Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

972 results

git-secrets-scan

atlassian/git-secrets-scan

Scans Git repositories for hardcoded secrets, keys, and passwords using Gitleaks, integrating security into Bitbucket Pipelines with Code Insights…

static-code-analysisconfiguration-auditingcloud-security+3

1 year ago

web-threat-mitigation

brunoh6/web-threat-mitigation

Hands-on lab on detecting and mitigating web app threats using OWASP ZAP, Burp Suite, and ModSecurity WAF (with OWASP CRS). Case study: Spring4Shell…

vulnerability-scannersexploitationids-ips-evasion+8

1 year ago

vesta

kvesta/vesta

A static analysis of vulnerabilities, Docker and Kubernetes cluster configuration detect toolkit based on the real penetration of cloud computing

static-analysisvulnerability-scannerscontainer-security+3

2051 year ago

cluster-image-scanner

sda-se/cluster-image-scanner

Discover vulnerabilities and container image misconfiguration in production environments.

vulnerability-scannerscontainer-securitydevsecops+1

561 year ago

XcInspector

swiftdevcollective/xcodeprojectsecurity

A macOS app to scan Xcode project files for possible security issues.

defensive-toolsstatic-analysisvulnerability-scanners+4

91 year ago

DongTai

hxsecurity/dongtai

Open-source Interactive Application Security Testing (IAST) tool that passively instruments Java applications to detect vulnerabilities and…

vulnerability-scannersdynamic-analysis-sandboxingcode-analysis+2

1.3k1 year ago

BlackLotus

ajf8729/blacklotus

BlackLotus aka CVE-2023-24932 Detection/Remediation Scripts for Intune, ConfigMgr, and generic use

vulnerability-analysisconfiguration-auditingcloud-security+3

81 year ago

witcher

mf-labs/witcher

Managing GitHub Advanced Security (GHAS) Controls at Scale

vulnerability-scannerscode-analysisconfiguration-auditing+2

101 year ago

tfsec

aquasecurity/tfsec

Tfsec is now part of Trivy

static-analysisvulnerability-scannerscode-analysis+3

7.0k1 year ago

Vulnerability-Management

cybervixy/vulnerability-management

NGINX Security Hardening & Vulnerability Remediation Analysis of critical CVEs (CVE-2021-23017, HTTP/2 DoS flaws) in outdated NGINX versions, with…

vulnerability-scannersvulnerability-analysisconfiguration-auditing+3

1 year ago

spring-webmvc5

jaloon/spring-webmvc5

Fork spring-webmvc 5.3.39 to fix CVE-2024-38816, CVE-2024-38819

vulnerability-analysiscode-analysisweb-security+2

1 year ago

CentralizedFirewall

adriyansyah-mf/centralizedfirewall

provides a Firewall Manager API designed to centralize and streamline the management of firewall configurations

configuration-auditingnetwork-securitydevsecops+1

101 year ago

Checkmarx-CVE-2025-30066-Detection-Tool

checkmarx/checkmarx-cve-2025-30066-detection-tool

Scans GitHub workflows and logs for indicators of CVE-2025-30066, detecting malicious actions and exposed secrets using Checkmarx 2ms integration.

vulnerability-scannerscode-analysisdevsecops+3

11 year ago

csw-slides-2024

jduck/csw-slides-2024

Slides for Developing Secure Software in 2024 at CanSecWest

devsecopseducationlearning-paths-courses

41 year ago

faraday_burp

infobyte/faraday_burp

Burp Extension for collaboration in Faraday

vulnerability-scannersvulnerability-analysisweb-proxies-interception+3

131 year ago

shhgit

eth0izzle/shhgit

Ah shhgit! Find secrets in your code. Secrets detection for your GitHub, GitLab and Bitbucket repositories.

osintvulnerability-scannerscode-analysis+2

4.0k1 year ago

apicheck

owasp/apicheck

Modular DevSecOps toolset for REST API security testing, designed for developers, sysadmins, and penetration testers to automate security checks…

vulnerability-scannersapi-security-testingweb-security+3

371 year ago

raven

cycodelabs/raven

Scans GitHub Actions CI/CD workflows for security vulnerabilities, indexes findings into a Neo4j graph database, and provides a query library for…

vulnerability-scannerscode-analysisdevsecops+3

7461 year ago

Previous 1…404142…54 Next