Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

56 results

bba

openbba0/bba

Android app-cloning sandbox with a Frida-style CLI that spawns or attaches to cloned apps and injects QuickJS scripts using Gum Interceptor and…

android-securitybinary-analysisdebuggers+7

6 days ago

vmp-lazy-unpack

x86rc/vmp-lazy-unpack

Emulation-based unpacker and import resolver for Windows x86/x64 VMProtect 3.x binaries, using Unicorn to emulate syscalls and rebuild the IAT…

binary-analysisbinary-exploitationdynamic-analysis-sandboxing+4

4065 days ago

MAccConc

googleprojectzero/maccconc

Toolkit for exploring Linux kernel race conditions using KCOV traces: GUI and terminal viewers for concurrent execution and memory access, plus…

binary-analysisdebuggersdynamic-analysis-sandboxing+6

521 month ago

jd

ejfkdev/jd

Go CLI that deobfuscates javascript-obfuscator (obfuscator.io) output and unminifies JavaScript using AST transforms, static decoding, and a goja…

code-analysisdynamic-analysis-sandboxingmalware-analysis+3

32 months ago

SysTrace

tracebyte8/systrace

Linux system-call monitor using ptrace to trace file, process, network, and memory activity, with namespace isolation and machine learning…

anomaly-detectiondynamic-analysis-sandboxingmachine-learning+1

251 month ago

windows-malware-behavioral-analysis

0x0allenace/windows-malware-behavioral-analysis

Behavioral Malware Analysis of a Simulated Multi-Stage Windows Malware Sample using FLARE-VM and REMnux. Evidence-driven DFIR investigation with IOC…

digital-forensicsdynamic-analysis-sandboxingeducation+8

22 months ago

sfuzz

seal9055/sfuzz

High performance fuzzing using riscv to x86 binary translations and modern fuzzing techniques

binary-analysisdynamic-analysis-sandboxingfuzzing+1

1552 years ago

VivisectION

atlas0fd00m/vivisection

Analysis Plugin and Tools for Vivisect

binary-analysisdebuggersdynamic-analysis-sandboxing+2

222 months ago

snapchange

awslabs/snapchange

Lightweight fuzzing of a memory snapshot using KVM

debuggersdynamic-analysis-sandboxingdynamic-code-analysis+3

4722 years ago

ghidralligator

airbus-cyber/ghidralligator

Multi-architecture pcode emulator using Ghidra/Sleigh for AFL++ fuzzing of binaries, firmware, and embedded targets; detects memory-corruption bugs…

binary-analysisdynamic-analysis-sandboxingembedded-systems-security+3

3322 years ago

AMFDSer-ngng

nccgroup/amfdser-ngng

A Burp Extender plugin, that will take deserialized AMF objects and encode them in XML using the Xtream library

api-security-testingdynamic-analysis-sandboxingpenetration-testing+3

2711 years ago

TriforceLinuxSyscallFuzzer

nccgroup/triforcelinuxsyscallfuzzer

A linux system call fuzzer using TriforceAFL

dynamic-analysis-sandboxingfuzzingvulnerability-analysis

1792 years ago

TriforceOpenBSDFuzzer

nccgroup/triforceopenbsdfuzzer

System call fuzzing of OpenBSD amd64 using TriforceAFL (i.e. AFL and QEMU)

dynamic-analysis-sandboxingfuzzingvulnerability-analysis

478 years ago

thats_no_pipe

synacktiv/thats_no_pipe

Windows named pipe hooking toolkit

binary-analysisdebuggersdynamic-analysis-sandboxing+3

467 months ago

vm2

patriksimek/vm2

Isolated JavaScript sandbox for Node.js that runs untrusted code with restricted access to built-in modules and host resources via Proxy-based…

code-analysisdynamic-analysis-sandboxingsecurity-virtualization+1

4.1k1 month ago

bradamsa

ikkisoft/bradamsa

Burp Suite extension to generate Intruder payloads using Radamsa

dynamic-analysis-sandboxingfuzzingpayload-generation+3

919 years ago

AppContainerSandbox

malwaretech/appcontainersandbox

An example sandbox using AppContainer (Windows 8+)

defensive-toolsdynamic-analysis-sandboxingmalware-analysis+1

1447 years ago

Spring-Boot-Tomcat-CVE-2025-24813

n0n-zer0/spring-boot-tomcat-cve-2025-24813

POC for CVE-2025-24813 using Spring-Boot

dynamic-analysis-sandboxingexploitationpayload-development+3

1 year ago

Previous12 3 4 Next