Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
208 results
repokid preview

repokid

GitHubnetflix/repokid

AWS Least Privilege for Distributed, High-Velocity Deployment

cloud-infrastructure-securityvulnerability-analysisconfiguration-auditing+3
1.1k
4 years ago
aws-key-disabler preview

aws-key-disabler

GitHubte-papa/aws-key-disabler

A small lambda script that will disable access keys older than a given amount of days.

configuration-auditingcloud-securityidentity-access-management
1535 years ago
PMapper preview

PMapper

GitHubnccgroup/pmapper

A tool for quickly evaluating IAM permissions in AWS.

privilege-escalationvulnerability-analysispenetration-testing+2
1.6k4 years ago
BadZure preview

BadZure

GitHubmvelazc0/badzure

BadZure automates the deployment of intentionally misconfigured Entra ID tenants and Azure subscriptions, populating them with diverse entities and…

privilege-escalationctfpenetration-testing+6
51715 days ago
kviklet preview

kviklet

GitHubkviklet/kviklet

Pull Request-like Review/Approval flow for database queries. For compliant but smooth Engineering access to production.

authentication-authorizationcloud-securityidentity-access-management+1
6222 days ago
TeamPass preview

TeamPass

GitHubnilsteampassnet/teampass

Collaborative Passwords Manager

authentication-authorizationpassword-crackingencryption-decryption-tools+8
1.8k3 days ago
ad-password-protection preview

ad-password-protection

GitHublithnet/ad-password-protection

Active Directory password filter featuring breached password checking and custom complexity rules

password-crackingconfiguration-auditingidentity-access-management+1
57320 days ago
conjur preview

conjur

GitHubcyberark/conjur

CyberArk Conjur automatically secures secrets used by privileged users and machine identities

authentication-authorizationencryption-decryption-toolscloud-security+3
9421 month ago
Aaia preview

Aaia

GitHubrams3sh/aaia

AWS Identity and Access Management Visualizer and Anomaly Finder

cloud-infrastructure-securityprivilege-escalationreconnaissance+6
2966 months ago
BadBlood preview

BadBlood

GitHubdavidprowe/badblood

BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is…

penetration-testingidentity-access-managementeducation+1
2.3k3 years ago
SkyWrapper preview

SkyWrapper

GitHubcyberark/skywrapper

SkyWrapper helps to discover suspicious creation forms and uses of temporary tokens in AWS

cloud-infrastructure-securitycloud-securitythreat-intelligence+3
1075 years ago
permission-manager preview

permission-manager

GitHubsighupio/permission-manager

Permission Manager is a project that brings sanity to Kubernetes RBAC and Users management, Web UI FTW

authentication-authorizationcloud-infrastructure-securityconfiguration-auditing+2
1.4k3 years ago
ROADtools preview

ROADtools

GitHubdirkjanm/roadtools

A collection of Azure AD/Entra tools for offensive and defensive security purposes

cloud-infrastructure-securityreconnaissanceinformation-gathering+5
2.7k15 days ago
SkyArk preview

SkyArk

GitHubcyberark/skyark

SkyArk helps to discover, assess and secure the most privileged entities in Azure and AWS

privilege-escalationvulnerability-analysisinformation-gathering+3
9101 year ago
rakkess preview

rakkess

GitHubcorneliusweig/rakkess

Review Access - kubectl plugin to show an access matrix for k8s server resources

authentication-authorizationcloud-infrastructure-securityconfiguration-auditing+2
1.4k3 years ago
PurpleCloud preview

PurpleCloud

GitHubiknowjason/purplecloud

A little tool to play with Azure Identity - Azure and Entra ID lab creation tool. Blog: https://medium.com/@iknowjason/sentinel-for-purple-teaming-1…

cloud-infrastructure-securitypenetration-testingcloud-security+4
6511 year ago
vault preview

vault

GitHubhashicorp/vault

A tool for secrets management, encryption as a service, and privileged access management

authentication-authorizationencryption-decryption-toolscloud-security+3
36.1k6h 8m ago
cloudsplaining preview

cloudsplaining

GitHubsalesforce/cloudsplaining

Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized report.

cloud-infrastructure-securityvulnerability-analysisconfiguration-auditing+3
2.2k4 days ago
Previous1…9101112Next