Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
706 results
agent-trace-detector-eval preview

agent-trace-detector-eval

GitHubmahmoud-abbasi-svg/agent-trace-detector-eval

Code, derived data and results for: Evaluating Baseline Detectors of Hijacked LLM Agents Under Rare Attacks and Distribution Shift

ai-securityanomaly-detectioneducation+3
3 days ago
MCPTrace preview

MCPTrace

GitHubkowntaewook/mcptrace

Volatility 3 plugin that carves MCP/JSON-RPC message candidates from Windows and Linux memory dumps, preserving raw bytes, addresses, and SHA-256 for…

ai-securitydigital-forensicsforensics+5
76 days ago
LogsTotal preview

LogsTotal

GitHubwagga40/logstotal

Self-hosted multi-engine Sigma detection for event logs

defensive-toolsdigital-forensicsincident-response+5
91 day ago
netward-standalone preview

netward-standalone

GitHubdragon-lady/netward-standalone

User-space bot and DDoS deflection for small HTTP services

anomaly-detectionanti-botdefensive-tools+6
9 days ago
weblogchecker preview

weblogchecker

GitHubphpatch/weblogchecker

Free access-log compromise analyzer: webshell interactions, exploitation patterns and brute-force bursts in your Apache/nginx logs - severity,…

defensive-toolsforensicsincident-response+6
3 days ago
Hodometer preview

Hodometer

GitHubgary23w/hodometer

A single-file native Windows tray application (C, Win32, no runtime) that shows exactly which program is sending and receiving bytes and to which…

defensive-toolsdns-analysisforensics+5
13 days ago
fengarde preview

fengarde

GitHubsupermhel/fengarde

Open-source, self-hosted security pipeline for IT, AI and OT. Logs in. Evidence out.: OCSF normalization, 46 detection rules…

ai-securitydefensive-toolsincident-response+4
154 days ago
Check-Risk-WAF preview

Check-Risk-WAF

GitHubcheck-risk-waf/check-risk-waf

Reverse-proxy web application firewall with WAF, anti-bot and anti-DDoS protection at L3/L4/L7, custom rules, rate limiting, geo/IP filtering and…

ai-securityanomaly-detectionanti-bot+7
1.6k18 days ago
get-the-hacker preview

get-the-hacker

GitHubbuybitart/get-the-hacker

Hunt WiFi threats silently. Catch the hackers.

defensive-toolsincident-responseintrusion-detection+5
6 days ago
VigilantOnion preview

VigilantOnion

GitHubandreyglauzer/vigilantonion

🐍 - Crawler on tor network sites, searching for keywords.

crawlerinformation-gatheringlog-analysis+4
1793 years ago
network-attack-simulator preview

network-attack-simulator

GitHublhiebert01/network-attack-simulator

Streamlit educational dashboard that simulates port scanning, DoS, brute force and data exfiltration attacks, with visualizations, attack logs and…

educationlabs-practicelog-analysis+2
1 year ago
Mobile-Intrusion-Detection-System preview

Mobile-Intrusion-Detection-System

GitLabyashubitra/mobile-intrusion-detection-system

Unsupervised deep autoencoder that flags anomalous mobile traffic: 25,000+ HTTP/HTTPS flows intercepted from a live iOS device with mitmproxy,…

anomaly-detectiondefensive-toolsintrusion-detection+5
1 year ago
dshield preview

dshield

GitHubdshield-isc/dshield

Installs and configures a DShield honeypot sensor on Raspberry Pi or Ubuntu, running Cowrie SSH and HTTP honeypots and forwarding firewall logs to…

defensive-toolsincident-responseinformation-gathering+5
53728 days ago
OpcUaTrap preview

OpcUaTrap

GitHub0xajstrike/opcuatrap

High-interaction OPC UA honeypot for ICS/SCADA — multi-profile (oil & gas, water, power grid), live process simulation, per-session threat scoring,…

defensive-toolsincident-responseinformation-gathering+5
224 days ago
php2shell-check preview

php2shell-check

GitHubbrentmartinmiller/php2shell-check

Read-only triage script for WordPress sites after PHP2Shell (CVE-2026-109618, CVE-2026-109619). Checks for signs of compromise and writes a report…

configuration-auditingdefensive-toolsdigital-forensics+6
67 days ago
quietos-sentinel preview

quietos-sentinel

GitHubjondean213-pixel/quietos-sentinel

Sentinel — DeanWay Labs' inbound governor. Guards what an AI agent hears: world content is data, never orders. The mirror of QuietOS.

ai-securitydefensive-toolsincident-response+2
110 days ago
Agentic-Evidence preview

Agentic-Evidence

GitHubowasp/agentic-evidence

OWASP reference project for agentic AI security evidence: correlates agent execution, identity, tool calls, and authorization decisions into…

ai-securityanomaly-detectioncurated-resources+6
22 days ago
The-Agents-Epistemic-Baggage preview

The-Agents-Epistemic-Baggage

GitHubowasp/the-agents-epistemic-baggage

An audit-oriented risk model for how agent-generated inferences can change epistemic status, gain operational authority, and influence later…

ai-securityanomaly-detectioncurated-resources+5
12 days ago
Previous12…40Next