Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
132 results
gimmepatz preview

gimmepatz

GitHub6mile/gimmepatz

Personal Access Token (PAT) recon tool for bug bounty hunters, pentesters & red teams

api-securityauthentication-authorizationcloud-security+7
43
1 year ago
dbdtct preview

dbdtct

GitHubyousseflahouifi/dbdtct

Python-based scanner that detects debug mode misconfigurations in web applications using multiple HTTP methods and fingerprinting techniques to…

misconfigurationpenetration-testingvulnerability-scanners+1
1 year ago
cve-2022-22976-bcrypt-skips-salt preview

cve-2022-22976-bcrypt-skips-salt

GitHubspring-io/cve-2022-22976-bcrypt-skips-salt

CLI tool to detect and update BCrypt password hashes with vulnerable work factor 31, integrating with Spring Security databases for CVE-2022-xxxx…

authenticationdatabase-securityencryption-decryption-tools+3
14 years ago
yatas preview

yatas

GitHubpadok-team/yatas

:owl::mag_right: A simple tool to audit your AWS/GCP infrastructure for misconfiguration or potential security issues with plugins integration

cloud-infrastructure-securitycloud-securityconfiguration-auditing+3
3433 months ago
azure-security-auditor preview

azure-security-auditor

GitHubneelkotnis/azure-security-auditor

CLI tool to audit Azure security posture, RBAC, NSGs, storage, identity, and encryption

cloud-infrastructure-securitycloud-securityconfiguration-auditing+5
11 month ago
Locksmith preview

Locksmith

GitHubjakehildreth/locksmith

A small tool built to find and fix common misconfigurations in Active Directory Certificate Services.

configuration-auditingdefensive-toolsmisconfiguration+2
1.6k1 month ago
CVE-2024-26144-test preview

CVE-2024-26144-test

GitHubgmo-ierae/cve-2024-26144-test

Test tool for CVE-2024-26144 that checks if web servers and CDNs improperly cache HTTP responses containing Set-Cookie headers, revealing cache…

misconfigurationvulnerability-analysisweb-security
2 years ago
phpinfo-files-leaks preview

phpinfo-files-leaks

GitHubcappricio-securities/phpinfo-files-leaks

This tool is used to find php info page

information-gatheringmisconfigurationpenetration-testing+4
12 years ago
poro preview

poro

GitHub9rnt/poro

Scan publicly accessible assets on your AWS cloud environment

cloud-infrastructure-securitycloud-securitymisconfiguration+1
1363 years ago
CVE-2024-3094-Vulnerability-Checker-Fixer preview

CVE-2024-3094-Vulnerability-Checker-Fixer

GitHubgensecaihq/cve-2024-3094-vulnerability-checker-fixer

Shell script and Ansible playbook to detect and remediate CVE-2024-3094 in xz-utils by checking package versions, upgrading or downgrading to a…

cloud-securitydevsecopsmisconfiguration+3
262 years ago
wp-allowed-hosts preview

wp-allowed-hosts

GitHubalash3al/wp-allowed-hosts

a plugin that protects your wp site from the CVE-2017-8295 vulnerability

authentication-authorizationdefensive-toolsmisconfiguration+2
29 years ago
KubiScan preview

KubiScan

GitHubcyberark/kubiscan

A tool to scan Kubernetes cluster for risky permissions

authentication-authorizationcloud-securityconfiguration-auditing+8
1.4k1 year ago
ingressnightmare-detection-poc preview

ingressnightmare-detection-poc

GitHubm-q-t/ingressnightmare-detection-poc

Proof-of-Concept Tool to detect IngressNightmare (CVE-2025-1974) via (non-intrusive) active means.

cloud-securityexploitationmisconfiguration+3
1 year ago
electronegativity preview

electronegativity

GitHubdoyensec/electronegativity

Electronegativity is a tool to identify misconfigurations and security anti-patterns in Electron applications.

code-analysismisconfigurationstatic-analysis+1
1.1k1 year ago
spaces-finder preview

spaces-finder

GitHubappsecco/spaces-finder

A tool to hunt for publicly accessible DigitalOcean Spaces

cloud-infrastructure-securitycloud-securityinformation-gathering+4
1566 years ago
DockerENT preview

DockerENT

GitHubrosehgal/dockerent

The only open-source tool to analyze vulnerabilities and configuration issues with running docker container(s) and docker networks.

configuration-auditingcontainer-securitymisconfiguration+1
1275 years ago
navgix preview

navgix

GitHubhakaioffsec/navgix

Multi-threaded Go tool to detect nginx alias traversal vulnerabilities using heuristic and brute-force techniques for identifying vulnerable…

fuzzingmisconfigurationvulnerability-scanners+1
753 years ago
go-pillage-registries preview

go-pillage-registries

GitHubnccgroup/go-pillage-registries

Pentester-focused Docker registry tool to enumerate and pull images

cloud-securitycontainer-securityinformation-gathering+3
1136 years ago
Previous12…8Next