Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
46 results
azure-security-auditor preview

azure-security-auditor

GitHubneelkotnis/azure-security-auditor

CLI tool to audit Azure security posture, RBAC, NSGs, storage, identity, and encryption

cloud-infrastructure-securitycloud-securityconfiguration-auditing+5
1
22 days ago
ScubaGear preview

ScubaGear

GitHubcisagov/scubagear

Automation to assess the state of your M365 tenant against CISA's baselines

cloud-securityconfiguration-auditingdefensive-tools+3
2.6k10 days ago
swicc preview

swicc

GitHubtomasz-lisowski/swicc

A framework for creating smart cards (ICC-based cards with contacts).

authentication-authorizationembedded-systems-securityhardware-security+2
1423 months ago
FlowAnalyzer preview

FlowAnalyzer

GitHubmanuelberrueta/flowanalyzer

FlowAnalyzer is a tool to help in testing and analyzing OAuth 2.0 Flows, including OpenID Connect (OIDC).

api-securityapi-security-testingauthentication-authorization+5
1822 years ago
EntraPassTheCert preview

EntraPassTheCert

GitHubtemp43487580/entrapassthecert

tool for requesting Entra ID's P2P certificate and authenticating to a remote Entra joinned devices with it

authenticationcloud-securityidentity-access-management+4
1350 years ago
SecretsStalker preview

SecretsStalker

GitHubrootsecdev/secretsstalker
authentication-authorizationcloud-infrastructure-securitycloud-security+7
1715 days ago
awesome-entra preview

awesome-entra

GitHubmerill/awesome-entra

😎 Awesome list of all things related to Microsoft Entra

authentication-authorizationcloud-securityconfiguration-auditing+5
7722 months ago
OpenSC preview

OpenSC

GitHubx41sec/opensc

OpenSC bugfixing

authenticationcryptographyencryption-decryption-tools+2
18 years ago
pam_pkcs11 preview

pam_pkcs11

GitHubx41sec/pam_pkcs11

pam_pkcs11 Bugfix

authenticationauthentication-authorizationcryptography+2
28 years ago
bissap preview

bissap

GitHubsynacktiv/bissap

A new open-source tool to quickly audit SAP permissions.

authentication-authorizationconfiguration-auditingdatabase-security+4
84 months ago
sap_logon_ticket preview

sap_logon_ticket

GitHubsynacktiv/sap_logon_ticket

General toolkit related to SAP's SSO mechanism : the Logon Tickets

authentication-authorizationidentity-access-managementpenetration-testing+1
34 months ago
Shadow-Vault preview

Shadow-Vault

GitHubjenderal92/shadow-vault

Shadow Vault – Add shadow users with SHA-512 hash, auto aging match, multiple write fallbacks.

authentication-authorizationemail-securityidentity-access-management+3
2 months ago
OpenAM preview

OpenAM

GitHubopenidentityplatform/openam

Open-source access management platform offering single sign-on, adaptive authentication, authorization, and federation for secure access to web,…

api-securityauthentication-authorizationcloud-security+3
8859 days ago
carbon-identity-framework preview

carbon-identity-framework

GitHubwso2/carbon-identity-framework
api-securityauthentication-authorizationcloud-security+2
1379h 2m ago
aws-iam-authenticator preview

aws-iam-authenticator

GitHubkubernetes-sigs/aws-iam-authenticator

A tool to use AWS IAM credentials to authenticate to a Kubernetes cluster

authentication-authorizationcloud-infrastructure-securitycloud-security+1
2.3k20 days ago
teleport preview

teleport

GitHubgravitational/teleport

The easiest, and most secure way to access and protect all of your infrastructure.

api-securityauthentication-authorizationcloud-security+7
20.8k7 days ago
gimmepatz preview

gimmepatz

GitHub6mile/gimmepatz

Personal Access Token (PAT) recon tool for bug bounty hunters, pentesters & red teams

api-securityauthentication-authorizationcloud-security+7
431 year ago
CertificateDsc preview

CertificateDsc

GitHubdsccommunity/certificatedsc

DSC resources to simplify administration of certificates on a Windows Server.

authentication-authorizationcloud-infrastructure-securityconfiguration-auditing+3
1257 months ago
Previous123Next