Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
264 results
minder preview

minder

GitHubmindersec/minder

Software Supply Chain Security Platform

cloud-securityconfiguration-auditingdevsecops+3
4191 day ago
clusterfuzzlite preview

clusterfuzzlite

GitHubgoogle/clusterfuzzlite

Continuous fuzzing solution integrated into CI workflows to find vulnerabilities in code changes and batch runs, supporting multiple languages and CI…

devsecopsfuzzingvulnerability-analysis
5356 months ago
yatas preview

yatas

GitHubpadok-team/yatas

:owl::mag_right: A simple tool to audit your AWS/GCP infrastructure for misconfiguration or potential security issues with plugins integration

cloud-infrastructure-securitycloud-securityconfiguration-auditing+3
3433 months ago
glue preview

glue

GitHubowasp/glue

Application Security Automation

code-analysisdevsecopsvulnerability-scanners
5276 years ago
vulners-scanner preview

vulners-scanner

GitHubvidens/vulners-scanner

Vulnerability scanner based on vulners.com audit API

cloud-securityconfiguration-auditingcontainer-security+3
1989 years ago
enject preview

enject

GitHubgreatscott/enject

enject: Hide .env secrets from prAIng eyes: secrets live in local encrypted stores (per project) and are injected directly into apps at runtime,…

authenticationcloud-securitydevsecops+3
5026 months ago
bugsy preview

bugsy

GitHubmobb-dev/bugsy

Automatic security vulnerability remediation for your code.

ai-securitycode-analysisdevsecops+2
686 days ago
nuclei-templates-labs preview

nuclei-templates-labs

GitHubprojectdiscovery/nuclei-templates-labs

Vulnerable environments paired with ready-to-use Nuclei templates for security testing and learning! 🚀

ctfcurated-resourcesdevsecops+8
1341 year ago
autoSource preview

autoSource

GitHubshubhamshubhankar/autosource

Automated static code analysis framework integrated with SonarQube for early vulnerability detection in source code by scanning Git repositories…

code-analysisdevsecopsstatic-code-analysis+1
707 years ago
gosentry preview

gosentry

GitHubtrailofbits/gosentry

Security-oriented Go toolchain, focused on state-of-the-art fuzzing capabilities.

binary-analysiscode-analysisdevsecops+5
1201 day ago
DEFCON-CICD-pipelines-workshop preview

DEFCON-CICD-pipelines-workshop

GitHubwavestone-cdt/defcon-cicd-pipelines-workshop

Hands-on CI/CD pipeline security workshop with Terraform lab, AWS exploitation, Kubernetes escape, and artifact backdooring exercises for offensive…

cloud-securitycontainer-escapecontainer-security+8
933 years ago
cumulus preview

cumulus

GitHubowasp/cumulus

Cumulus. Threat modeling the Clouds.

cloud-securitycurated-resourcesdevsecops+2
2910 months ago
GitSecure preview

GitSecure

GitHubbugbounty-site/gitsecure

Detect exposed API keys on GitHub commits.

code-analysisdevsecopssecret-detection+1
354 years ago
secrets-manager-rs preview

secrets-manager-rs

GitHubfran314/secrets-manager-rs

A command-line tool for securely backing up, restoring, and verifying secrets using interoperable standards like age encryption and coreutils,…

authenticationcloud-securitydata-recovery+3
212 months ago
pisc preview

pisc

GitHubecomtech-oss/pisc

Public OCI-Image (docker image) Security Checker

container-securitydevsecopsmalware-analysis+3
216 months ago
retire.js preview

retire.js

GitHubbekk/retire.js

retire.js has a new home

code-analysisdevsecopsstatic-code-analysis+3
1911 years ago
synaptic-sentinel preview

synaptic-sentinel

GitHubgolab-arch/synaptic-sentinel

The vibe-coding security sentinel. Apache-2.0 agentic security toolkit for AI-assisted projects: 5 deterministic scouts + LLM Brain Layer (BYOK…

ai-securitycode-analysisdevsecops+6
61 month ago
witcher preview

witcher

GitHubmf-labs/witcher

Managing GitHub Advanced Security (GHAS) Controls at Scale

code-analysisconfiguration-auditingdevsecops+2
101 year ago
Previous1…101112…15Next