Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

322 results

pyOneNote

dissectmalware/pyonenote

A python library to parse OneNote (.one) files

digital-forensicsmalware-analysisstatic-analysis

1532 years ago

grap

quosecgmbh/grap

Define and match user-defined graph patterns against binary control flow graphs using a Capstone-based disassembler, with CLI, Python bindings, and…

binary-analysisdebuggersmalware-analysis+2

1554 years ago

pftriage

idiom/pftriage

Python tool and library to help analyze files during malware triage and analysis.

binary-analysisdigital-forensicsdynamic-analysis-sandboxing+4

796 years ago

bip

synacktiv/bip

Object-oriented Python API to simplify interaction with IDA for reverse engineering, enabling plugin development and automation of disassembly…

binary-analysiscode-analysisreverse-engineering+2

2054 years ago

dotnetfile

pan-unit42/dotnetfile

Python library for parsing CLR/PE metadata in .NET assemblies, exposing streams and hash fingerprints to support malware analysis and threat hunting.

binary-analysisforensicshash-analysis+4

1187 months ago

HardeningMeter

ofriouzan/hardeningmeter

HardeningMeter is an open-source Python tool carefully designed to comprehensively assess the security hardening of binaries and systems.

binary-analysisconfiguration-auditingdefensive-tools+3

661 year ago

vimana-framework

s4dhulabs/vimana-framework

Vimana is a modular security framework for auditing Python APIs and Web applications. The plugin-based architecture enables security professionals to…

api-securityapi-security-testingcrawler+9

662 months ago

yaraast

seifreed/yaraast

A powerful Python library and CLI tool for parsing, analyzing, and manipulating YARA rules through Abstract Syntax Tree (AST) representation

code-analysismalware-analysisscripting-automation+3

5428 days ago

machofile

pstirparo/machofile

machofile is a module to parse Mach-O binary files

binary-analysisforensicsmalware-analysis+2

997 months ago

Aura-State

munshi007/aura-state

Python framework for building LLM workflows as state machines with formal verification via Z3 theorem proving, CTL model checking, and conformal…

ai-securitycode-analysiscurated-resources+4

303 days ago

pocket_disasm

whoisqwerz/pocket_disasm

Multi-session IDALib MCP router for coding agents. Analyze multiple binaries in parallel with IDA-compatible reverse engineering tools.

ai-assisted-reversingbinary-analysisdebuggers+5

402 months ago

pycdc-studio

ddouworld/pycdc-studio

A Qt Widgets desktop UI for exploring Python bytecode with pycdc/pycdas, inspecting native decompilation, and using AI fallback for unsupported code…

ai-assisted-reversingbinary-analysisdebuggers+4

425 months ago

canon-mf644

synacktiv/canon-mf644

Exploit and firmware analysis toolkit for Canon MF644 printer vulnerabilities, including Python exploits, ARM shellcode, and IDA Pro loader scripts…

binary-exploitationembedded-systems-securityexploitation+6

313 years ago

openentropy

amenti-labs/openentropy

Open-source entropy harvesting from unconventional hardware sources. Rust + Python SDK.

cryptographyeducationhardware-security+2

286 months ago

codeql-workshop

sylwia-budzynska/codeql-workshop

Take first steps in CodeQL for Python by writing a query to find CVE-2024-32022

code-analysiscurated-resourceseducation+4

122 months ago

not-slithering-anywhere

trailofbits/not-slithering-anywhere

The Python Version of our Not Go-ing Anywhere Vulnerable Application

dynamic-analysis-sandboxingeducationlabs-practice+3

112 years ago

CVE-2025-8088

jordan922/cve-2025-8088

Python tool for safe archive handling, path traversal awareness, and secure extraction. Inspired by CVE-2025-8088.

code-analysisdefensive-toolseducation+3

101 year ago

CVE-2026-0303

yonliud/cve-2026-0303

Checkov PoC: arbitrary code execution through auto-loaded configuration and unsigned external Python checks.

code-analysisdevsecopseducation+5

15 days ago

Previous 1 234…18 Next