Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
39 results
osv-scanner preview

osv-scanner

GitHubgoogle/osv-scanner

Vulnerability scanner written in Go which uses the data provided by https://osv.dev

code-analysiscontainer-securitydevsecops+4
11.0k
1 day ago
noseyparker preview
Archived

noseyparker

GitHubpraetorian-inc/noseyparker

Nosey Parker is a command-line tool that finds secrets and sensitive information in textual data and Git history.

code-analysisdevsecopsinformation-gathering+3
2.3k6 months ago
MCPwnfluence preview

MCPwnfluence

GitHubplutosecurity/mcpwnfluence

Information about CVE-2026-27825 & CVE-2026-27826 discovered by Pluto Security and a bash script for identifying vulnerable mcp-atlassian instances…

configuration-auditingdevsecopseducation+3
76 months ago
faraday preview

faraday

GitHubinfobyte/faraday

Open Source Vulnerability Management Platform

api-securitydevsecopspenetration-testing+1
6.7k2 days ago
git-secrets preview

git-secrets

GitHubawslabs/git-secrets

Prevents you from committing secrets and credentials into git repositories

code-analysisconfiguration-auditingdevsecops+1
13.4k11 months ago
awesome-cybersecurity-blueteam preview

awesome-cybersecurity-blueteam

GitHubfabacab/awesome-cybersecurity-blueteam

💻🛡️ A curated collection of awesome resources, tools, and other shiny things for cybersecurity blue teams.

cloud-securitycontainer-securitycurated-resources+8
5.5k2 years ago
vuln-list-update preview

vuln-list-update

GitHubaquasecurity/vuln-list-update

Automated vulnerability data aggregator that collects advisories from NVD, OSV, Alpine, Red Hat, and 20+ other sources into a unified parsable format…

cloud-securitydevsecopsioc-management+2
1985 days ago
tarian preview

tarian

GitHubkube-tarian/tarian

eBPF-based runtime security agent for Kubernetes that detects unknown processes and file changes, enforces pre-registered constraints, and automates…

cloud-securitycontainer-securitydevsecops+3
582 years ago
hoppr-cop preview

hoppr-cop

GitLabhoppr/hoppr-cop

Aggregates vulnerability data from multiple databases into CycloneDX SBOMs, generating deduplicated VEX, HTML, and GitLab-compatible reports for…

devsecopssupply-chain-securityvulnerability-analysis+1
81 month ago
pulsar-docker-images-patch-CVE-2021-44228 preview

pulsar-docker-images-patch-CVE-2021-44228

GitHublhotari/pulsar-docker-images-patch-cve-2021-44228

Patch Pulsar Docker images with Log4J 2.17.1 update to mitigate Apache Log4J Security Vulnerabilities including Log4Shell

cloud-securitycontainer-securitydevsecops+3
14 years ago
lblfixer_cve_2023_30839 preview

lblfixer_cve_2023_30839

GitHubdrkbcn/lblfixer_cve_2023_30839

PrestaShop <1.7.8.9 Fix for CVE-2023-30839 and CVE-2023-30545

code-analysisdevsecopsmisconfiguration+2
3 years ago
jenkinsci__script-security-plugin_CVE-2023-24422_1228.vd93135a_2fb_25 preview

jenkinsci__script-security-plugin_CVE-2023-24422_1228.vd93135a_2fb_25

GitHubshoucheng3/jenkinsci__script-security-plugin_cve-2023-24422_1228.vd93135a_2fb_25

Jenkins plugin providing script approval workflows and Groovy sandboxing to enforce secure script execution, with ACL-aware permission checks and…

api-securityauthentication-authorizationcode-analysis+5
6 months ago
anchore-engine preview
Archived

anchore-engine

GitHubanchore/anchore-engine

A service that analyzes docker images and scans for vulnerabilities

cloud-securitycontainer-securitydevsecops+3
1.6k3 years ago
osmedeus preview

osmedeus

GitHubj3ssie/osmedeus

A Modern Orchestration Engine for Security

cloud-securitydevsecopsinformation-gathering+5
6.5k28 days ago
bumblebee preview

bumblebee

GitHubperplexityai/bumblebee

Read-only developer endpoint scanner for on-disk package, extension, and developer-tool metadata, built to check exposure to known software…

devsecopsincident-responseinformation-gathering+3
5.0k29 days ago
git-all-secrets preview

git-all-secrets

GitHubanshumanbh/git-all-secrets

A tool to capture all the git secrets by leveraging multiple open source git searching tools

code-analysisdevsecopsinformation-gathering+1
1.1k7 years ago
shhgit preview

shhgit

GitHubeth0izzle/shhgit

Ah shhgit! Find secrets in your code. Secrets detection for your GitHub, GitLab and Bitbucket repositories.

code-analysisdevsecopsosint+2
4.0k1 year ago
cve-mcp-server preview

cve-mcp-server

GitHubmukul975/cve-mcp-server

Production-grade MCP server giving Claude 27 security intelligence tools across 21 APIs — CVE lookup, EPSS scoring, CISA KEV, MITRE ATT&CK, Shodan,…

api-securitydevsecopsincident-response+6
1.4k2 months ago
Previous123Next