Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
162 results
osv.dev preview

osv.dev

GitHubgoogle/osv.dev

Open source vulnerability DB and triage service.

devsecopssupply-chain-securitythreat-intelligence+2
2.9k4h 9m ago
pyscan preview

pyscan

GitHubohaswin/pyscan

python dependency vulnerability scanner, written in Rust.

code-analysisdevsecopsstatic-analysis+2
2492 months ago
octoscan preview

octoscan

GitHubsynacktiv/octoscan

Octoscan is a static vulnerability scanner for GitHub action workflows.

code-analysisconfiguration-auditingdevsecops+5
2724 months ago
Orbit Tracer preview

Orbit Tracer

GitLabrajus-agent/orbit-tracer

Orbit Tracer Security Agent for intelligent security remediation. Traces vulnerability blast radius using Orbit's knowledge graph, scores risk,…

ai-securitycode-analysisdevsecops+3
1 month ago
VulnWhisperer preview
Archived

VulnWhisperer

GitHubhasecuritysolutions/vulnwhisperer

Create actionable data from your Vulnerability Scans

configuration-auditingdevsecopslog-analysis+3
1.4k3 months ago
dockle preview

dockle

GitHubgoodwithtech/dockle

Container Image Linter for Security, Helping build the Best-Practice Docker Image, Easy to start

configuration-auditingcontainer-securitydevsecops+1
3.3k1 month ago
trivy-action preview

trivy-action

GitHubaquasecurity/trivy-action

Runs Trivy as GitHub action to scan your Docker container image for vulnerabilities

cloud-securitycode-analysiscontainer-security+5
1.4k6 days ago
iac-scan-runner preview

iac-scan-runner

GitHubxlab-si/iac-scan-runner

Service that scans your Infrastructure as Code for common vulnerabilities

api-securitycloud-infrastructure-securityconfiguration-auditing+2
492 years ago
cve-2024-3094 preview

cve-2024-3094

GitHubfelipecosta09/cve-2024-3094

A tutorial on how to detect the CVE 2024-3094

cloud-securitycontainer-securitydevsecops+3
42 years ago
faraday preview

faraday

GitHubinfobyte/faraday

Open Source Vulnerability Management Platform

api-securitydevsecopspenetration-testing+1
6.7k1 day ago
grype preview

grype

GitHubanchore/grype

A vulnerability scanner for container images and filesystems

container-securitydevsecopsstatic-analysis+2
12.8k6 days ago
cve-lite-cli preview

cve-lite-cli

GitHubowasp/cve-lite-cli

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix,…

code-analysiscurated-resourcesdevsecops+5
6759h 25m ago
trivy preview

trivy

GitHubaquasecurity/trivy

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

cloud-securitycode-analysiscontainer-security+5
37.5k1 day ago
openvas-scanner preview

openvas-scanner

GitHubgreenbone/openvas-scanner

This repository contains the scanner component for Greenbone Community Edition.

configuration-auditingcontainer-securitydevsecops+3
4.8k21h 59m ago
bearer preview

bearer

GitHubbearer/bearer

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

code-analysisdevsecopsprivacy+2
2.7k21h 9m ago
reconmap preview

reconmap

GitHubreconmap/reconmap

Reconmap is a collaboration-first security operations platform for infosec teams and MSSPs, enabling end‑to‑end engagement management, from…

ai-securitydevsecopspenetration-testing+2
97318h 4m ago
packj preview

packj

GitHubossillate-inc/packj

Static and dynamic analysis tool that audits open-source packages for malicious, vulnerable, and risky attributes, with sandboxed installation to…

devsecopsdynamic-analysis-sandboxingmalware-analysis+3
6904 months ago
vex8s preview

vex8s

GitHubalegrey91/vex8s

Suppress vulnerabilities applying Kubernetes context to scans

cloud-infrastructure-securitycloud-securityconfiguration-auditing+7
201 month ago
Previous12…9Next