Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
121 results
raccoon preview

raccoon

GitHubnccgroup/raccoon

Salesforce object access auditor

cloud-infrastructure-securitycloud-securityconfiguration-auditing+4
118
3 years ago
reportly preview

reportly

GitHubsap8899/reportly

AzureAD/EntraID user activity reporter for blue teams. Input a suspicious user and time frame to receive a detailed report of user info, actions, and…

cloud-securityidentity-access-managementincident-response+2
963 years ago
BridgeHead preview

BridgeHead

GitHubzakipedio/bridgehead

Native C++ access to Active Directory over ADWS, no .NET, no WCF, no HTTP stack.

authentication-authorizationidentity-access-managementinformation-gathering+5
824 months ago
cirro preview

cirro

GitHubbishopfox/cirro

Creating attacks paths across management and data planes

cloud-securityidentity-access-managementinformation-gathering+4
6424 days ago
wardn preview

wardn

GitHubrohansx/wardn

credential isolation for AI agents. Agents never see real API keys - structural guarantee, not policy.

api-securityauthentication-authorizationcloud-security+6
361 month ago
gimmepatz preview

gimmepatz

GitHub6mile/gimmepatz

Personal Access Token (PAT) recon tool for bug bounty hunters, pentesters & red teams

api-securityauthentication-authorizationcloud-security+7
431 year ago
OWASP-Subtractive-Hardening-Top-10 preview

OWASP-Subtractive-Hardening-Top-10

GitHubowasp/owasp-subtractive-hardening-top-10

The OWASP Subtractive Security Top 10 Project is an initiative to identify, document, and promote the highest-impact opportunities for reducing cyber…

ai-securitycloud-securitycontainer-security+6
211 day ago
OutOfTune preview

OutOfTune

GitHubstra-x/outoftune
authentication-authorizationcloud-securityconfiguration-auditing+9
314 months ago
HuntCyberArk preview

HuntCyberArk

GitHublogisek/huntcyberark

CyberArk Security Audit

api-security-testingauthenticationcloud-security+7
256 months ago
SecretsStalker preview

SecretsStalker

GitHubrootsecdev/secretsstalker
authentication-authorizationcloud-infrastructure-securitycloud-security+7
1715 days ago
SFPolDevChk preview

SFPolDevChk

GitHubnccgroup/sfpoldevchk

Salesforce Policy Deviation Checker

cloud-infrastructure-securitycloud-securityconfiguration-auditing+2
305 years ago
ephemera preview

ephemera

GitHubqarait/ephemera

Zero-Trust SSH CA

authentication-authorizationcloud-infrastructure-securityconfiguration-auditing+6
296 months ago
trappsec preview

trappsec

GitHubtrappsec-dev/trappsec

Open-source framework for embedding realistic decoy routes and honey fields into APIs to detect attackers probing business logic, converting…

api-securitydefensive-toolsidentity-access-management+5
122 months ago
kcmapper preview

kcmapper

GitHubsynacktiv/kcmapper

KcMapper is a security auditing tool for Keycloak. It exports your Keycloak configuration (realms, clients, users, roles, etc.) into a Neo4j graph…

authentication-authorizationconfiguration-auditingidentity-access-management+3
146 months ago
Le Panthéon de la Souveraineté preview

Le Panthéon de la Souveraineté

GitLabschroeder-sys/pantheon-souverainete

Infrastructure cloud modulaire, redondante et 100% souveraine pour s'affranchir des GAFAM. Guides techniques, architecture Zero-Trust et chiffrement…

cloud-infrastructure-securitycloud-securityconfiguration-auditing+8
17 days ago
Nimbus Vestige preview

Nimbus Vestige

GitLabdobybaxter127/nimbus-vestige

A forensic reconstruction engine for cloud and identity incident response.

cloud-securitydigital-forensicseducation+6
212 days ago
domestic-system preview

domestic-system

GitHubcartosys/domestic-system

Using @charmbracelet to create an Ethereum browser with style

authenticationcryptographyencryption-decryption-tools+3
11 month ago
Azure preview

Azure

GitHuboffsecpierogi/azure
cloud-infrastructure-securitycloud-securityconfiguration-auditing+8
124 days ago
Previous1234567Next