Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

86 results

prowler

prowler-cloud/prowler

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.…

cloud-infrastructure-securitycloud-securityconfiguration-auditing+10

14.7k

44 minutes ago

kyverno

kyverno/kyverno

Enforce security and compliance on Kubernetes clusters via admission controls, resource mutation, background scans, and container image signature…

cloud-infrastructure-securitycloud-securityconfiguration-auditing+4

8.1k3h 17m ago

HoneyWire

andreicscs/honeywire

Open-source deception platform that turns any Linux machine into a high-signal canary. Deploy tripwire sensors on files, ports, and network services…

container-securitydevsecopsincident-response+3

10310h 56m ago

minder

mindersec/minder

Software Supply Chain Security Platform

cloud-securityconfiguration-auditingdevsecops+3

41711h 23m ago

stackrox

stackrox/stackrox

The StackRox Kubernetes Security Platform performs a risk analysis of the container environment, delivers visibility and runtime alerts, and provides…

anomaly-detectioncloud-infrastructure-securitycloud-security+6

1.3k13h 3m ago

akto

akto-api-security/akto

Open-source API security platform for continuous API discovery, vulnerability testing, and runtime threat detection. Integrates with CI/CD pipelines…

api-securityapi-security-testingdevsecops+2

1.5k14h 35m ago

firezone

firezone/firezone

Enterprise-ready zero-trust access platform built on WireGuard®.

authentication-authorizationcloud-securitydevsecops+1

9.0k15h 9m ago

kubescape

kubescape/kubescape

Open-source Kubernetes security platform scanning clusters, manifests, and images for misconfigurations, vulnerabilities, and compliance against NSA,…

cloud-infrastructure-securitycloud-securityconfiguration-auditing+6

11.7k15h 56m ago

infisical

infisical/infisical

Infisical is the open-source platform for secrets, certificates, and privileged access management.

authentication-authorizationcloud-securityconfiguration-auditing+4

29.0k16h 31m ago

testkube

kubeshop/testkube

☸️ The Open Testing Platform for AI-Driven Engineering Teams

ai-securitycloud-securitycontainer-security+2

1.6k18h 50m ago

globalping-probe

jsdelivr/globalping-probe

The globalping probe code that runs on your hardware and connects to the global community network of probes

cloud-securitydevsecopsdns-analysis+3

20919h 26m ago

dependency-track

dependencytrack/dependency-track

Intelligent Component Analysis platform that leverages SBOMs to identify and reduce software supply chain risk through continuous vulnerability…

devsecopssupply-chain-securityvulnerability-analysis

4.1k19h 28m ago

aerleon

aerleon/aerleon

Generate firewall ACLs for Cisco, Juniper, Palo Alto, and more from a single YAML policy language via CLI or Python API.

configuration-auditingdevsecopsnetwork-security+1

2611 day ago

litmus

litmuschaos/litmus

Cloud-native chaos engineering platform for Kubernetes with fault injection, workflow orchestration, and steady-state validation to surface system…

chaos-engineeringcloud-infrastructure-securitycloud-security+1

5.6k1 day ago

cloudquery

cloudquery/cloudquery

Data pipelines for cloud config and security data. Build cloud asset inventory, CSPM, FinOps, and vulnerability management solutions. Extract from…

cloud-infrastructure-securitycloud-securityconfiguration-auditing+2

6.5k2 days ago

semgrep

semgrep/semgrep

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

api-securityapi-security-testingcode-analysis+9

16.4k2 days ago

probo

getprobo/probo

Open source solutions for SOC2, GDPR, and ISO27001

cloud-securitydefensive-toolsdevsecops+3

1.3k3 days ago

sonarqube

sonarsource/sonarqube

Code-quality and static-analysis platform with quality gates, multi-language scanning, and security-focused rules to detect vulnerabilities and…

code-analysisdevsecopsstatic-analysis+2

10.9k4 days ago

Previous12 3 4 5 Next