Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

208 results

aws-iam-authenticator

kubernetes-sigs/aws-iam-authenticator

A tool to use AWS IAM credentials to authenticate to a Kubernetes cluster

authentication-authorizationcloud-infrastructure-securitycloud-security+1

2.3k

20 days ago

self-service-password

ltb-project/self-service-password

Web interface to change and reset password in an LDAP directory

identity-managementcryptographyidentity-access-management+1

1.3k27 days ago

teleport

gravitational/teleport

The easiest, and most secure way to access and protect all of your infrastructure.

authentication-authorizationcontainer-securityconfiguration-auditing+7

20.8k7 days ago

boundary

hashicorp/boundary

Boundary enables identity-based access management for dynamic infrastructure.

authentication-authorizationcloud-infrastructure-securitynetwork-security+1

4.1k14 days ago

munge

dun/munge

Authentication service for creating and validating tamper-proof user credentials in HPC cluster environments, with a portable API and no root…

authentication-authorizationidentity-access-managementauthentication

3112 months ago

gimmepatz

6mile/gimmepatz

Personal Access Token (PAT) recon tool for bug bounty hunters, pentesters & red teams

authentication-authorizationreconnaissancedata-exfiltration+7

431 year ago

infisical

infisical/infisical

Infisical is the open-source platform for secrets, certificates, and privileged access management.

authentication-authorizationconfiguration-auditingcryptography+4

28.5k2 days ago

AETHER-PROTOCOL-P

aetherai3/aether-protocol-p

Working implementation: cryptographically verified short-lived identities for AI decision authentication — CVE-2025-59536 (Patent Pending US…

encryption-decryption-toolscryptographyidentity-access-management+3

12 months ago

Nimbus Vestige

dobybaxter127/nimbus-vestige

A forensic reconstruction engine for cloud and identity incident response.

reconnaissancedigital-forensicspenetration-testing+6

212 days ago

UAP-protocol

rajsidwadkar/uap-protocol

A unified, security-first wire protocol for tool access and agent coordination. UAP eliminates CVE-2025-49596 and MCP tool-poisoning vulnerabilities…

authentication-authorizationpenetration-testing-frameworkscontainer-security+8

12 months ago

Azure

offsecpierogi/azure

cloud-infrastructure-securityprivilege-escalationcontainer-security+8

123 days ago

latch-plugin-openVPN-AS

elevenpaths/latch-plugin-openvpn-as

authentication-authorizationnetwork-securitycloud-security+2

111 years ago

ldapserver

projectdiscovery/ldapserver

Package ldapserver implements LDAP Server

authentication-authorizationencryption-decryption-toolsnetwork-security+2

72 years ago

CertificateDsc

dsccommunity/certificatedsc

DSC resources to simplify administration of certificates on a Windows Server.

authentication-authorizationcloud-infrastructure-securityencryption-decryption-tools+3

1257 months ago

remote-control

katsana/remote-control

Grant remote access to user account without sharing credentials

authentication-authorizationweb-securityutilities-frameworks+2

91 year ago

flask-saml2

mx-moth/flask-saml2

Flask library for building SAML Service Providers and Identity Providers

authentication-authorizationencryption-decryption-toolsweb-security+3

703 years ago

macOS-enterprise-privileges

sap/macos-enterprise-privileges

This application gives Mac users in enterprise environments control over the administration of their machines by elevating their access level to…

authentication-authorizationdefensive-toolsprivilege-escalation+2

2.0k9 days ago

CredMaster

knavesec/credmaster

Refactored & improved CredKing password spraying tool, uses FireProx APIs to rotate IP addresses, stay anonymous, and beat throttling

password-crackingreconnaissancepassword-attacks+9

1.3k1 year ago

Previous 1…345…12 Next