Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

1011 results

nodejsscan

ajinabraham/nodejsscan

nodejsscan is a static security code scanner for Node.js applications.

static-analysisvulnerability-scannersstatic-code-analysis+3

2.6k

1 month ago

dawnscanner

thesp0nge/dawnscanner

Dawn is a static analysis security scanner for ruby written web applications. It supports Sinatra, Padrino and Ruby on Rails frameworks.

static-analysisvulnerability-scannerscode-analysis+1

7492 years ago

miasm

cea-sec/miasm

Reverse engineering framework in Python

static-analysisdynamic-analysis-sandboxingreverse-engineering+3

3.9k1 month ago

HexRaysCodeXplorer

rehints/hexrayscodexplorer

Hex-Rays Decompiler plugin for better code navigation

static-analysisreverse-engineeringdebuggers+2

2.6k11 months ago

reko

uxmal/reko

Reko is a binary decompiler.

static-analysisreverse-engineeringbinary-analysis

2.6k2 days ago

Recaf

col-e/recaf

The modern Java bytecode editor

static-analysiscode-analysisreverse-engineering+2

7.3k4 days ago

bincat

airbus-seclab/bincat

Binary code static analyser, with IDA integration. Performs value and taint analysis, type reconstruction, use-after-free and double-free detection

static-analysisvulnerability-analysisreverse-engineering+2

1.9k1 year ago

Fnord

neo23x0/fnord

Pattern Extractor for Obfuscated Code

static-analysismalware-analysis

3034 years ago

Apkatshu

0xpwny/apkatshu

Apkatshu is a Tool for extracting urls , emails , ip address , and interesting data from APK files

android-securitystatic-analysisinformation-gathering+1

2523 years ago

xori

endgameinc/xori

Xori is an automation-ready disassembly and static analysis library for PE32, 32+ and shellcode

static-analysisreverse-engineeringmalware-analysis+1

7226 years ago

androwarn

maaaaz/androwarn

Yet another static code analyzer for malicious Android applications

android-securitystatic-analysisvulnerability-analysis+2

5317 years ago

electronegativity

doyensec/electronegativity

Electronegativity is a tool to identify misconfigurations and security anti-patterns in Electron applications.

static-analysisvulnerability-analysiscode-analysis+1

1.1k1 year ago

PowerShellArsenal

mattifestation/powershellarsenal

A PowerShell Module Dedicated to Reverse Engineering

static-analysisdynamic-analysis-sandboxingencryption-decryption-tools+6

9005 years ago

Flerken

we5ter/flerken

A Solution For Cross-Platform Obfuscated Commands Detection presented on CIS2019 China. 动静态Bash/CMD/PowerShell命令混淆检测框架 - CIS 2019大会

defensive-toolsstatic-analysiscode-analysis+3

1637 years ago

HardeningMeter

ofriouzan/hardeningmeter

HardeningMeter is an open-source Python tool carefully designed to comprehensively assess the security hardening of binaries and systems.

defensive-toolsstatic-analysisvulnerability-analysis+3

661 year ago

ShellSweep

splunk/shellsweep

ShellSweeping the evil.

static-analysisvulnerability-scannersweb-security+3

1843 months ago

angr

angr/angr

A powerful and user-friendly binary analysis platform!

embedded-systems-securitystatic-analysisdynamic-analysis-sandboxing+12

9.0k14h 18m ago

ghidra

nationalsecurityagency/ghidra

Ghidra is a software reverse engineering (SRE) framework

android-securityembedded-systems-securitystatic-analysis+17

71.1k1 day ago

Previous 1…434445…57 Next