Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
29 results
semgrep-rules preview

semgrep-rules

GitHubelttam/semgrep-rules

Static analysis security rules for vulnerability detection and audit-focused code review across Java, Go, Python, C#, Kotlin, PHP, Kubernetes, and…

cloud-infrastructure-securitycode-analysiscontainer-security+6
245
21 days ago
raptor preview

raptor

GitHubgadievron/raptor

Autonomous security research framework integrating static analysis, binary analysis, fuzzing, LLM-powered vulnerability validation, exploit…

ai-assisted-reversingbinary-analysisdynamic-analysis-sandboxing+7
3.7k7h 38m ago
awesome-nodejs-security preview

awesome-nodejs-security

GitHublirantal/awesome-nodejs-security

Curated directory of Node.js security tools, static analyzers, vulnerability scanners, and educational resources covering OWASP Top 10, supply chain…

code-analysiscurated-resourceseducation+5
3.0k6 days ago
bearer preview

bearer

GitHubbearer/bearer

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

code-analysisdevsecopsprivacy+2
2.7k20h 9m ago
smart-contract-vulnerabilities preview

smart-contract-vulnerabilities

GitHubkadenzipfel/smart-contract-vulnerabilities

Curated catalog of Solidity smart contract vulnerability patterns with categorized examples, prevention methods, and LLM-optimized references for…

curated-resourceseducationstatic-code-analysis+1
2.5k6 months ago
CodeAnalysis preview

CodeAnalysis

GitHubtencent/codeanalysis

Enterprise-grade static code analysis platform with multi-language support, security vulnerability detection, code quality metrics, and DevOps…

code-analysisdevsecopseducation+3
1.8k9 months ago
security-code-scan preview

security-code-scan

GitHubsecurity-code-scan/security-code-scan

Vulnerability Patterns Detector for C# and VB.NET

code-analysisstatic-code-analysisvulnerability-analysis
9753 years ago
semgrep-rules preview

semgrep-rules

GitHub0xdea/semgrep-rules

A collection of my Semgrep rules to facilitate vulnerability research.

binary-analysiscode-analysiscurated-resources+3
8716 days ago
jackhammer preview

jackhammer

GitHubolacabs/jackhammer

Jackhammer - One Security vulnerability assessment/management tool to solve all the security team problems.

code-analysisconfiguration-auditingdevsecops+9
7407 years ago
OpenAnt preview

OpenAnt

GitHubknostic/openant

OpenAnt from Knostic is the leading open source LLM-based vulnerability discovery product, helping defenders proactively find verified security flaws…

ai-securitydevsecopsdynamic-analysis-sandboxing+4
7291 day ago
multiplier preview

multiplier

GitHubtrailofbits/multiplier

Indexes C/C++ build artifacts into a queryable whole-program database, exposing AST, token, and IR-level APIs for code auditing and vulnerability…

code-analysisstatic-code-analysisvulnerability-analysis
4773 months ago
raptor preview
Archived

raptor

GitHubdpnishant/raptor

Web-based Source Code Vulnerability Scanner

android-securitycode-analysisdevsecops+6
3568 years ago
ghidra-scripts preview

ghidra-scripts

GitHub0xdea/ghidra-scripts

Curated Ghidra scripts to automate reverse engineering and vulnerability analysis: locate insecure functions, extract decompiler pseudocode, fix…

binary-analysisreverse-engineeringstatic-code-analysis+1
30218 days ago
recheck preview

recheck

GitHubmakenowjust-labs/recheck

Static analysis tool for detecting ReDoS (Regular Expression Denial of Service) vulnerabilities in JavaScript and Scala codebases, providing…

code-analysisstatic-code-analysisvulnerability-analysis
3004 days ago
Sighthound preview

Sighthound

GitHubcorgea/sighthound

Tree-sitter based static vulnerability scanner with pattern matching and taint-flow analysis for multi-language source code. Outputs findings as…

code-analysisdevsecopsmisconfiguration+4
2759 days ago
whalescan preview

whalescan

GitHubnccgroup/whalescan

Whalescan is a vulnerability scanner for Windows containers, which performs several benchmark checks, as well as checking for CVEs/vulnerable…

container-securitydevsecopsmisconfiguration+2
1563 years ago
haruspex preview

haruspex

GitHub0xdea/haruspex

Vulnerability research assistant that extracts pseudocode from the IDA Hex-Rays decompiler.

binary-analysisreverse-engineeringstatic-code-analysis+1
1336 days ago
Creosote preview

Creosote

GitHubadvanced-threat-research/creosote

Creosote is our solution to searching for the tarfile vulnerability described by CVE-2007-4559.

code-analysismisconfigurationstatic-code-analysis+3
823 years ago
Previous12Next