Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

812 results

AggressorAssessor

redsiege/aggressorassessor

Aggressor scripts for phases of a pen test or red team assessment

information-gatheringpenetration-testingreconnaissance+3

183

2 years ago

Halcyon-IDE

s4n7h0/halcyon-ide

First IDE for Nmap Script (NSE) Development.

network-securityscripting-automationutilities-frameworks+1

3596 years ago

safetext

google/safetext

Go library for safe YAML and shell generation, using syntax-aware templates to detect and block injection attacks via annotations for trusted data.

defensive-toolsdevsecopsscripting-automation+1

15113 days ago

powerob

cwolff411/powerob

An on-the-fly Powershell script obfuscator meant for red team engagements. Built out of necessity.

payload-generationpenetration-testingred-teaming+1

1454 years ago

FUCK-CDN

0xshe/fuck-cdn

Automated CDN origin-IP discovery skill for Claude Code that runs 40+ prioritized OSINT methods, cross-validates candidates via SSL and HTTP…

dns-analysisdns-subdomain-enumerationinformation-gathering+9

1592 months ago

lssh

blacknon/lssh

A terminal-native remote access suite for SSH, cloud inventories, provider-backed connectors, parallel commands, mux workspaces, file transfer, and…

cloud-infrastructure-securitycloud-securitygeneral-purpose-utilities+4

3275 months ago

cuckooautoinstall

buguroo/cuckooautoinstall

Auto Installer Script for Cuckoo Sandbox

dynamic-analysis-sandboxingmalware-analysisscripting-automation+1

1648 years ago

Reconky-Automated_Bash_Script

shivamrai2003/reconky-automated_bash_script

Reconky is an great Content Discovery bash script for bug bounty hunters which automate lot of task and organized in the well mannered form which…

information-gatheringosintpenetration-testing+5

2023 years ago

taser

m8sec/taser

Python resource library for creating security related tooling

penetration-testingred-teamingscripting-automation+1

772 months ago

Kali-Setup

raikia/kali-setup

Script for Kali that adds a bunch of tools and customizes it to be much better

penetration-testingscripting-automationutilities-frameworks

1905 years ago

amla-sandbox

amlalabs/amla-sandbox

WASM sandbox with capability enforcement for AI agent code. Agents can only call explicitly provided tools with defined constraints. Sandboxed…

ai-securitycontainer-securitygeneral-purpose-utilities+2

3464 months ago

htbenum

solomonsklash/htbenum

A Linux enumeration script for Hack The Box

exploit-frameworksinformation-gatheringpenetration-testing+2

1936 years ago

gori

hahwul/gori

A fast, keyboard-driven HTTP intercepting proxy and hacking & pentesting toolkit for the terminal.

api-security-testingfuzzinginformation-gathering+8

1182 days ago

rayder

devanshbatham/rayder

A lightweight tool for orchestrating and organizing your bug hunting recon / pentesting command-line workflows

penetration-testingreconnaissancescripting-automation+1

3083 years ago

redStackPRO

devzero-security/redstackpro

A canvas for red team infrastructure and cyber ranges. Compose a topology, export runnable Terraform and Ansible, and deploy it yourself. Your cloud…

cloud-infrastructure-securitycloud-securitycommand-and-control+8

1378 days ago

harpoon

professionallyevil/harpoon

A collection of scripts, and tips and tricks for hacking k8s clusters and containers.

cloud-securitycontainer-securityexploitation+5

1451 year ago

PowerExfil

1n3/powerexfil

A collection of data exfiltration scripts for Red Team assessments.

data-exfiltrationdns-analysiseducation+3

966 years ago

filessh

jayanaxhf/filessh

A fast and convenient TUI file browser for remote servers

network-securityremote-access-toolscripting-automation+1

2332 months ago

Previous 1…567…46 Next