Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems Security
General Purpose Utilities
Indicator of Compromise (IOC) Management
OSINT (Open Source Intelligence)
Packet Sniffing & Analysis
Password Cracking
Penetration Testing Frameworks
Phishing Tools
Privilege Escalation
Reconnaissance
Static Analysis
Vulnerability Scanners
Web Vulnerability Scanners
Wi-Fi Auditing
Bluetooth Security
Container Security
Dynamic Analysis (Sandboxing)
Encryption/Decryption Tools
Exploit Frameworks
Identity Management
iOS Security
IoT Security
Memory Forensics
Network Mapping
OSINT for Social Engineering
Password Attacks
Payload Generation
Persistence Mechanisms
Port Scanning
Static Code Analysis (SAST)
Threat Feeds & Aggregators
Vulnerability Analysis
Web Proxies & Interception
Code Analysis
DNS & Subdomain Enumeration
Dynamic Code Analysis (DAST)
Exploitation
Hash Analysis
IDS/IPS Evasion
Impersonation Tools
Lateral Movement
Mobile App Pentesting
Network Forensics
Reverse Engineering
RFID/NFC Tools
SCADA/ICS Security
Scripting & Automation
Serverless Security
Shellcode
Web Application Exploitation
API Security Testing
Configuration Auditing
Data Exfiltration
Debuggers
Forensics
Information Gathering
Mobile Forensics
Network Access Control
Post-Exploitation
Security Virtualization
Phishing
WAF Bypass
Web Security
Fuzzing
Network Security
Steganography
Wireless Security
Data Recovery
Malware Analysis
Digital Forensics
Hardware Hacking
Cryptography
CTF
Penetration Testing
Cloud Security
DevSecOps
Mobile Security
Privacy
Command and Control
Social Engineering
Hardware Security
Utilities & Frameworks
Hardware & IoT Security
Secret Detection
Binary Analysis
Threat Intelligence
Identity & Access Management (IAM)
Supply Chain Security
Authentication
Machine Learning
Intrusion Detection
Papers & Research
Misconfiguration
Subdomain Enumeration
Email Harvesting
Learning & Education
AI-Assisted Reversing
DNS Fuzzing
Red Teaming
Incident Response
Crawler
Curated Resources
Remote Access Tool
Shellcode Generation
Payload Development
Remote Access Trojan
API Security
Anti-Bot
Fingerprint Spoofing
CAPTCHA Bypass
Email Security
DNS Analysis
Chaos Engineering
Learning Paths & Courses
Container Escape
AI Security
Database Security
Firmware Analysis
Anomaly Detection
Log Analysis
Adversarial Attack
Binary Exploitation
Labs & Practice
NewestRelevanceMost popularRecently updated
18 results
sonarqube preview

sonarqube

GitHubsonarsource/sonarqube

Code-quality and static-analysis platform with quality gates, multi-language scanning, and security-focused rules to detect vulnerabilities and…

code-analysisdevsecopsstatic-analysis+2
10.9k17h 8m ago
semgrep preview

semgrep

GitHubsemgrep/semgrep

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

api-securityapi-security-testingcode-analysis+9
16.5k9 days ago
CVE-2021-44228 preview

CVE-2021-44228

GitHubtai-e/cve-2021-44228

Utilize Tai-e to identify the Log4shell (a.k.a. CVE-2021-44228) Vulnerability

code-analysiseducationstatic-code-analysis+1
92 months ago
CVE-2026-39259 preview

CVE-2026-39259

GitHubyousif-iq/cve-2026-39259

CVE-2026-39259

binary-analysiseducationembedded-systems-security+3
22 months ago
CVE-2026-48813-POC preview

CVE-2026-48813-POC

GitHub7alen7/cve-2026-48813-poc

Proof-of-concept exploit for terminal escape sequence injection via malicious filenames that hides Flawfinder's scan findings; fixed in version…

educationexploitationpapers-research+2
3 months ago
CVE-2026-32722 preview

CVE-2026-32722

GitHub0xmrma/cve-2026-32722

Bloomberg Memray’s Stored XSS via Unescaped Command-Line Metadata

educationpapers-researchpenetration-testing+3
15 months ago
SyncShield preview

SyncShield

GitHubwaleedadam360-web/syncshield

SyncShield - Browser Extension to Detect Unsafe Rsync Commands (CVE-2018-5764)

educationmisconfigurationscripting-automation+3
9 months ago
CodeAnalysis preview

CodeAnalysis

GitHubtencent/codeanalysis

Enterprise-grade static code analysis platform with multi-language support, security vulnerability detection, code quality metrics, and DevOps…

code-analysisdevsecopseducation+3
1.8k10 months ago
jstachio__jstachio_CVE-2023-33962_1-0-0 preview

jstachio__jstachio_CVE-2023-33962_1-0-0

GitHubshoucheng3/jstachio__jstachio_cve-2023-33962_1-0-0

Type-safe Java Mustache templating engine with compile-time template validation, static value binding, and extensible escaping for HTML and other…

code-analysiseducationgeneral-purpose-utilities+2
11 months ago
ASST preview

ASST

GitHubowasp/asst

OWASP ASST (Automated Software Security Toolkit) | A Novel Open Source Web Security Scanner.

code-analysiseducationstatic-code-analysis+2
1881 year ago
SealSecurity_Exam preview

SealSecurity_Exam

GitHubm-lito13/sealsecurity_exam

Fix prototype pollution vulnerability (CVE-2023-26136) for tough-cookie package

code-analysiseducationstatic-code-analysis+2
1 year ago
vbSparkle preview

vbSparkle

GitHubairbus-cert/vbsparkle

VBScript & VBA source-to-source deobfuscator with partial-evaluation

code-analysisdefensive-toolsmalware-analysis+2
832 years ago
CVE-2024-41302-Bookea-tu-Mesa-is-vulnerable-to-SQL-Injection preview

CVE-2024-41302-Bookea-tu-Mesa-is-vulnerable-to-SQL-Injection

GitHubpatrickdeanramos/cve-2024-41302-bookea-tu-mesa-is-vulnerable-to-sql-injection

Bookea-tu-Mesa is vulnerable to SQL Injection

code-analysiseducationstatic-code-analysis+3
2 years ago
CVE-2023-31606 preview

CVE-2023-31606

GitHubmerbinr/cve-2023-31606

Documentation of CVE-2023-31606: a ReDoS vulnerability in Redcloth gem's sanitize_html function, with root cause analysis, CVSS 7.5 scoring, and…

educationpapers-researchstatic-code-analysis+2
23 years ago
LambdaGuard preview
Archived

LambdaGuard

GitHubskyscanner/lambdaguard

AWS Serverless Security

cloud-infrastructure-securitycloud-securityconfiguration-auditing+3
4004 years ago
Sourcetrail preview
Archived

Sourcetrail

GitHubcoatisoftware/sourcetrail

Sourcetrail - free and open-source interactive source explorer

code-analysiseducationreverse-engineering+2
16.5k4 years ago
exploit-CVE-2016-10033 preview

exploit-CVE-2016-10033

GitHubopsxcq/exploit-cve-2016-10033

PHPMailer < 5.2.18 Remote Code Execution exploit and vulnerable container

code-analysiseducationexploitation+6
4076 years ago
lightweight_static_analysis preview

lightweight_static_analysis

GitHubnccgroup/lightweight_static_analysis

Create useful, lightweight static analyses using open source tools + a tiny bit of your code

code-analysiseducationpenetration-testing+4
136 years ago