Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

1001 results

talisman

thoughtworks/talisman

Git hook-based secret scanner that detects tokens, passwords, and private keys in outgoing changesets, preventing sensitive data from being committed…

static-analysiscode-analysisdevsecops+1

2.1k

11 months ago

CodeAnalysis

tencent/codeanalysis

Enterprise-grade static code analysis platform with multi-language support, security vulnerability detection, code quality metrics, and DevOps…

static-analysisstatic-code-analysisvulnerability-analysis+3

1.8k11 months ago

Umay

mucoze/umay

IoT Malware Similarity Analysis Platform

static-analysisiot-securityreverse-engineering+1

434 years ago

IDA2Obj

jhftss/ida2obj

Static binary instrumentation tool that dumps COFF object files from executables, enabling code/data insertion at any location for black-box fuzzing…

static-analysisreverse-engineeringdebuggers+2

1215 years ago

TrojanSourceFinder

ariary/trojansourcefinder

🔎 Help find Trojan Source vulnerability in code 👀 . Useful for code review in project with multiple collaborators (CI/CD)

static-analysisvulnerability-scannerscode-analysis+1

472 years ago

excelpeek

slaughterjames/excelpeek

Static analysis tool for investigating potentially malicious Microsoft Excel files, extracting metadata, macros, and embedded objects to aid digital…

static-analysisforensicsmalware-analysis+1

384 years ago

ipa-scope

xcodeon1/ipa-scope

Static analysis tool for iOS applications that extracts links, API keys, subdomains, binary info, linked libraries, and strings to aid mobile…

static-analysisios-securitymobile-app-pentesting+3

243 years ago

detect-secrets

yelp/detect-secrets

An enterprise friendly way of detecting and preventing secrets in code.

static-analysiscode-analysisdevsecops+1

4.6k6 months ago

statiStrings

sh3llyr/statistrings

YARA Rule Strings Statistics Calculator and Malware Research Helper

static-analysismalware-analysisthreat-intelligence

145 years ago

mininode

wspr-ncsu/mininode

Static analysis CLI tool that reduces Node.js application attack surface by constructing dependency graphs and removing unused modules and functions…

static-analysisvulnerability-analysiscode-analysis+3

213 years ago

http-desync-guardian

aws/http-desync-guardian

Analyze HTTP requests to minimize risks of HTTP Desync attacks (precursor for HTTP request smuggling/splitting).

static-analysisvulnerability-analysisapi-security-testing+1

2744 months ago

checkov

bridgecrewio/checkov

Static analysis tool for infrastructure as code that detects cloud misconfigurations, vulnerabilities, and secrets across Terraform, Kubernetes,…

cloud-infrastructure-securitystatic-analysisvulnerability-scanners+12

8.9k11h 54m ago

njsscan

ajinabraham/njsscan

Semantic-aware SAST scanner for Node.js applications that detects insecure code patterns using libsast pattern matching and semgrep syntax-aware…

static-analysisvulnerability-scannersstatic-code-analysis+3

43629 days ago

mariana-trench

facebook/mariana-trench

A security focused static analysis tool for Android and Java applications.

android-securitystatic-analysisvulnerability-analysis+2

1.2k6 days ago

CallObfuscator

d35ha/callobfuscator

Obfuscate specific windows apis with different apis

defensive-toolsstatic-analysisdynamic-analysis-sandboxing+4

1.0k5 years ago

obfuscation_detection

mrphrazer/obfuscation_detection

Binary Ninja plugin to identify obfuscated code and other interesting code constructs

static-analysisreverse-engineeringmalware-analysis+2

6725 months ago

z3

z3prover/z3

High-performance SMT solver for automated theorem proving, constraint solving, and program verification. Supports multiple theories and language…

static-analysiscryptographybinary-analysis+2

12.5k5h 46m ago

ghidra-evm

adelapie/ghidra-evm

Ghidra module for disassembling, decompiling, and analyzing Ethereum smart contract bytecode. Detects insecure instructions, extracts hidden methods,…

static-analysisvulnerability-analysisreverse-engineering+1

1495 years ago

Previous 1…525354…56 Next