Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
267 results
Nimbus Vestige preview

Nimbus Vestige

GitLabdobybaxter127/nimbus-vestige

A forensic reconstruction engine for cloud and identity incident response.

cloud-securitydigital-forensicseducation+6
2
2 months ago
serverless preview

serverless

GitHubserverless/serverless

CLI framework for deploying and managing serverless applications on AWS Lambda with YAML infrastructure, local development, and multi-language…

authenticationcloud-infrastructure-securitydevsecops+4
46.9k10 days ago
casbin preview

casbin

GitHubapache/casbin

Authorization library enforcing ACL, RBAC, ABAC, and custom access-control models with RESTful matching and policy management APIs for applications…

api-securityauthenticationauthentication-authorization+2
20.4k2 days ago
zitadel preview

zitadel

GitHubzitadel/zitadel

Open-source identity and access management platform providing SSO, MFA, passkeys, OIDC, SAML, SCIM, and multi-tenant access control for developers…

authenticationauthentication-authorizationidentity-access-management+1
15.3k2 days ago
ironclaw preview

ironclaw

GitHubnearai/ironclaw

Secure, private AI agent operating system with local encrypted storage, OAuth/SSO authentication, policy-based access control, and extensible…

ai-securityauthentication-authorizationcloud-security+6
12.6k1 month ago
ROADtools preview

ROADtools

GitHubdirkjanm/roadtools

A collection of Azure AD/Entra tools for offensive and defensive security purposes

authenticationcloud-infrastructure-securitycloud-security+5
2.7k2 months ago
the-bastion preview

the-bastion

GitHubovh/the-bastion

Authentication, authorization, traceability and auditability for SSH accesses.

authentication-authorizationconfiguration-auditingidentity-access-management+4
2.2k12 days ago
AADInternals preview

AADInternals

GitHubgerenios/aadinternals

PowerShell module for administering and auditing Azure AD and Office 365, enabling token manipulation, user enumeration, and security assessments of…

authenticationcloud-securityidentity-access-management+2
1.7k1 year ago
OpenAM preview

OpenAM

GitHubopenidentityplatform/openam

Open-source access management platform offering single sign-on, adaptive authentication, authorization, and federation for secure access to web,…

api-securityauthentication-authorizationcloud-security+3
8977h 34m ago
TokenTacticsV2 preview

TokenTacticsV2

GitHubf-bader/tokentacticsv2

A fork of the great TokenTactics with support for CAE and token endpoint v2

authenticationcloud-securityidentity-access-management+3
46428 days ago
carbon-identity-framework preview

carbon-identity-framework

GitHubwso2/carbon-identity-framework

Core framework for identity and access management, providing authentication, authorization, and identity governance capabilities for enterprise…

api-securityauthentication-authorizationcloud-security+2
1376h 47m ago
munge preview

munge

GitHubdun/munge

Authentication service for creating and validating tamper-proof user credentials in HPC cluster environments, with a portable API and no root…

authenticationauthentication-authorizationidentity-access-management
3173 months ago
dorothy preview

dorothy

GitHubelastic/dorothy

Simulates attacker actions in Okta environments to test monitoring and detection capabilities, with modules mapped to MITRE ATT&CK tactics for red…

defensive-toolseducationidentity-access-management+2
1981 year ago
CVE-2026-94609 preview

CVE-2026-94609

GitHubanthonyk2923/cve-2026-94609

Write-up and proof-of-concept for CVE-2026-94609, an authentik privilege-escalation flaw letting users with add_user_to_group join superuser groups…

api-securityauthentication-authorizationeducation+6
17 days ago
CVE-2021-3754 preview

CVE-2021-3754

GitHub7ragnarok7/cve-2021-3754

Vulnerability details and exploit for CVE-2021-3754

authenticationauthentication-authorizationexploitation+3
11 year ago
SpringSource__spring-security-oauth_CVE-2018-1260_2-3-2-RELEASE preview

SpringSource__spring-security-oauth_CVE-2018-1260_2-3-2-RELEASE

GitHubshoucheng3/springsource__spring-security-oauth_cve-2018-1260_2-3-2-release

OAuth and OAuth2 support library for Spring Security, enabling secure API authentication and authorization for consumer and provider implementations…

api-securityauthentication-authorizationencryption-decryption-tools+3
1 year ago
keycloak__keycloak_CVE-2014-3656_1-0-5-Final preview

keycloak__keycloak_CVE-2014-3656_1-0-5-Final

GitHubshoucheng3/keycloak__keycloak_cve-2014-3656_1-0-5-final

Open-source identity and access management solution providing authentication, user federation, single sign-on, and fine-grained authorization for…

api-securityauthentication-authorizationcloud-security+3
8 months ago
opa preview

opa

GitHubopen-policy-agent/opa

Declarative policy engine that enables authorization and policy enforcement across services, Kubernetes, Terraform, Docker, and APIs using the Rego…

api-securityauthenticationauthentication-authorization+10
12.3k2 days ago
Previous12…15Next