Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

144 results

big-list-of-naughty-strings

minimaxir/big-list-of-naughty-strings

Curated list of malicious and edge-case input strings (blns.txt/blns.json) for QA and security testing of user-input validation, injection, and…

curated-resourceseducationfuzzing+4

47.7k

2 years ago

hashcat-utils

hashcat/hashcat-utils

Small utilities that are useful in advanced password cracking

general-purpose-utilitieshash-analysispassword-attacks+3

1.6k8 days ago

python-certifi

certifi/python-certifi

(Python Distribution) A carefully curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the…

authenticationcryptographygeneral-purpose-utilities+1

1.0k1 day ago

Vanadium

grapheneos/vanadium

Privacy and security hardened Chromium build providing the WebView and default browser for GrapheneOS, with OS-level hardening and compatibility…

android-securitydefensive-toolsgeneral-purpose-utilities+4

2.3k1 day ago

SafeGuard

pingpongplus/safeguard

CLI Encryption tool written in Go only for learning purposes and demonstration of encryption (not secure)

cryptographyeducationencryption-decryption-tools+1

81 month ago

static-arm-bins

therealsaumil/static-arm-bins

Statically compiled ARM binaries for debugging and runtime analysis

binary-analysisdebuggersdynamic-analysis-sandboxing+6

5295 years ago

Kramer

billythegoat356/kramer

The next level 100% Python obfuscator.

anti-botencryption-decryption-toolsgeneral-purpose-utilities+3

1774 years ago

bruno

usebruno/bruno

Opensource IDE For Exploring and Testing API's (lightweight alternative to Postman/Insomnia)

api-securityapi-security-testingdevsecops+3

48.2k8h 7m ago

trippy

fujiapple852/trippy

A network diagnostic tool combining traceroute and ping for analyzing network paths, latency, and packet loss with an interactive terminal UI.

general-purpose-utilitiesinformation-gatheringnetwork-mapping+1

8.1k4 months ago

gods-eye-view

bilawalsidhu/gods-eye-view

A spy satellite simulator in your browser, except the data is real. Live open source spatial intelligence on a photorealistic 3D globe.

general-purpose-utilitiesinformation-gatheringosint+1

62.9k0 days ago

copy-fail-CVE-2026-31431-pythonlower3.10

onedemobird/copy-fail-cve-2026-31431-pythonlower3.10

Python 3.10-compatible implementation of the CVE-2026-31431 exploit, providing a workaround for missing os.splice in older Python versions.

exploitationgeneral-purpose-utilitiesvulnerability-analysis

16 months ago

proxy2

inaz2/proxy2

HTTP/HTTPS proxy in a single python script

general-purpose-utilitiesweb-proxies-interceptionweb-security

5519 years ago

gf

tomnomnom/gf

A wrapper around grep, to help you grep for things

code-analysisdynamic-code-analysisgeneral-purpose-utilities+7

2.1k6 years ago

httptoolkit

httptoolkit/httptoolkit

HTTP Toolkit is a beautiful & open-source tool for debugging, testing and building with HTTP(S) on Windows, Linux & Mac :tada: Open an issue here…

api-security-testinggeneral-purpose-utilitiespenetration-testing+1

3.7k9 months ago

tsfresh

blue-yonder/tsfresh

Automatic extraction of relevant features from time series:

anomaly-detectiongeneral-purpose-utilitiesmachine-learning

9.5k4 months ago

ultralytics

ultralytics/ultralytics

Deep learning framework for object detection, segmentation, classification, pose estimation, and tracking using pre-trained YOLO models and…

captcha-bypassgeneral-purpose-utilitiesmachine-learning+1

63.1k20h 40m ago

professional-services

googlecloudplatform/professional-services

Collection of Google Cloud solution examples and operational utilities for audit log monitoring, DLP de-identification, encryption key management,…

anomaly-detectionchaos-engineeringcloud-security+5

3.1k21h 8m ago

loki

grafana/loki

Horizontally scalable, multi-tenant log aggregation system that indexes labels instead of full text, integrates with Grafana, and is optimized for…

general-purpose-utilitiesincident-responselog-analysis+1

29.1k4h 3m ago

Previous12…8 Next