Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
265 results
android-classyshark preview
Archived

android-classyshark

GitHubgoogle/android-classyshark

Android and Java bytecode viewer

android-securitybinary-analysiscode-analysis+3
7.6k
3 years ago
whispers preview
Archived

whispers

GitHubskyscanner/whispers

Identify hardcoded secrets in static structured text

code-analysisconfiguration-auditingdevsecops+4
5063 years ago
kavanoz preview
Archived

kavanoz

GitHubeybisi/kavanoz

Statically unpacking common android banker malware.

android-securityencryption-decryption-toolsmalware-analysis+3
1591 year ago
halogen preview
Archived

halogen

GitHubtarget/halogen

Automatically create YARA rules from malicious documents.

forensicsincident-responsemalware-analysis+2
2114 years ago
magika preview

magika

GitHubgoogle/magika

Fast and accurate AI powered file content types detection

code-analysisforensicsgeneral-purpose-utilities+3
17.9k12h 59m ago
opengrep preview

opengrep

GitHubopengrep/opengrep

🔎 Static code analysis engine to find security issues in code.

code-analysisdefensive-toolsdevsecops+7
3.3k10h 49m ago
JSONPath preview

JSONPath

GitHubjsonpath-plus/jsonpath

A fork of JSONPath from http://goessner.net/articles/JsonPath/

code-analysisgeneral-purpose-utilitiesscripting-automation+2
1.2k6 days ago
owasp-java-encoder preview

owasp-java-encoder

GitHubowasp/owasp-java-encoder

The OWASP Java Encoder is a Java 1.5+ simple-to-use drop-in high-performance encoder class with no dependencies and little baggage. This project will…

code-analysisdefensive-toolsencryption-decryption-tools+3
5417 days ago
go-pkcs12 preview

go-pkcs12

GitHubsslmate/go-pkcs12

Go library for encoding and decoding PKCS#12 files

code-analysiscryptographyencryption-decryption-tools+2
16523 days ago
json-sanitizer preview

json-sanitizer

GitHubowasp/json-sanitizer

Given JSON-like content, The JSON Sanitizer converts it to valid JSON.

code-analysisencryption-decryption-toolsgeneral-purpose-utilities+3
2195 days ago
gobee preview

gobee

GitHubboratanrikulu/gobee

Write your BPF programs in Go, not C. gobee transpiles a Go subset to BPF C and generates typed cilium/ebpf bindings.

binary-analysiscode-analysisdevsecops+3
3456 months ago
ParanoiDF preview

ParanoiDF

GitHubpatrickdw123/paranoidf

ParanoiDF - PDF Analysis Suite based on PeePDF by Jose Miguel Esparza (http://peepdf.eternal-todo.com/). Tools added: Password cracking, redaction…

data-recoverydigital-forensicsencryption-decryption-tools+6
1123 years ago
url-regex-safe preview

url-regex-safe

GitHubspamscanner/url-regex-safe

Regular expression matching for URL's. Maintained, safe, and browser-friendly version of url-regex. Resolves CVE-2020-7661 for Node.js servers.

general-purpose-utilitiesscripting-automationstatic-analysis+2
813 years ago
sbox preview

sbox

GitHubx86byte/sbox

Compile-time AES string obfuscation for C++

binary-analysiscryptographyencryption-decryption-tools+2
1105 months ago
rscrypto preview

rscrypto

GitHubloadingalias/rscrypto

Rust cryptography w/ zero required deps: hashes, checksums, MACs, KDFs, password hashing, AEADs, signatures, RSA, key exchange, ML-KEM, and ML-DSA.…

authenticationcryptographyencryption-decryption-tools+3
362 days ago
MakerChecker preview

MakerChecker

GitHubmakerchecker/makerchecker

Open-source security gateway & static scanner for AI agents. Enforce role-based access control (RBAC), human-in-the-loop approvals, segregation of…

ai-securityauthentication-authorizationcloud-security+7
513 months ago
vue-template-compiler-patched preview

vue-template-compiler-patched

GitHubbio/vue-template-compiler-patched

Patched Vue 2.7.16 template compiler with fixes for CVE‑2024‑6783 and CVE-2024-9506

code-analysisgeneral-purpose-utilitiesstatic-analysis+2
212 months ago
rocacheck preview

rocacheck

GitHubtitanous/rocacheck

Go package that checks if RSA keys are vulnerable to ROCA / CVE-2017-15361

code-analysiscryptographyencryption-decryption-tools+2
169 years ago
Previous1…12131415Next