Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

835 results

core

opnsense/core

OPNsense GUI, API and systems backend

web-proxies-interceptionids-ips-evasionconfiguration-auditing+4

4.6k2h 20m ago

stackrox

stackrox/stackrox

The StackRox Kubernetes Security Platform performs a risk analysis of the container environment, delivers visibility and runtime alerts, and provides…

cloud-infrastructure-securityvulnerability-scannerscontainer-security+6

1.3k2h 57m ago

nanoclaw

nanocoai/nanoclaw

A lightweight alternative to OpenClaw that runs in containers for security. Connects to WhatsApp, Telegram, Slack, Discord, Gmail and other messaging…

container-securityscripting-automationcloud-security+4

30.5k3h 53m ago

akto

akto-api-security/akto

Open-source API security platform for continuous API discovery, vulnerability testing, and runtime threat detection. Integrates with CI/CD pipelines…

vulnerability-scannersapi-security-testingweb-security+2

1.5k4h 2m ago

kubescape

kubescape/kubescape

Open-source Kubernetes security platform scanning clusters, manifests, and images for misconfigurations, vulnerabilities, and compliance against NSA,…

vulnerability-scannerscontainer-securitycloud-security+2

11.6k4h 20m ago

tealtiger

agentguard-ai/tealtiger

Powerful protection for AI agents - Open-source security and cost tracking for AI applications

cloud-securitydevsecopsprivacy+8

214h 36m ago

opencode

anomalyco/opencode

The open source coding agent.

general-purpose-utilitiesscripting-automationdevsecops+2

196.1k4h 50m ago

Boucle-framework

bande-a-bonnot/boucle-framework

Autonomous agent framework with structured memory, safety hooks, and loop management. Built by the agent that runs on it.

defensive-toolsprivilege-escalationconfiguration-auditing+3

1205h 1m ago

agent-bom

msaad00/agent-bom

Open security scanner and self-hosted control plane for AI, MCP, and cloud. One evidence model — run scans in your environment, centralize findings,…

vulnerability-scannerscontainer-securitycloud-security+6

295h 27m ago

kin

firelock-ai/kin

The system of record for AI-written software. A persistent graph of entities, relationships, changes, and provenance, so humans and AI agents see…

static-analysiscode-analysisdevsecops+4

446h 22m ago

nixos-config

xddxdd/nixos-config

Lan Tian's NixOS Configuration

cloud-infrastructure-securityconfiguration-auditingnetwork-security+6

1306h 53m ago

osv.dev

google/osv.dev

Open source vulnerability DB and triage service.

vulnerability-scannersvulnerability-analysisdevsecops+2

2.9k7h 10m ago

minder

mindersec/minder

Software Supply Chain Security Platform

vulnerability-scannersconfiguration-auditingcloud-security+3

4137h 28m ago

minimal

rtvkiz/minimal

Minimal CVE Hardened container image collection

vulnerability-scannerscontainer-securityconfiguration-auditing+3

5138h 5m ago

NetAlertX

netalertx/netalertx

Centralized network visibility and continuous asset discovery. Monitor devices, detect change, and stay aware across distributed networks.

network-mappingconfiguration-auditinginformation-gathering+5

6.9k8h 29m ago

cicd-sensor

cicd-sensor/cicd-sensor

eBPF-powered runtime security sensor for CI/CD pipelines. Detects supply-chain attacks, logs process ancestry and file access, and provides forensic…

forensicscloud-securitydevsecops+3

19h 3m ago

promptfoo

promptfoo/promptfoo

Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and…

vulnerability-scannerspenetration-testingdevsecops+3

24.1k9h 23m ago

prismor

prismorsec/prismor

Self-hosted runtime control plane for AI agents. Observe or HITL approve or Block rogue tool calls before it executes: secret leaks, prompt…

defensive-toolscontainer-securitydevsecops+5

2839h 51m ago

Previous12…47 Next