Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

53 results

conpot

mushorg/conpot

ICS/SCADA honeypot

information-gatheringnetwork-securityscada-ics-security+1

1.5k8 days ago

detection-defense-library

wattocyber/detection-defense-library

Detection-engineering reference mapping Windows, cloud, container, identity, and ICS attack classes to Sigma rules, trust-boundary models, BYOVD…

cloud-securitycontainer-securitycurated-resources+7

1 month ago

CVE-2025-41656

wallyschag/cve-2025-41656

This repository includes the code and files needed to test and execute a PoC for CVE-2025-41656

educationexploitationiot-security+3

211 months ago

Archived

aztarna

aliasrobotics/aztarna

aztarna, a footprinting tool for robots.

embedded-systems-securityhardware-iot-securityinformation-gathering+7

922 months ago

thingsboard

thingsboard/thingsboard

All-in-one IoT Platform - Device management, data collection, processing and visualization.

anomaly-detectioncloud-infrastructure-securityconfiguration-auditing+3

22.5k10h 34m ago

cset

cisagov/cset

Cybersecurity Evaluation Tool

configuration-auditingscada-ics-securityvulnerability-analysis

1.9k2 months ago

awesome-censys-queries

thehappydinoa/awesome-censys-queries

A collection of fascinating and bizarre Censys Search Queries

curated-resourcesinformation-gatheringiot-security+4

1.2k1 year ago

fapro

fofapro/fapro

Multi-protocol honeypot simulator supporting 50+ network services with deep interaction, TCP/UDP/ICMP logging, JA3 fingerprinting, and virtual…

defensive-toolsfingerprint-spoofinginformation-gathering+3

1.6k1 year ago

attack-stix-data

mitre-attack/attack-stix-data

STIX 2.1 collections of the MITRE ATT&CK knowledge base, providing adversary tactics and techniques for enterprise, mobile, and ICS threat…

curated-resourcesioc-managementmobile-security+4

6751 month ago

shodan

lothos612/shodan

Shodan Dorks

curated-resourcesdatabase-securityinformation-gathering+7

5993 years ago

Dejavu

bhdresh/dejavu

DejaVU - Open Source Deception Framework

cloud-securitydefensive-toolsids-ips-evasion+7

4351 year ago

ics-forensics-tools

microsoft/ics-forensics-tools

Open-source forensics framework for analyzing Industrial PLC metadata and project files. Scans for suspicious artifacts in ICS environments to…

digital-forensicsforensicsincident-response+2

3741 year ago

HosTaGe

aau-network-security/hostage

Low Interaction Mobile Honeypot

android-securitydefensive-toolseducation+5

995 years ago

riotpot

aau-network-security/riotpot

IoT and Operational Technology Honeypot

defensive-toolsinformation-gatheringiot-security+2

1053 years ago

UltraViolet

yakushstanislav/ultraviolet

Self-hosted network discovery and search engine with continuous port scanning, deep protocol probing across ~100 services, local CVE matching, and…

dns-analysisincident-responseiot-security+6

441 month ago

MoxaPass

reidmefirst/moxapass

Small script to retrieve passwords from many types of Moxa device, including NPort, OnCell, MGate, etc.

educationexploitationinformation-gathering+3

389 years ago

ripple20

corelight/ripple20

A Zeek package for the passive detection of "Ripple20" vulnerabilities in the Treck TCP/IP stack.

anomaly-detectionintrusion-detectioniot-security+3

324 years ago

ICSFuzz

momalab/icsfuzz

Instrumented fuzzer for PLC-based ICS control applications, targeting Codesys runtime on Wago controllers to uncover memory corruption and…

dynamic-code-analysisembedded-systems-securityfuzzing+3

304 years ago

Previous 123 Next