Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

33 results

Agentic-Evidence

owasp/agentic-evidence

OWASP reference project for agentic AI security evidence: correlates agent execution, identity, tool calls, and authorization decisions into…

ai-securityanomaly-detectioncurated-resources+6

10 days ago

Robotics-Security-Testing-Guide

owasp/robotics-security-testing-guide

OWASP guide defining a standardized penetration testing methodology for humanoid, industrial, and autonomous robots, covering ROS/ROS2, DDS, CAN bus,…

ai-securitycurated-resourceseducation+7

9 days ago

The-Agents-Epistemic-Baggage

owasp/the-agents-epistemic-baggage

An audit-oriented risk model for how agent-generated inferences can change epistemic status, gain operational authority, and influence later…

ai-securityanomaly-detectioncurated-resources+5

7 days ago

GenAI-LLM-Top10

genai-security-project/genai-llm-top10

OWASP Top 10 for Large Language Model Applications

ai-securitycurated-resourceseducation+4

1462 months ago

AI-Threat-Modeler

owasp/ai-threat-modeler

OWASP project for AI-assisted threat modeling, helping teams identify, analyze, and document security threats and mitigations in system designs.

ai-securitydefensive-toolspapers-research+2

18 days ago

secure-headers-project

owasp/secure-headers-project

OWASP knowledge base and validator for HTTP security response headers, providing recommendations, statistics, and automated configuration checks.

configuration-auditingcurated-resourcesdefensive-tools+5

2244 days ago

SecretSifter

owasp/secretsifter

OWASP Incubator project: detects credentials exposed in browser-delivered content (JavaScript, config responses, live traffic).

ai-securityapi-securitydefensive-tools+7

814 days ago

OWASP-Top-10-Neocloud-and-AI-Data-Center-Security-Risks

owasp/owasp-top-10-neocloud-and-ai-data-center-security-risks

OWASP framework cataloging the top 10 security risks in neocloud and AI data center infrastructure, covering hardware, networking, isolation,…

ai-securitycloud-securitycontainer-security+8

207 days ago

AI_Security_Top

ghostwolflab/ai_security_top

A structured knowledge base covering AI security fundamentals, threat modeling, red team offensive techniques, and blue team defenses, including LLM…

adversarial-attackai-securitycurated-resources+5

1557 months ago

OWASP-Subtractive-Hardening-Top-10

owasp/owasp-subtractive-hardening-top-10

The OWASP Subtractive Security Top 10 Project is an initiative to identify, document, and promote the highest-impact opportunities for reducing cyber…

ai-securitycloud-securitycontainer-security+6

3112 days ago

OWASP-Model-Card-Security-Standard

owasp/owasp-model-card-security-standard

Open standard for documenting security-relevant metadata of AI models, including training data provenance, PII risk, known vulnerabilities, and…

ai-securitycurated-resourceseducation+5

12 months ago

mcp-attack-detection-sentinel

j-dahl7/mcp-attack-detection-sentinel

Sentinel detection lab for MCP attack chains: CVE-2026-26118 SSRF token theft, tool poisoning, cross-server exfiltration, identity post-exploitation.…

ai-securitycloud-securityeducation+5

23 months ago