Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems Security
General Purpose Utilities
Indicator of Compromise (IOC) Management
OSINT (Open Source Intelligence)
Packet Sniffing & Analysis
Password Cracking
Penetration Testing Frameworks
Phishing Tools
Privilege Escalation
Reconnaissance
Static Analysis
Vulnerability Scanners
Web Vulnerability Scanners
Wi-Fi Auditing
Bluetooth Security
Container Security
Dynamic Analysis (Sandboxing)
Encryption/Decryption Tools
Exploit Frameworks
Identity Management
iOS Security
IoT Security
Memory Forensics
Network Mapping
OSINT for Social Engineering
Password Attacks
Payload Generation
Persistence Mechanisms
Port Scanning
Static Code Analysis (SAST)
Threat Feeds & Aggregators
Vulnerability Analysis
Web Proxies & Interception
Code Analysis
DNS & Subdomain Enumeration
Dynamic Code Analysis (DAST)
Exploitation
Hash Analysis
IDS/IPS Evasion
Impersonation Tools
Lateral Movement
Mobile App Pentesting
Network Forensics
Reverse Engineering
RFID/NFC Tools
SCADA/ICS Security
Scripting & Automation
Serverless Security
Shellcode
Web Application Exploitation
API Security Testing
Configuration Auditing
Data Exfiltration
Debuggers
Forensics
Information Gathering
Mobile Forensics
Network Access Control
Post-Exploitation
Security Virtualization
Phishing
WAF Bypass
Web Security
Fuzzing
Network Security
Steganography
Wireless Security
Data Recovery
Malware Analysis
Digital Forensics
Hardware Hacking
Cryptography
CTF
Penetration Testing
Cloud Security
DevSecOps
Mobile Security
Privacy
Command and Control
Social Engineering
Hardware Security
Utilities & Frameworks
Hardware & IoT Security
Secret Detection
Binary Analysis
Threat Intelligence
Identity & Access Management (IAM)
Supply Chain Security
Authentication
Machine Learning
Intrusion Detection
Papers & Research
Misconfiguration
Subdomain Enumeration
Email Harvesting
Learning & Education
AI-Assisted Reversing
DNS Fuzzing
Red Teaming
Incident Response
Crawler
Curated Resources
Remote Access Tool
Shellcode Generation
Payload Development
Remote Access Trojan
API Security
Anti-Bot
Fingerprint Spoofing
CAPTCHA Bypass
Email Security
DNS Analysis
Chaos Engineering
Learning Paths & Courses
Container Escape
AI Security
Database Security
Firmware Analysis
Anomaly Detection
Log Analysis
Adversarial Attack
Binary Exploitation
Labs & Practice
NewestRelevanceMost popularRecently updated
85 results
osv-scanner preview

osv-scanner

GitHubgoogle/osv-scanner

Vulnerability scanner written in Go which uses the data provided by https://osv.dev

code-analysiscontainer-securitydevsecops+4
10.9k2 days ago
awesome-devsecops preview

awesome-devsecops

GitHubdevsecops/awesome-devsecops

An authoritative list of awesome devsecops tools with the help from community experiments and contributions.

curated-resourcesdevsecopseducation+7
5.5k4 years ago
dockerscan preview

dockerscan

GitHubcr0hn/dockerscan

The Most Comprehensive Docker Security Scanner

cloud-securityconfiguration-auditingcontainer-security+4
1.7k1 day ago
secator preview

secator

GitHubfreelabz/secator

secator - the pentester's swiss knife

dns-analysisexploit-frameworksfuzzing+8
1.3k1 day ago
lunasec preview

lunasec

GitHublunasec-io/lunasec

LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and…

devsecopssecret-detectionsupply-chain-security+1
1.5k2 years ago
jackhammer preview

jackhammer

GitHubolacabs/jackhammer

Jackhammer - One Security vulnerability assessment/management tool to solve all the security team problems.

code-analysisconfiguration-auditingdevsecops+9
7407 years ago
porch-pirate preview

porch-pirate

GitHubwatchdogsecurity/porch-pirate

Porch Pirate is the most comprehensive Postman recon / OSINT client and framework that facilitates the automated discovery and exploitation of API…

api-securityinformation-gatheringosint+4
4702 years ago
eviltree preview

eviltree

GitHubt3l3machus/eviltree

A python3 remake of the classic "tree" command with the additional feature of searching for user provided keywords/regex in files, highlighting those…

information-gatheringpost-exploitationprivilege-escalation+3
4121 year ago
node9-proxy preview

node9-proxy

GitHubnode9-ai/node9-proxy

The Execution Security Layer for the Agentic Era. Providing deterministic "Sudo" governance and audit logs for autonomous AI agents.

ai-securitycloud-securitycommand-and-control+7
2094 days ago
kubebot preview

kubebot

GitHubanshumanbh/kubebot

A security testing Slackbot built with a Kubernetes backend on the Google Cloud Platform

cloud-securitydevsecopsinformation-gathering+5
1641 year ago
Veritensor preview

Veritensor

GitHubarsbr/veritensor

The Anti-Virus for AI Artifacts & RAG Firewall. A static analysis tool scanning Models and Notebooks for RCE, Datasets and RAG docs for Data…

ai-securitycode-analysisdata-exfiltration+8
8522 days ago
layerleak preview

layerleak

GitHubbrumbelow/layerleak

layerleak the Docker Hub Secret Scanner

api-securitycloud-securitycontainer-security+3
4214h 28m ago
airgap preview

airgap

GitHubxtuc/airgap

Security for the modern age of AI: defend against bad AI agents and malicious npm packages

ai-securitycontainer-securitydefensive-tools+3
1512 days ago
Package-Inferno preview

Package-Inferno

GitHubmhaggis/package-inferno

A Public Package Scanner for The Community

cloud-securitycontainer-securitydevsecops+6
137 months ago
synaptic-sentinel preview

synaptic-sentinel

GitHubgolab-arch/synaptic-sentinel

The vibe-coding security sentinel. Apache-2.0 agentic security toolkit for AI-assisted projects: 5 deterministic scouts + LLM Brain Layer (BYOK…

ai-securitycode-analysisdevsecops+6
61 month ago
CVE-2023-27587-PoC preview

CVE-2023-27587-PoC

GitHubvagnerd/cve-2023-27587-poc

The simple PoC of CVE-2023-27587

api-securityexploitationinformation-gathering+3
53 years ago
mini-shai-hulud-scanner preview

mini-shai-hulud-scanner

GitHubintrudify/mini-shai-hulud-scanner

Scanner for the Mini Shai-Hulud npm/PyPI supply chain worm (NHS CC-4781 · CVE-2026-45321). Detects gh-token-monitor persistence, payload artefacts,…

forensicsincident-responseioc-management+6
23 months ago
mcp-doorman preview

mcp-doorman

GitHubsushank05/mcp-doorman

A lightweight mcp to prevent poisoning CVE (CVE-2025-54136), researchers hijacking Claude Code/Copilot/Gemini via prompt injection, and hundreds of…

ai-securityapi-securitydefensive-tools+5
1 day ago
Previous12345Next