Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

971 results

ftw

coreruleset/ftw

YAML-driven framework for testing Web Application Firewall (WAF) rules using OWASP Core Rule Set baselines. Automates regression detection and…

vulnerability-scannerswaf-bypassweb-security+2

142

4 years ago

Archived

webhook-cve-2022-0811

spiarh/webhook-cve-2022-0811

Simple webhook to block exploitation of CVE-2022-0811

vulnerability-scannerscontainer-securitycloud-security+3

84 years ago

threat-modeling-playbook

owasp/threat-modeling-playbook

Structured playbook for integrating threat modeling into product security, covering stakeholder buy-in, organizational embedding, training, process…

vulnerability-analysisdevsecopsthreat-intelligence+3

394 years ago

PoshBot

poshbotio/poshbot

Powershell-based bot framework

general-purpose-utilitiesscripting-automationdevsecops

5464 years ago

Archived

opencspm

opencspm/opencspm

Open Cloud Security Posture Management Engine

cloud-infrastructure-securityvulnerability-scannersconfiguration-auditing+5

3474 years ago

Archived

vulnreport

salesforce/vulnreport

Open-source pentesting management and automation platform by Salesforce Product Security

penetration-testing-frameworksvulnerability-analysisweb-security+2

5994 years ago

Archived

gradle-static-analysis-plugin

novoda/gradle-static-analysis-plugin

Easy setup of static analysis tools for Android and Java projects.

android-securitystatic-code-analysiscode-analysis+3

4034 years ago

polkit_CVE-2021-4034

ziadsaleemi/polkit_cve-2021-4034

Ansible role to patch RHSB-2022-001 Polkit Privilege Escalation - (CVE-2021-4034)

cloud-infrastructure-securityvulnerability-analysisconfiguration-auditing+1

4 years ago

PS-CVE-2021-44228

arnaudluti/ps-cve-2021-44228

Static detection of vulnerable log4j librairies on Windows servers, members of an AD domain.

cloud-infrastructure-securityvulnerability-scannersscripting-automation+2

4 years ago

pulsar-docker-images-patch-CVE-2021-44228

lhotari/pulsar-docker-images-patch-cve-2021-44228

Patch Pulsar Docker images with Log4J 2.17.1 update to mitigate Apache Log4J Security Vulnerabilities including Log4Shell

vulnerability-scannerscontainer-securitycloud-security+3

14 years ago

log4j

open-aims/log4j

Patched Log4j 1.2.17 library with the vulnerable JMSAppender class removed to mitigate CVE-2021-4104, intended as a drop-in replacement for affected…

vulnerability-analysisdevsecopssupply-chain-security

4 years ago

log4j-cve-2021-44228

lucab85/log4j-cve-2021-44228

Ansible playbook automating Red Hat's Log4j detector script to scan Linux hosts for CVE-2021-44228 (Log4Shell) vulnerability with GPG verification.

vulnerability-scannersvulnerability-analysisscripting-automation+3

574 years ago

log4j_scanner

dbzoo/log4j_scanner

Filesystem scanner for Log4Shell (CVE-2021-44228) and related CVEs. Detects vulnerable JAR files via hash matching and class presence. Runs…

static-analysisvulnerability-scannersvulnerability-analysis+3

44 years ago

ansible-role-log4shell

lucab85/ansible-role-log4shell

Ansible playbook to verify target Linux hosts using the official Red Hat Log4j detector script RHSB-2021-009 for Log4Shell (CVE-2021-44228).

vulnerability-scannersvulnerability-analysisconfiguration-auditing+2

44 years ago

loguccino

3pplus/loguccino

Scan and patch tool for CVE-2021-44228 and related log4j concerns.

vulnerability-scannersvulnerability-analysisdevsecops+1

4 years ago

rips-scanner

robocoder/rips-scanner

RIPS - A static source code analyser for vulnerabilities in PHP scripts

vulnerability-scannersstatic-code-analysisvulnerability-analysis+2

3234 years ago

Log4J-Mitigation-CVE-2021-44228--CVE-2021-45046--CVE-2021-45105--CVE-2021-44832

thedevappsecguy/log4j-mitigation-cve-2021-44228--cve-2021-45046--cve-2021-45105--cve-2021-44832

Log4J CVE-2021-44228 : Mitigation Cheat Sheet

vulnerability-analysiscloud-securitydevsecops+3

24 years ago

divd-2021-00038--log4j-scanner

dtact/divd-2021-00038--log4j-scanner

Recursive vulnerability scanner for Log4j CVEs in archives and Docker images. Detects JndiLookup.class and vulnerable versions via SHA256 hashes,…

vulnerability-scannerscontainer-securityvulnerability-analysis+3

464 years ago

Previous 1…474849…54 Next