Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
19 results
falco preview

falco

GitHubfalcosecurity/falco

Real-time cloud-native runtime security agent for Linux that monitors syscalls and container/Kubernetes metadata to detect anomalous behavior and…

anomaly-detectionanti-botchaos-engineering+10
9.3k
22 days ago
ConMachi preview

ConMachi

GitHubnccgroup/conmachi

Container Blackbox Security Auditing Tool: enumerates security configuration from within the target container

cloud-infrastructure-securityconfiguration-auditingcontainer-security+4
1067 years ago
azure-security-auditor preview

azure-security-auditor

GitHubneelkotnis/azure-security-auditor

CLI tool to audit Azure security posture, RBAC, NSGs, storage, identity, and encryption

cloud-infrastructure-securitycloud-securityconfiguration-auditing+5
126 days ago
metlo preview

metlo

GitHubmetlo-labs/metlo

Open-source API security platform that inventories endpoints, detects sensitive data, identifies and blocks malicious traffic in real time, and…

api-securityapi-security-testingdefensive-tools+4
1.8k1 year ago
PingCastleCloud preview
Archived

PingCastleCloud

GitHubnetwrix/pingcastlecloud

Azure AD security assessment tool that evaluates tenant configuration and identity risk, scoring findings through a maturity framework to prioritize…

authentication-authorizationcloud-infrastructure-securitycloud-security+4
1543 years ago
IMDSpoof preview

IMDSpoof

GitHubgrahamhelton/imdspoof

Spoofs the AWS IMDS endpoint to serve honey tokens, tricking attackers into using fake credentials that trigger alerts for blue-team detection in…

cloud-securitydefensive-toolsincident-response
1062 years ago
sysmon-parser preview

sysmon-parser

GitHubolafhartong/sysmon-parser

Generates and maintains Azure Sentinel parser for Sysmon events, normalizing all Windows endpoint telemetry into a searchable log schema via…

cloud-securitydefensive-toolslog-analysis+1
187 months ago
mcp-doorman preview

mcp-doorman

GitHubsushank05/mcp-doorman

Proxy that guards MCP servers by screening tool calls for prompt injection, redacting secrets, enforcing policies, and detecting tool definition…

ai-securityapi-securitydefensive-tools+5
12 days ago
CloudGrappler preview

CloudGrappler

GitHubpermiso-io-tools/cloudgrappler

Query high-fidelity cloud detections for known threat actors across AWS, Azure, and GCP using CloudTrail logs and custom threat intelligence rules.

cloud-securitydefensive-toolsincident-response+2
2679 months ago
KubeArmor preview

KubeArmor

GitHubkubearmor/kubearmor

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF,…

cloud-securitycontainer-securitydefensive-tools
2.6k4 days ago
gibson preview

gibson

GitLabhackinglz/gibson

Network monitoring tool that maps process-to-network connections, identifies cloud providers, and detects beaconing activity

anomaly-detectioncloud-securitydefensive-tools+6
6 months ago
opennhp preview

opennhp

GitHubopennhp/opennhp

A lightweight, cryptography-powered, open-source toolkit built to enforce Zero Trust security for infrastructure, applications, and data in the…

authentication-authorizationcloud-securitycryptography+3
13.9k17h 48m ago
ScubaGear preview

ScubaGear

GitHubcisagov/scubagear

Automation to assess the state of your M365 tenant against CISA's baselines

cloud-securityconfiguration-auditingdefensive-tools+3
2.6k4 days ago
threat-dragon preview

threat-dragon

GitHubowasp/threat-dragon

An open source threat modeling tool from OWASP

api-securitycloud-securitydefensive-tools+5
1.6k6 days ago
untitledgoosetool preview

untitledgoosetool

GitHubcisagov/untitledgoosetool

Cloud incident response and threat hunting tool that exports Azure, Entra ID, M365, and Defender telemetry for post-incident investigation and log…

cloud-securitydefensive-toolsdigital-forensics+4
9626 months ago
SharePointDumper preview

SharePointDumper

GitHubzh54321/sharepointdumper

PowerShell tool for enumerating and extracting files from SharePoint sites via Microsoft Graph. Generates detailed HTTP request logs for SIEM…

authenticationcloud-securitydata-exfiltration+7
1687 months ago
ClientInspectorV2 preview

ClientInspectorV2

GitHubknudsenmorten/clientinspectorv2

Azure-based client inventory and drift detection tool that collects Windows configuration data (antivirus, patching, Bitlocker) into LogAnalytics for…

cloud-securityconfiguration-auditingdefensive-tools+2
273 years ago
kprotect preview

kprotect

GitHubkhoinp1012/kprotect

Kernel-level security engine using eBPF-LSM to enforce file access policies based on process lineage, protecting sensitive data from supply-chain…

authentication-authorizationcloud-securitydefensive-tools+4
365 months ago
Previous12Next