Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

104 results

flare-floss

mandiant/flare-floss

FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.

malware-analysisreverse-engineeringstatic-analysis

4.1k21h 59m ago

publications

trailofbits/publications

Publications from Trail of Bits

binary-analysiscryptographyctf+5

1.9k6 days ago

fernflower

jetbrains/fernflower

Decompiler from Java bytecode to Java, used in IntelliJ IDEA.

binary-analysisreverse-engineeringstatic-analysis

4.4k10 days ago

auto-re-agent

dryxio/auto-re-agent

Open-source AI reverse-engineering agent using Ghidra and LLMs to reconstruct and validate C/C++ functions from binaries.

ai-assisted-reversingbinary-analysisbinary-exploitation+5

1.4k28 days ago

python-decompile3

rocky/python-decompile3

Python decompiler for 3.7-3.8 Stripped down from uncompyle6 so we can refactor and start to fix up some long-standing problems

binary-analysisdebuggerseducation+3

1.3k1 month ago

jsluice

bishopfox/jsluice

Extract URLs, paths, secrets, and other interesting bits from JavaScript

code-analysisinformation-gatheringpenetration-testing+3

1.9k2 years ago

JSONPath

jsonpath-plus/jsonpath

A fork of JSONPath from http://goessner.net/articles/JsonPath/

code-analysisgeneral-purpose-utilitiesscripting-automation+2

1.2k3 days ago

talisman

thoughtworks/talisman

Git hook-based secret scanner that detects tokens, passwords, and private keys in outgoing changesets, preventing sensitive data from being committed…

code-analysisdevsecopssecret-detection+1

2.1k9 months ago

dexcalibur

reversenseorg/dexcalibur

[Official] Android reverse engineering tool focused on dynamic instrumentation automation leveraging Frida. It disassembles dex, analyzes it…

android-securitybinary-analysisdebuggers+5

1.2k1 month ago

ddisasm

grammatech/ddisasm

Datalog-based disassembler producing reassemblable assembly from ELF/PE binaries, with GTIRB intermediate representation for binary analysis and…

binary-analysisdebuggersfirmware-analysis+2

8601 month ago

decomp2dbg

mahaloz/decomp2dbg

A plugin to introduce interactive symbols into your debugger from your decompiler

binary-analysisbinary-exploitationdebuggers+3

8141 month ago

coruna

matteyeux/coruna

deobfuscated JS and blobs from https://b27[.]icu, first attempt at using claude

malware-analysisreverse-engineeringstatic-analysis

2845 months ago

quokka

quarkslab/quokka

Exports disassembly from IDA Pro, Ghidra, and Binary Ninja into compact protobuf files for fast, standalone binary analysis and program manipulation…

binary-analysiscode-analysisreverse-engineering+2

22516 days ago

AndroPyTool

alexmyg/andropytool

A framework for automated extraction of static and dynamic features from Android applications

android-securitydynamic-analysis-sandboxingmalware-analysis+2

3816 years ago

Apkatshu

0xpwny/apkatshu

Apkatshu is a Tool for extracting urls , emails , ip address , and interesting data from APK files

android-securityinformation-gatheringmobile-security+1

2523 years ago

Vba2Graph

malwarecantfly/vba2graph

Vba2Graph - Generate call graphs from VBA code, for easier analysis of malicious documents.

code-analysismalware-analysisreverse-engineering+1

2835 years ago

BFScan

blackfan/bfscan

Tool for finding URLs, paths, secrets and generating raw HTTP requests and OpenApi specifications from config files and annotations used in JAR / WAR…

android-securityapi-securityinformation-gathering+5

2568 months ago

Apepe

0xdsm/apepe

Extracts app settings, permissions, deeplinks, and SSL pinning bypass suggestions from Android APK files via static analysis of AndroidManifest.xml,…

android-securityinformation-gatheringmobile-app-pentesting+1

15610 months ago

Previous12 3 4 5 6 Next