Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

63 results

DivideAndScan

snovvcrash/divideandscan

Divide full port scan results and use it for targeted Nmap runs

network-mappingpenetration-testingport-scanning+2

3352 years ago

chef-mysql-hardening

dev-sec/chef-mysql-hardening

This chef cookbook provides security configuration for mysql.

configuration-auditingdatabase-securitydefensive-tools+3

2721 days ago

cuckooautoinstall

buguroo/cuckooautoinstall

Auto Installer Script for Cuckoo Sandbox

dynamic-analysis-sandboxingmalware-analysisscripting-automation+1

1648 years ago

NetworkSandboxEngine

onyks-os/networksandboxengine

A deterministic network sandbox for testing nftables rules. It uses ephemeral Linux network namespaces (netns) and Scapy to validate firewall logic…

configuration-auditingdefensive-toolsdevsecops+3

47 days ago

dnspython

rthalley/dnspython

Python DNS toolkit supporting queries, zone transfers, dynamic updates, TSIG, EDNS0, DNSSEC, DNS-over-HTTPS, and DNS-over-QUIC with high- and…

dns-analysisdns-subdomain-enumerationinformation-gathering+3

2.7k2 days ago

4nonimizer

hackplayers/4nonimizer

A bash script for anonymizing the public IP used to browsing Internet, managing the connection to TOR network and to different VPNs providers…

dns-analysisprivacyscripting-automation

6457 years ago

agensic

alex188dot/agensic

Cryptographic terminal forensics and session replay for AI agents. Tracks, signs, and audits every command with provenance labels, replayable…

ai-securityauthenticationdigital-forensics+5

291 month ago

Moxy

matank001/moxy

Moxy is an open-source DAST tool designed for modern web application security testing. It provides an easy-to-use interface with agentic capabilities…

ai-securityapi-security-testingdynamic-analysis-sandboxing+9

1268 months ago

magento2-encryption-key-manager-cli

wubinworks/magento2-encryption-key-manager-cli

A utility for Magento 2 encryption key rotation and management. CVE-2024-34102(aka Cosmic Sting) victims can use it as an aftercare.

configuration-auditingcryptographydevsecops+3

1 year ago

diffplug__goomph_CVE-2022-26049_3-37-1

shoucheng3/diffplug__goomph_cve-2022-26049_3-37-1

Gradle plugin for fast, reproducible Eclipse IDE provisioning as a build artifact, with support for OSGi, p2, and RCP builds.

devsecopsgeneral-purpose-utilitiesscripting-automation+1

1 year ago

Hash-Eye

ishaklaz/hash-eye

**HashEye** is a powerful Python CLI tool for instantly detecting and analyzing hash types. It provides detailed information about hash formats,…

cryptographyhash-analysispassword-cracking+3

7 months ago

tcpcopy

session-replay-tools/tcpcopy

An online request replication and TCP stream replay tool, ideal for real testing, performance testing, stability testing, stress testing, load…

network-securitypenetration-testingscripting-automation+1

4.7k1 year ago

f8x

ffffffff0x/f8x

红/蓝队环境自动化部署工具 | Red/Blue team environment automation deployment tool

cloud-securityctfdevsecops+7

2.2k2 months ago

CVE-2013-3900-WinTrustVerify

otissymbos/cve-2013-3900-wintrustverify

Powershell script that checks for cert padding in the Windows Registry and adds it if it does not exist. Meant to resolve the WinTrustVerify…

configuration-auditingscripting-automationvulnerability-analysis

12 years ago

Archived

macro_pack

sevagas/macro_pack

macro_pack is a tool by @EmericNasi used to automatize obfuscation and generation of Office documents, VB scripts, shortcuts, and other formats for…

exploit-frameworkslateral-movementpayload-generation+6

2.3k2 years ago

WebSafeCompiler

dosx-dev/websafecompiler

A powerfull websites compiler/obfuscator for optimization or intellectual property protection purposes.

encryption-decryption-toolsgeneral-purpose-utilitiesscripting-automation+2

1601 year ago

RedditOSINT

albertrg99/redditosint

Reddit OSINT by username. Discover indexed posts, comments, deleted and live content, activity patterns, exposed identifiers, and an overall exposure…

data-exfiltrationinformation-gatheringosint+7

42 days ago

Kali-Setup

raikia/kali-setup

Script for Kali that adds a bunch of tools and customizes it to be much better

penetration-testingscripting-automationutilities-frameworks

1905 years ago

Previous12 3 4 Next