Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
916 results
kube-score preview

kube-score

GitHubzegl/kube-score

Kubernetes object analysis with recommendations for improved reliability and security. kube-score actively prevents downtime and bugs in your…

cloud-securityconfiguration-auditingcontainer-security+4
3.1k
5 months ago
terragoat preview

terragoat

GitHubbridgecrewio/terragoat

Intentionally vulnerable Terraform infrastructure for learning cloud misconfiguration detection and DevSecOps practices across AWS, Azure, and GCP.

cloud-securitydevsecopseducation+2
1.3k3 years ago
monkey365 preview

monkey365

GitHubsilverhack/monkey365

PowerShell-based security assessment framework for Microsoft 365, Azure, and Entra ID. Scans for misconfigurations, CIS benchmark compliance, and…

cloud-infrastructure-securitycloud-securityconfiguration-auditing+2
1.3k9 days ago
tlsx preview

tlsx

GitHubprojectdiscovery/tlsx

Fast and configurable TLS grabber focused on TLS based data collection.

dns-subdomain-enumerationinformation-gatheringmisconfiguration+2
1.1k6 days ago
CSPBypass preview

CSPBypass

GitHubrenniepak/cspbypass

CSPBypass.com, a tool designed to help ethical hackers bypass restrictive Content Security Policies (CSP) and exploit XSS (Cross-Site Scripting)…

configuration-auditingcurated-resourcesmisconfiguration+4
7093 days ago
terraform-aws-secure-baseline preview

terraform-aws-secure-baseline

GitHubnozaq/terraform-aws-secure-baseline

Terraform module to set up your AWS account with the secure baseline configuration based on CIS Amazon Web Services Foundations and AWS Foundational…

cloud-infrastructure-securitycloud-securityconfiguration-auditing+2
1.2k1 month ago
java-html-sanitizer preview

java-html-sanitizer

GitHubowasp/java-html-sanitizer

Takes third-party HTML and produces HTML that is safe to embed in your web application. Fast and easy to configure.

api-securitycode-analysisdefensive-tools+3
94818h 47m ago
HardeningKitty preview

HardeningKitty

GitHubscipag/hardeningkitty

HardeningKitty - Checks and hardens your Windows configuration

authentication-authorizationconfiguration-auditingdefensive-tools+2
1.8k3 months ago
snuffleupagus preview

snuffleupagus

GitHubjvoisin/snuffleupagus

Security module for php7 and php8 - Killing bugclasses and virtual-patching the rest!

code-analysisdefensive-toolsmisconfiguration+2
8377 days ago
jdwp-shellifier preview

jdwp-shellifier

GitHubioactive/jdwp-shellifier

Exploitation script for exposed Java Debug Wire Protocol (JDWP) services, enabling pentesters to inject Java code and execute arbitrary OS commands…

debuggersexploitationmisconfiguration+1
9179 years ago
VibeSec-Skill preview

VibeSec-Skill

GitHubbehisecc/vibesec-skill

This skill helps Claude write secure code and prevent common vulnerabilities.

ai-securityapi-securityauthentication+8
1.1k8 months ago
clawpatrol preview

clawpatrol

GitHubdenoland/clawpatrol

Wire-level proxy firewall for AI agents that intercepts and gates SQL, Kubernetes, and HTTP traffic using HCL rules, with per-process tunnel…

api-securityapi-security-testingcloud-security+6
9751 month ago
janusec preview

janusec

GitHubjanusec/janusec

Unified application gateway providing reverse proxy, WAF, CC defense, OAuth2 authentication, ACME certificate automation, and GSLB for secure,…

api-securityauthenticationcloud-security+8
1.2k3 months ago
stunner preview

stunner

GitHubfirefart/stunner

Test and exploit STUN/TURN servers for misconfigurations, enabling internal network pivoting via SOCKS proxy, memory leak attacks, and internal port…

exploitationmisconfigurationnetwork-security+3
8574 days ago
power-pwn preview

power-pwn

GitHubmbrg/power-pwn

An offensive/defense security toolset for discovery, recon and ethical assessment of AI Agents

ai-securitycloud-securityinformation-gathering+8
1.2k10 months ago
mongoaudit preview

mongoaudit

GitHubstampery/mongoaudit

🔥 A powerful MongoDB auditing and pentesting tool 🔥

authenticationdatabase-securitymisconfiguration+2
1.3k5 years ago
GPOHound preview

GPOHound

GitHubcogiceo/gpohound

Offensive GPO dumping and analysis tool that leverages and enriches BloodHound data

configuration-auditinginformation-gatheringmisconfiguration+4
4159 days ago
sadcloud preview

sadcloud

GitHubnccgroup/sadcloud

A tool for standing up (and tearing down!) purposefully insecure cloud infrastructure

cloud-infrastructure-securitycloud-securityeducation+3
7845 years ago
Previous1234…51Next