegenerale/fir

Fast Incident Response

defensive-toolsincident-responseioc-management+1

2.0k15h 26m ago

spamassassin

apache/spamassassin

Open-source email filtering framework that detects spam and phishing using content analysis, header checks, Bayesian scoring, and DNS blocklists.

defensive-toolsemail-securitymachine-learning+1

34515h 42m ago

sublime-rules

sublime-security/sublime-rules

Sublime rules for email attack detection, prevention, and threat hunting.

defensive-toolsemail-securityphishing+1

3730 days ago

nzyme

nzymeorg/nzyme

WiFi, Bluetooth and Ethernet Intrusion Detection.

anomaly-detectionbluetooth-securitydefensive-tools+5

1.6k1 day ago

frigate

blakeblackshear/frigate

NVR with realtime local object detection for IP cameras

ai-securitycloud-securitydefensive-tools+2

35.7k1 day ago

CloudSec

eshlomo1/cloudsec

Master the art of cloud exploitation. A specialized resource for offensive security researchers and red teamers focused on weaponizing…

anti-botcloud-securitycontainer-escape+8

301 day ago

BTPS-SecPack

osbornepro/btps-secpack

PowerShell-based security toolkit for small-to-medium enterprises, providing automated alerts, Active Directory hardening, Windows Event Forwarding,…

configuration-auditingdefensive-toolseducation+3

521 day ago

kernel-hardening-checker

a13xp0p0v/kernel-hardening-checker

A tool for checking the security hardening options of the Linux kernel

configuration-auditingdefensive-toolshardware-security+1

2.1k1 day ago

briefr

soldier0x0/briefr

Open Vulnerability Intelligence platform, aggregated intel in one dashboard, with correlation and IOC lookups, completely self hosted. All resources…

defensive-toolsioc-managementthreat-feeds-aggregators+2

31 day ago

Harden-Windows-Security

hotcakex/harden-windows-security

Harden Windows Safely, Securely using Official Supported Microsoft methods and proper explanation | Always up-to-date and works with the latest build…

configuration-auditingdefensive-toolsencryption-decryption-tools+3

4.7k1 day ago

awesome-game-security

gmh5225/awesome-game-security

Curated index of game security research: anti-cheat internals, DMA attacks, reverse engineering, kernel/mobile protections, and graphics API hooking…

android-securitybinary-analysiscurated-resources+8

3.5k2 days ago

BloodHound

specterops/bloodhound

Six Degrees of Domain Admin

defensive-toolsidentity-access-managementinformation-gathering+4

3.4k2 days ago

Previous12…23 Next