Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

13 results

work1-secure-api

ght657/work1-secure-api

HDU IS Work 1 - Secure REST API (Flask) with CI/CD (pytest + bandit + pip-audit) and CVE-2018-17246 analysis

api-securityauthentication-authorizationdevsecops+7

21h 28m ago

wycheproof

c2sp/wycheproof

Project Wycheproof tests crypto libraries against known attacks.

code-analysiscryptographyeducation+3

3.1k5 days ago

conftest

open-policy-agent/conftest

Write tests against structured configuration data using the Open Policy Agent Rego query language

cloud-infrastructure-securityconfiguration-auditingdevsecops+2

3.3k6 days ago

CVE-2026-57821-PoC-Exploit

tc4dy/cve-2026-57821-poc-exploit

🔐 CVE-2026-57821 - Apache Fineract SQL Injection Toolkit 📚 Two Python scripts for authorized security testing: verifier.py (safe detection, no…

code-analysisdatabase-securityeducation+5

38 days ago

zairo

iamavu/zairo

Scans code diffs with context to build an impact graph and uses LLMs to find vulnerabilities, supporting multi-repo scans and CI gating with SARIF…

ai-securitycode-analysisdevsecops+3

1421 days ago

cve-2026-58138

seqra/cve-2026-58138

Reproduction kit for CVE-2026-58138, an unauthenticated RCE in Conductor. Includes OpenTaint static analysis rules, isolated tests, SARIF results,…

code-analysiseducationexploitation+5

3 months ago

susvibes-jupyter-server-cve-2026-35397

hiteshgorana/susvibes-jupyter-server-cve-2026-35397

Benchmark task for reimplementing a masked path-resolution fix in Jupyter Server, with functional and hidden security tests to evaluate…

code-analysiscurated-resourceseducation+3

5 months ago

aether

l33tdawg/aether

AI Smart Contract Security Analysis and PoC Generation Framework

ai-securitybinary-analysiscryptography+7

716 months ago

Tough-Cookie-v2.5.0-Patched

dani33339/tough-cookie-v2.5.0-patched

Patched tough-cookie v2.5.0 fixing CVE-2023-26136 prototype pollution vulnerability with Object.create(null) in MemoryCookieStore, including exploit…

code-analysiseducationexploitation+3

1 year ago

cherrybomb

blst-security/cherrybomb

CLI tool that audits OpenAPI specifications, validates them against best practices, and runs automated security tests to detect vulnerabilities and…

api-securityapi-security-testingdynamic-analysis-sandboxing+3

1.2k2 years ago

huskyCI

globocom/huskyci

Performing security tests inside your CI

code-analysisdevsecopssecret-detection+2

5982 years ago

CVE-2020-15227

filipsedivy/cve-2020-15227

Python-based checker for CVE-2020-15227 that tests Nette applications for remote code execution vulnerabilities via file_put_contents and shell_exec…

code-analysisexploitationstatic-analysis+2

15 years ago

scan-cve-2018-8115

aquasecurity/scan-cve-2018-8115

CLI tool that verifies Docker images for CVE-2018-8115 by checking layers for malicious files, helping ensure safe pulls from Docker Hub.

container-securitymisconfigurationstatic-analysis+2

78 years ago