Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
83 results
kubescape preview

kubescape

GitHubkubescape/kubescape

Open-source Kubernetes security platform scanning clusters, manifests, and images for misconfigurations, vulnerabilities, and compliance against NSA,…

cloud-securitycontainer-securitydevsecops+2
11.7k
14h 38m ago
popeye preview

popeye

GitHubderailed/popeye

👀 A Kubernetes cluster resource sanitizer

cloud-securityconfiguration-auditingcontainer-security+1
6.3k1 year ago
HardeningKitty preview

HardeningKitty

GitHubscipag/hardeningkitty

HardeningKitty - Checks and hardens your Windows configuration

authentication-authorizationconfiguration-auditingdefensive-tools+2
1.8k1 month ago
Locksmith preview

Locksmith

GitHubjakehildreth/locksmith

A small tool built to find and fix common misconfigurations in Active Directory Certificate Services.

configuration-auditingdefensive-toolsmisconfiguration+2
1.6k19 days ago
s3-leaks preview

s3-leaks

GitHubnagwww/s3-leaks

Curated timeline of AWS S3 bucket misconfigurations, exposed data, and leaked IAM credentials, with incident links for cloud security defenders and…

cloud-infrastructure-securitycloud-securitycurated-resources+2
4579h 32m ago
VibeSec-Skill preview

VibeSec-Skill

GitHubbehisecc/vibesec-skill

This skill helps Claude write secure code and prevent common vulnerabilities.

ai-securityapi-securityauthentication+8
1.2k6 months ago
Group3r preview

Group3r

GitHubgroup3r/group3r

Find vulnerabilities in AD Group Policy, but do it better than Grouper2 did.

misconfigurationpenetration-testingred-teaming+1
9391 year ago
eos preview

eos

GitHubsynacktiv/eos

Enemies Of Symfony - Debug mode Symfony looter

information-gatheringmisconfigurationpenetration-testing+3
3601 year ago
wayBackLister preview

wayBackLister

GitHubanmolksachan/waybacklister

A New Approach to Directory Bruteforce with WaybackLister v1.0

information-gatheringmisconfigurationosint+3
2330 years ago
KaiMonkey preview

KaiMonkey

GitHubtenable/kaimonkey

Deliberately vulnerable Terraform infrastructure for learning cloud security misconfigurations and validating IaC scanner detection across AWS and…

cloud-infrastructure-securitycloud-securityeducation+3
1072 years ago
KubeStalk preview

KubeStalk

GitHubredhuntlabs/kubestalk

Black-box Kubernetes attack surface discovery tool that probes for unsecured clusters, exposed dashboards, and misconfigurations using…

cloud-securitycontainer-securityinformation-gathering+3
1801 year ago
Google-api-key-scanner preview

Google-api-key-scanner

GitHubcoffinxp/google-api-key-scanner
api-security-testingcloud-securitymisconfiguration+3
551 month ago
s3reverse preview

s3reverse

GitHubhahwul/s3reverse

The format of various s3 buckets is convert in one format. for bugbounty and security testing.

cloud-securityinformation-gatheringmisconfiguration+1
903 years ago
trivy-enforcer preview

trivy-enforcer

GitHubaquasecurity/trivy-enforcer

[EXPERIMENTAL] Kubernetes Operator for Image Assurance

cloud-securitycontainer-securitydevsecops+3
206 years ago
kube-alien preview

kube-alien

GitHubnixwizard/kube-alien
cloud-securitycontainer-securityexploitation+2
255 years ago
log4fix preview

log4fix

GitHubnanitor/log4fix

Detect and fix log4j log4shell vulnerability (CVE-2021-44228)

code-analysisgeneral-purpose-utilitiesmisconfiguration+3
124 years ago
CVE-2025-9074 preview

CVE-2025-9074

GitHubzenzue/cve-2025-9074
cloud-securitycontainer-escapecontainer-security+6
100 years ago
CVE-2026-11115-Database-Connection-String-Injection-via-Env-Variable preview

CVE-2026-11115-Database-Connection-String-Injection-via-Env-Variable

GitHubgeorge0papasotiriou/cve-2026-11115-database-connection-string-injection-via-env-variable
database-securityeducationexploitation+3
17 days ago
Previous12345Next