Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

971 results

Archived

domain-protect

domain-protect/domain-protect

OWASP Domain Protect - prevent subdomain takeover

reconnaissancevulnerability-scannersdns-subdomain-enumeration+4

394

1 year ago

magento2-encryption-key-manager-cli

wubinworks/magento2-encryption-key-manager-cli

A utility for Magento 2 encryption key rotation and management. CVE-2024-34102(aka Cosmic Sting) victims can use it as an aftercare.

encryption-decryption-toolsvulnerability-analysisscripting-automation+3

1 year ago

gitlab-watchman

papermtn/gitlab-watchman

Finding exposed secrets and personal data in GitLab

vulnerability-scannerscode-analysisdata-exfiltration+3

2061 year ago

botkube

kubeshop/botkube

An app that helps you monitor your Kubernetes cluster, debug critical deployments & gives recommendations for standard practices

container-securitycloud-securitydevsecops+1

2.3k1 year ago

puppet-os-hardening

dev-sec/puppet-os-hardening

This puppet module provides numerous security-related configurations, providing all-round base protection.

cloud-infrastructure-securityvulnerability-scannersconfiguration-auditing+3

2901 year ago

action-octoscan

synacktiv/action-octoscan

📦 :octocat: A GitHub Action that performs a security scan of your GitHub Actions.

vulnerability-scannersstatic-code-analysiscode-analysis+2

261 year ago

naabu-action

projectdiscovery/naabu-action

A fast port scanner written in go with a focus on reliability and simplicity.

reconnaissancenetwork-mappingport-scanning+3

212 years ago

Archived

kubeclarity

openclarity/kubeclarity

KubeClarity is a tool for detection and management of Software Bill Of Materials (SBOM) and vulnerabilities of container images and filesystems

vulnerability-scannerscontainer-securityvulnerability-analysis+4

452 years ago

archerysec

archerysec/archerysec

ASOC, ASPM, DevSecOps, Vulnerability Management Using ArcherySec.

vulnerability-scannerscode-analysisconfiguration-auditing+5

2.5k2 years ago

bitbucket-iac-scan

atlassian/bitbucket-iac-scan

Scans Infrastructure as Code files for security misconfigurations and vulnerabilities using KICS, with Bitbucket Code Insights reporting.

cloud-infrastructure-securitystatic-analysisvulnerability-scanners+5

2 years ago

nginxconfig.io

digitalocean/nginxconfig.io

⚙️ NGINX config generator on steroids 💉

configuration-auditingweb-securitydevsecops+1

28.3k2 years ago

security-culture

owasp/security-culture

OWASP Security Culture repository

devsecopsthreat-intelligenceeducation+2

52 years ago

legitify

legit-labs/legitify

Detect and remediate misconfigurations and security risks across all your GitHub and GitLab assets

vulnerability-scannersconfiguration-auditingcloud-security+3

8802 years ago

kubebot

anshumanbh/kubebot

A security testing Slackbot built with a Kubernetes backend on the Google Cloud Platform

vulnerability-scannersscripting-automationinformation-gathering+5

1642 years ago

mesh-kridik

chen-keinan/mesh-kridik

Automated security checker for Kubernetes clusters with Istio service mesh, enforcing best practices via OPA policies and generating remediation…

vulnerability-scannerscontainer-securityconfiguration-auditing+3

272 years ago

gh-workflow-auditor

tindersec/gh-workflow-auditor

Script to audit GitHub Action Workflow files for potential vulnerabilities.

static-analysisvulnerability-analysisconfiguration-auditing+2

1522 years ago

Archived

kubeaudit

shopify/kubeaudit

kubeaudit helps you audit your Kubernetes clusters against common security controls

cloud-infrastructure-securityvulnerability-scannerscontainer-security+4

1.9k2 years ago

ssh-baseline

dev-sec/ssh-baseline

DevSec SSH Baseline - InSpec Profile

cloud-infrastructure-securityconfiguration-auditingdevsecops

2952 years ago

Previous 1…414243…54 Next