Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

106 results

safer-dependencies

robert-auger/safer-dependencies

Automated dependency security layer for AI coding assistants that audits packages for CVEs, typosquats, abandonment, version-age issues, and hash…

devsecopssecret-detectionsupply-chain-security+1

5 days ago

salt-vulnerabilities

chef-cft/salt-vulnerabilities

Checks for CVE-2020-11651 and CVE-2020-11652

cloud-securityconfiguration-auditingdevsecops+2

66 years ago

-CVE-2025-55182

danielxavierjob/-cve-2025-55182

code-analysisdevsecopseducation+3

8 months ago

CVE-2021-44228

axisops/cve-2021-44228

log4j mitigation work

configuration-auditingdevsecopsmisconfiguration+3

4 years ago

shai-scan

digi4care/shai-scan

Zero-dependency CLI scanner for npm/PyPI supply chain compromises. Detects compromised packages in lockfiles and system-level IOCs from attacks like…

code-analysisdevsecopsincident-response+6

3 months ago

database-sentinel

farenhytee/database-sentinel

Claude Skill that audits your projects for RLS misconfigurations, exposed keys, auth bypasses, and storage vulnerabilities. 27 anti-patterns sourced…

ai-securityauthentication-authorizationcloud-security+8

413 months ago

CVE-2024-3094-Vulnerability-Checker-Fixer

gensecaihq/cve-2024-3094-vulnerability-checker-fixer

Shell scripts to identify and fix installations of xz-utils affected by the CVE-2024-3094 vulnerability. Versions 5.6.0 and 5.6.1 of xz-utils are…

cloud-securitydevsecopsmisconfiguration+3

262 years ago

VulnReach

owasp/vulnreach

Runtime-aware SCA — proves which CVEs are actually reachable, not just installed.

code-analysisdevsecopsdynamic-analysis-sandboxing+5

134 days ago

sentinel-cve

kamalsrini/sentinel-cve

CLI tool that explains CVEs in plain English and scans repos for impact. Powered by Claude.

cloud-securitycontainer-securitydevsecops+6

205 months ago

exfil-scan

vikasudasi/exfil-scan

Scan LLM outputs and AI-generated content for data exfiltration signals (EchoLeak, CVE-2025-32711) before they reach users or downstream systems

ai-securityapi-securitydata-exfiltration+2

61 month ago

CVE-2026-22018-Jenkins-Pipeline-Shared-Library-Code-Execution-via-Grab-

george0papasotiriou/cve-2026-22018-jenkins-pipeline-shared-library-code-execution-via-grab-

devsecopsexploitationsupply-chain-security+2

19 days ago

salt-shellshock

apsl/salt-shellshock

Salt recipe for shellshock (CVE-2014-6271)

cloud-securityconfiguration-auditingdevsecops+3

111 years ago

remediate_cesa_2019_2091

hpcprofessional/remediate_cesa_2019_2091

Remediation task for CVE-2018-15686, CVE-2018-16866, and CVE-2018-16888 affecting SystemD in EL7

cloud-infrastructure-securityconfiguration-auditingdevsecops+3

6 years ago

cve-mcp-server

mukul975/cve-mcp-server

Production-grade MCP server giving Claude 27 security intelligence tools across 21 APIs — CVE lookup, EPSS scoring, CISA KEV, MITRE ATT&CK, Shodan,…

api-securitydevsecopsincident-response+6

1.2k2 months ago

medusa

pantheon-security/medusa

AI-first security scanner. NEW in v2026.7: Claude Code compromise detection — vet .claude/ hooks, permissions & skills before you clone — plus an…

ai-securitycloud-securitycode-analysis+8

96313 days ago

cve-lite-cli

owasp/cve-lite-cli

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix,…

code-analysiscurated-resourcesdevsecops+5

6801 day ago

supply-chain-guard

eris-ths/supply-chain-guard

Detect, assess, and respond to supply chain attacks across npm/yarn and Python (pip/poetry/uv). Claude Code skill + standalone scripts. Built during…

devsecopseducationincident-response+6

31 month ago

CVE_ADC_IOC_2026

derekpreston81/cve_adc_ioc_2026

Citrix NetScaler CVE Preconditions Checker as per CTX696604 | Supported CVE : CVE-2026-8451, CVE-2026-8452, CVE-2026-8655, CVE-2026-10816,…

cloud-infrastructure-securityconfiguration-auditingdevsecops+3

21 month ago

Previous12 3 4 5 6 Next