Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
948 results
SEDATED preview

SEDATED

GitHubowasp/sedated

SEDATED® Project (Sensitive Enterprise Data Analyzer To Eliminate Disclosure)

code-analysisconfiguration-auditingdevsecops+3
111
1 year ago
lowkey preview

lowkey

GitHubinceptionstack/lowkey

Deploy a FullStack Prodo-Typing Agent into your AWS Account (KiroCrew,OpenClaw, Hermes, Claude Code, Codex)

ai-securitycloud-infrastructure-securitycloud-security+7
664 days ago
knocker preview

knocker

GitHubfariszr/knocker

Knocker, a knock based access control service for your homelab

api-securityauthenticationcloud-security+2
13520 days ago
CureIAM preview

CureIAM

GitHubgojek/cureiam

Clean accounts over permissions in GCP infra at scale

cloud-infrastructure-securitycloud-securityconfiguration-auditing+2
723 years ago
vmsan preview

vmsan

GitHubangelorc/vmsan

Firecracker made simple. Spin up secure microVMs in milliseconds, from install to interactive shell in one command.

cloud-infrastructure-securitycontainer-securitydevsecops+3
825 months ago
offensive-docker-vps preview

offensive-docker-vps

GitHubaaaguirrep/offensive-docker-vps

Create a VPS on Google Cloud Platform or Digital Ocean easily with Offensive Docker included to launch assessment to the targets.

cloud-infrastructure-securitydevsecopspenetration-testing+1
835 years ago
csf preview

csf

GitHubarmourbird/csf

ArmourBird CSF - Container Security Framework

api-securitycloud-infrastructure-securityconfiguration-auditing+4
446 years ago
vexhub preview

vexhub

GitHubaquasecurity/vexhub

Aggregates Vulnerability Exploitability eXchange (VEX) documents from open-source projects. Organizes by PURL for automated security tool integration.

devsecopsinformation-gatheringsupply-chain-security+2
395 months ago
apm preview

apm

GitHubaaravmaloo/apm

A local password manager for everyone

authenticationcloud-securitycryptography+7
2912 days ago
intentshield preview

intentshield

GitHubmattijsmoens/intentshield

Pre-execution intent verification for AI agents. Audits what your AI is about to do, not what it says. Zero dependencies, deterministic, hash-sealed.

ai-securityanomaly-detectioncode-analysis+9
207 days ago
FIASSE preview

FIASSE

GitHubowasp/fiasse

A Framework for Integrating Application Security into Software Engineering (FIASSE) using the Securable Software Engineering Model (SSEM)

code-analysiscurated-resourcesdevsecops+7
1413 days ago
rt_redirectors preview

rt_redirectors

GitHubtevora-threat/rt_redirectors

Ansible role to configure redirectors for red team C2

cloud-infrastructure-securitycommand-and-controldevsecops+3
317 years ago
h3-cli preview

h3-cli

GitHubhorizon3ai/h3-cli

CLI tool for the Horizon3.ai API

cloud-securitydevsecopspenetration-testing-frameworks+3
2510 days ago
GitSecure preview

GitSecure

GitHubbugbounty-site/gitsecure

Detect exposed API keys on GitHub commits.

code-analysisdevsecopssecret-detection+1
354 years ago
trivy-enforcer preview

trivy-enforcer

GitHubaquasecurity/trivy-enforcer

[EXPERIMENTAL] Kubernetes Operator for Image Assurance

cloud-securitycontainer-securitydevsecops+3
206 years ago
appsec-agent preview

appsec-agent

GitHubowasp/appsec-agent

A TypeScript package that provides AI-powered agents for Application Security (AppSec) tasks, built on top of the frontier models.

ai-securitycode-analysisdevsecops+5
109 days ago
faraday_burp preview

faraday_burp

GitHubinfobyte/faraday_burp

Burp Extension for collaboration in Faraday

api-security-testingdevsecopspenetration-testing+3
135 months ago
retire.js preview

retire.js

GitHubbekk/retire.js

retire.js has a new home

code-analysisdevsecopsstatic-code-analysis+3
1911 years ago
Previous1…323334…53Next