Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
109 results
sentrymcp preview

sentrymcp

GitHubzaydmulani09/sentrymcp

A static + runtime security scanner for MCP (Model Context Protocol) servers

ai-securityapi-securitymisconfiguration+3
2 days ago
semgrep-rules preview

semgrep-rules

GitHubelttam/semgrep-rules

Static analysis security rules for vulnerability detection and audit-focused code review across Java, Go, Python, C#, Kotlin, PHP, Kubernetes, and…

cloud-infrastructure-securitycode-analysiscontainer-security+6
24521 days ago
AWS-Key-Hunter preview

AWS-Key-Hunter

GitHubiamlucif3r/aws-key-hunter

[Just for fun] Find exposed AWS keys (VALID KEYS ONLY) on github

cloud-securitycode-analysisinformation-gathering+2
391 year ago
CVE-2025-12135 preview

CVE-2025-12135

GitHubd0n601/cve-2025-12135

WPBookit <= 1.0.6 - Unauthenticated Stored Cross-Site Scripting

authenticationcode-analysismisconfiguration+3
9 months ago
action-octoscan preview

action-octoscan

GitHubsynacktiv/action-octoscan

📦 :octocat: A GitHub Action that performs a security scan of your GitHub Actions.

code-analysisdevsecopsmisconfiguration+2
261 year ago
octoscan preview

octoscan

GitHubsynacktiv/octoscan

Octoscan is a static vulnerability scanner for GitHub action workflows.

code-analysisconfiguration-auditingdevsecops+5
2724 months ago
ngxray preview

ngxray

GitHubcalifio/ngxray

ngxray — nginx config security scanner

code-analysisconfiguration-auditingmisconfiguration+3
242 months ago
abap-code-scanner preview

abap-code-scanner

GitHubowasp/abap-code-scanner

ABAP Code Analyzer

code-analysisdevsecopsmisconfiguration+2
101 month ago
zizmor preview

zizmor

GitHubzizmorcore/zizmor

Static analysis tool for CI/CD systems that detects and fixes security issues in GitHub Actions, Dependabot, and pre-commit configurations, including…

cloud-securitycode-analysisdevsecops+5
6.4k3 days ago
trivy-action preview

trivy-action

GitHubaquasecurity/trivy-action

Runs Trivy as GitHub action to scan your Docker container image for vulnerabilities

cloud-securitycode-analysiscontainer-security+5
1.4k6 days ago
CVE-2026-42533-nginx preview

CVE-2026-42533-nginx

GitHubgagaltotal/cve-2026-42533-nginx

CVE-2026-42533 Nginx

code-analysisconfiguration-auditingmisconfiguration+3
28 days ago
Fix-CVE-2026-60137-CVE-2026-63030-in-wordpress preview

Fix-CVE-2026-60137-CVE-2026-63030-in-wordpress

GitHubmrmtwoj/fix-cve-2026-60137-cve-2026-63030-in-wordpress

CVE-2026-60137Temporary Emergency Mitigation for CVE-2026-60137 & CVE-2026-63030 (wp2shell)

api-securitycode-analysisdefensive-tools+3
1 month ago
CVE-2022-30929 preview

CVE-2022-30929

GitHubnanaao/cve-2022-30929

CVE-2022-30929 POC

code-analysisexploitationmisconfiguration+3
4 years ago
CVE-2021-41078 preview

CVE-2021-41078

GitHubs-index/cve-2021-41078

nameko Arbitrary code execution due to YAML deserialization

code-analysisexploitationmisconfiguration+3
3 years ago
hibernate__hibernate-validator_CVE-2019-10219_6-0-17-Final preview

hibernate__hibernate-validator_CVE-2019-10219_6-0-17-Final

GitHubshoucheng3/hibernate__hibernate-validator_cve-2019-10219_6-0-17-final
api-securitycode-analysismisconfiguration+2
1 year ago
spring-projects__spring-framework_CVE-2022-22965_5-2-19-RELEASE preview

spring-projects__spring-framework_CVE-2022-22965_5-2-19-RELEASE

GitHubshoucheng3/spring-projects__spring-framework_cve-2022-22965_5-2-19-release
code-analysisexploitationmisconfiguration+3
1 year ago
CVE-2025-46078 preview

CVE-2025-46078

GitHubyggcwhat/cve-2025-46078

Vulnerability Description

code-analysisexploitationmisconfiguration+3
1 year ago
CVE-2025-46080 preview

CVE-2025-46080

GitHubyggcwhat/cve-2025-46080

Details

code-analysisexploitationmisconfiguration+3
1 year ago
Previous1234567Next