Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
1061 results
penthera preview

penthera

GitHubdanoszz/penthera

Offline cyber security agent for your apps and AI coding tools. Open R&D: measured in public, improved every release.

ai-securitycode-analysisconfiguration-auditing+7
78
1 day ago
push-guard preview

push-guard

GitHubdragon-lady/push-guard

Local Git pre-push hook and filesystem scanner that detects likely secret leaks, redacts matched values, and blocks pushes without telemetry or…

configuration-auditingdefensive-toolsdevsecops+4
9 days ago
work1-secure-api preview

work1-secure-api

GitHubght657/work1-secure-api

HDU IS Work 1 - Secure REST API (Flask) with CI/CD (pytest + bandit + pip-audit) and CVE-2018-17246 analysis

api-securityauthentication-authorizationdevsecops+7
5 days ago
CVE-2026-0303 preview

CVE-2026-0303

GitHubpiecar21/cve-2026-0303

Proof-of-concept and Docker lab for CVE-2026-0303, demonstrating arbitrary code execution in Checkov via an auto-loaded .checkov.yml pointing to an…

code-analysisdevsecopseducation+4
6 days ago
TWAPT preview

TWAPT

GitHubmoisestapia/twapt

Deploy your own lab of web application penetration testing with docker and docker-compose, webgoat, dvwap, bwapp and Juice Shop

container-securitydevsecopseducation+5
755 years ago
advisory-database preview

advisory-database

GitHubgithub/advisory-database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

curated-resourcesdefensive-toolsdevsecops+5
2.5k7 days ago
deepsecrets preview

deepsecrets

GitHubntoskernel/deepsecrets

Offline secrets scanner combining regex rules, lexer-based semantic analysis, and hashed-value matching to detect exposed credentials in code with…

code-analysisdefensive-toolsdevsecops+5
1841 month ago
cvmimage preview

cvmimage

GitHubtinfoilsh/cvmimage

Builds a hermetic, reproducible confidential VM image for secure inference and custom compute on AMD SEV-SNP and Intel TDX, with auditable…

cloud-infrastructure-securitycloud-securitycontainer-security+4
312 days ago
kali-installer preview

kali-installer

GitLabkalilinux/build-scripts/kali-installer

Builds official Kali Linux installer ISO images with simple-cdd and debian-cd, supporting multiple architectures, variants, mirrors, and…

container-securitydevsecopsgeneral-purpose-utilities+4
625 days ago
brotli-cve-check preview

brotli-cve-check

GitHubapaonum/brotli-cve-check

Agent skill + script to scan projects for CVE-2026-111497 (Brotli), rate criticality and suggest fixes

configuration-auditingcontainer-securitydevsecops+6
6 days ago
betterleaks preview

betterleaks

GitHubbetterleaks/betterleaks

Fast, configurable secrets scanner for filesystems, git history, containers, and cloud sources, with Expr-based filtering, credential validation, and…

cloud-securitycode-analysisconfiguration-auditing+6
2.7k2 days ago
opengrep preview

opengrep

GitHubopengrep/opengrep

🔎 Static code analysis engine to find security issues in code.

code-analysisdefensive-toolsdevsecops+7
3.3k2 days ago
cdxgen preview

cdxgen

GitHubcdxgen/cdxgen

Creates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package managers. Integrate…

ai-securitycloud-securityconfiguration-auditing+6
1.1k5h 21m ago
brotli-checker preview

brotli-checker

GitHubtrailofbits/brotli-checker

Claude Code and Codex skill for finding potentially vulnerable Brotli copies and guiding updates for CVE-2026-111497.

ai-securitybinary-analysiscode-analysis+7
665 days ago
ShellSCope preview

ShellSCope

GitHubd0rb/shellscope

Defensive exposure auditor for Plex2Shell and php2shell — find your own before they find you.

configuration-auditingdefensive-toolsdevsecops+7
12 days ago
ShipProof preview

ShipProof

GitLabdivyanshukumar0014/shipproof

Automated SOC 2 change management for GitLab CI.

cloud-securitycode-analysisconfiguration-auditing+6
9 days ago
regextokens preview

regextokens

GitHubodomojuli/regextokens

list of regex patterns for oauth / api tokens with provided source

code-analysiscurated-resourcesdefensive-tools+5
2934 months ago
php-eol-cve-2026-109618-109619 preview

php-eol-cve-2026-109618-109619

GitHubleonlai-tw/php-eol-cve-2026-109618-109619

Unofficial patches for PHP CVE-2026-109618 / CVE-2026-109619 (RCE, CVSS 9.2) on EOL platforms: PHP 7.3 on CentOS/RHEL 7 (Remi), PHP 5.4 on Amazon…

configuration-auditingdefensive-toolsdevsecops+4
111 days ago
Previous12…59Next