Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
993 results
EATGuard preview

EATGuard

GitHubconnormcgarr/eatguard

Implementation of an export address table protection mitigation, like Export Address Filtering (EAF)

binary-exploitationdefensive-toolsshellcode
1143 years ago
vcsa-hardening-tool preview

vcsa-hardening-tool

GitHubmandiant/vcsa-hardening-tool

Automated Zero Trust hardening and forensic auditing for VMware vCenter Server Appliance (VCSA)

authenticationcloud-infrastructure-securityconfiguration-auditing+9
134 months ago
herpaderping preview

herpaderping

GitHubjxy-s/herpaderping

Proof-of-concept tool demonstrating the Process Herpaderping technique to bypass security products by modifying file content on disk after the image…

defensive-toolsexploitationpenetration-testing
1.2k3 years ago
fapro preview

fapro

GitHubfofapro/fapro

Multi-protocol honeypot simulator supporting 50+ network services with deep interaction, TCP/UDP/ICMP logging, JA3 fingerprinting, and virtual…

defensive-toolsfingerprint-spoofinginformation-gathering+3
1.6k1 year ago
NGWAF preview

NGWAF

GitHubfa-pengfei/ngwaf

First iteration of ML based Feedback WAF

anomaly-detectiondefensive-toolseducation+7
603 years ago
GoodHound preview

GoodHound

GitHubidnahacks/goodhound

Uses Sharphound, Bloodhound and Neo4j to produce an actionable list of attack paths for targeted remediation.

defensive-toolspenetration-testingreconnaissance+2
4882 years ago
SentinelOne-ATTACK-Queries preview

SentinelOne-ATTACK-Queries

GitHubkeyboardcrunch/sentinelone-attack-queries

MITRE ATT&CK mapped queries for SentinelOne Deep Visiblity

defensive-toolsintrusion-detectionlog-analysis+1
955 years ago
In0ri preview

In0ri

GitHubj4fsec/in0ri

Website defacement attack detection with deep learning

defensive-toolsmachine-learningvulnerability-scanners+1
641 month ago
zeek-mercury-npf preview

zeek-mercury-npf

GitHubcorelight/zeek-mercury-npf

Zeek plugin generating Mercury NPF fingerprints for TCP, TLS/DTLS, QUIC, HTTP, SSH, OpenVPN, and STUN to support network security monitoring.

defensive-toolsnetwork-securitypacket-sniffing-analysis
27 days ago
osquery preview

osquery

GitHubosquery/osquery

SQL powered operating system instrumentation, monitoring, and analytics.

anomaly-detectiondefensive-toolsemail-security+8
23.5k5 days ago
wazuh preview

wazuh

GitHubwazuh/wazuh

Open-source XDR and SIEM platform for threat detection, log analysis, file integrity monitoring, vulnerability assessment, and compliance management…

anomaly-detectionanti-botcloud-security+12
16.7k15h 15m ago
opennhp preview

opennhp

GitHubopennhp/opennhp

A lightweight, cryptography-powered, open-source toolkit built to enforce Zero Trust security for infrastructure, applications, and data in the…

authentication-authorizationcloud-securitycryptography+3
13.9k7 days ago
prowler preview

prowler

GitHubprowler-cloud/prowler

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.…

cloud-infrastructure-securitycloud-securityconfiguration-auditing+10
14.7k14h 1m ago
ESP32Marauder preview

ESP32Marauder

GitHubjustcallmekoko/esp32marauder

A suite of WiFi/Bluetooth offensive and defensive tools for the ESP32

bluetooth-securitydefensive-toolsembedded-systems-security+6
12.1k0 days ago
DOMPurify preview

DOMPurify

GitHubcure53/dompurify

DOM-only XSS sanitizer for HTML, MathML, and SVG. Fast, configurable, and secure by default. Removes dangerous elements and attributes to prevent…

api-securitycode-analysisdefensive-tools+3
17.3k5 days ago
opensnitch preview

opensnitch

GitHubevilsocket/opensnitch

Interactive GNU/Linux application firewall that filters outbound connections, blocks ads and malware domains, manages system firewall rules via GUI,…

defensive-toolsdns-analysisintrusion-detection+1
14.0k29 days ago
LuLu preview

LuLu

GitHubobjective-see/lulu

Open-source macOS firewall that monitors and controls network connections, blocking unauthorized outbound and inbound traffic with per-application…

defensive-toolsnetwork-security
13.1k19 days ago
MISP preview

MISP

GitHubmisp/misp

Open-source threat intelligence platform for collecting, correlating, and sharing structured cybersecurity indicators, malware analysis, and attack…

curated-resourcesdatabase-securitydefensive-tools+10
6.5k11 days ago
Previous12…56Next