Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
690 results
vimana-framework preview

vimana-framework

GitHubs4dhulabs/vimana-framework

Vimana is a modular security framework for auditing Python APIs and Web applications. The plugin-based architecture enables security professionals to…

api-securityapi-security-testingcrawler+9
65
1 month ago
vexhub preview

vexhub

GitHubaquasecurity/vexhub

Aggregates Vulnerability Exploitability eXchange (VEX) documents from open-source projects. Organizes by PURL for automated security tool integration.

devsecopsinformation-gatheringsupply-chain-security+2
395 months ago
SecuSphere preview

SecuSphere

GitHubsecurityuniversalorg/secusphere

Centralized DevSecOps platform for vulnerability management, CI/CD security integration, automated security assessment aggregation, and fostering…

devsecopseducationvulnerability-scanners
471 year ago
api-scanner-docker preview

api-scanner-docker

GitHubcspf-founder/api-scanner-docker

Automated API security testing tool that scans REST and SOAP APIs for vulnerabilities using OpenAPI/Swagger specs and WSDL files. Deploys a full …

api-securityapi-security-testingconfiguration-auditing+5
96 months ago
Juice Shop With Kubeadm and Tf preview

Juice Shop With Kubeadm and Tf

GitLabzzugab/juice-shop-with-kubeadm-and-tf

Automated deployment of OWASP Juice Shop on Kubernetes using kubeadm and Terraform, with integrated Trivy vulnerability scanning for DevSecOps…

cloud-infrastructure-securitycontainer-securitydevsecops+1
2 months ago
pythia-sql-clairvoyance preview

pythia-sql-clairvoyance

GitHubrodhnin/pythia-sql-clairvoyance

Advanced SQL Injection Scanner with AI-powered analysis, ethical compliance framework, and professional reporting.

ai-securitycrawlerdevsecops+5
24 months ago
fix_nginx_cve_2026_42945 preview

fix_nginx_cve_2026_42945

GitHubfkj-src/fix_nginx_cve_2026_42945

Automated one-click shell script to detect and patch NGINX CVE-2026-42945 across major Linux distributions, with config backup, version validation,…

configuration-auditingdevsecopsscripting-automation+3
3 months ago
CVE-2025-46295-fix-fms preview

CVE-2025-46295-fix-fms

GitHubsoliantconsulting/cve-2025-46295-fix-fms

Automated script suite to detect and remediate CVE-2025-46295 by replacing vulnerable Apache Commons JARs in FileMaker Server installations with…

configuration-auditingdevsecopsscripting-automation+3
18 months ago
patch-openssl-CVE-2014-0291_CVE-2015-0204 preview

patch-openssl-CVE-2014-0291_CVE-2015-0204

GitHubniccox/patch-openssl-cve-2014-0291_cve-2015-0204

Ansible playbook to patch OpenSSL against CVE-2014-0291 and CVE-2015-0204 on Red Hat family servers, with automated service restart and verification.

cloud-securityconfiguration-auditingdevsecops+2
111 years ago
-CVE-2024-3094-Vulnerability-Checker-Fixer-Public preview

-CVE-2024-3094-Vulnerability-Checker-Fixer-Public

GitHubtitus-soc/-cve-2024-3094-vulnerability-checker-fixer-public

A lightweight utility designed to detect and remediate systems affected by CVE-2024-3094, a critical vulnerability impacting [insert affected…

configuration-auditingdevsecopsincident-response+3
11 months ago
invokeai preview

invokeai

GitHubdannyendortest/invokeai

Synthetic demo target for CVE-2024-10821 vulnerability detection and automated fix via compensating control. Demonstrates one-click PR-based…

devsecopseducationmisconfiguration+3
3 months ago
vuln_test_repo_public_ruby_gemfile_cve-2016-6317 preview

vuln_test_repo_public_ruby_gemfile_cve-2016-6317

GitHubkavgan/vuln_test_repo_public_ruby_gemfile_cve-2016-6317

Detects known vulnerabilities in Ruby Gemfile dependencies by scanning for specific CVEs, enabling automated security checks in development pipelines.

code-analysisdevsecopsstatic-analysis+2
9 years ago
jenkinsci__workflow-multibranch-plugin_CVE-2022-25175_706-vd43c65dec013 preview

jenkinsci__workflow-multibranch-plugin_CVE-2022-25175_706-vd43c65dec013

GitHubshoucheng3/jenkinsci__workflow-multibranch-plugin_cve-2022-25175_706-vd43c65dec013

Exploit for CVE-2022-25175 targeting Jenkins Pipeline: Multibranch plugin, enabling automated exploitation of a specific vulnerability in CI/CD…

code-analysisdevsecopsexploitation+3
10 months ago
bash-cve-2014-7169-cookbook preview

bash-cve-2014-7169-cookbook

GitHubgina-alaska/bash-cve-2014-7169-cookbook

Chef cookbook to detect and patch the Shellshock (CVE-2014-7169) bash vulnerability across servers using automated configuration management.

cloud-securityconfiguration-auditingdevsecops+1
10 years ago
jenkinsci__perfecto-plugin_CVE-2020-2261_1-17 preview

jenkinsci__perfecto-plugin_CVE-2020-2261_1-17

GitHubshoucheng3/jenkinsci__perfecto-plugin_cve-2020-2261_1-17

Jenkins plugin for automated mobile app testing via Perfecto cloud, managing secure tunnel connections and app uploads within CI/CD pipelines.

api-security-testingcloud-securitydevsecops+1
1 year ago
jenkinsci__git-client-plugin_CVE-2019-10392_2-8-4 preview

jenkinsci__git-client-plugin_CVE-2019-10392_2-8-4

GitHubshoucheng3/jenkinsci__git-client-plugin_cve-2019-10392_2-8-4

Jenkins plugin providing Git APIs for automated repository operations including fetch, checkout, merge, and tag, with support for credential-based…

authenticationcode-analysisdevsecops+2
1 year ago
Intel-CVE-2018-3639-Mitigation_RegistryUpdate preview

Intel-CVE-2018-3639-Mitigation_RegistryUpdate

GitHubmalindarathnayake/intel-cve-2018-3639-mitigation_registryupdate

PowerShell script to apply Windows registry mitigation for CVE-2018-3639 (Speculative Store Bypass), enabling automated security hardening against…

cloud-infrastructure-securityconfiguration-auditingdevsecops+2
8 years ago
nxlog-ubuntu-githubactions preview

nxlog-ubuntu-githubactions

GitHubgithubfoam/nxlog-ubuntu-githubactions

CI pipeline for building nxlog-ce on Ubuntu with CVE-2020-35488 vulnerability detection, enabling automated log collection and security auditing in…

cloud-securityconfiguration-auditingdevsecops+3
4 years ago
Previous123…39Next