Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
153 results
progpilot preview

progpilot

GitHubdesignsecurity/progpilot

PHP static application security testing (SAST) tool that performs taint analysis to detect XSS, SQL injection, and other vulnerabilities using…

code-analysisstatic-code-analysisvulnerability-scanners
368
1 year ago
Bughound preview

Bughound

GitHubmhaskar/bughound

Static code analysis tool based on Elasticsearch

code-analysisdevsecopsstatic-code-analysis+2
1305 years ago
ghostrace preview

ghostrace

GitHubvusec/ghostrace

Proof-of-concept and static analysis toolkit for finding speculative race condition (SCUAF) gadgets in Linux kernel. Includes 1200+ gadget dataset.

binary-exploitationexploitationpapers-research+2
742 years ago
scodescanner preview

scodescanner

GitHubagrawalsmart7/scodescanner

Command-line static analysis scanner that detects critical vulnerabilities in PHP and YAML source code using custom semgrep rules, with Jira and…

code-analysisdevsecopsstatic-code-analysis+1
1623 years ago
sast-rules preview

sast-rules

GitLabgitlab-org/security-products/sast-rules

Curated Semgrep rule repository for GitLab SAST, providing static analysis patterns to detect security vulnerabilities across multiple programming…

code-analysisdevsecopseducation+2
3020h 7m ago
wpBullet preview

wpBullet

GitHubowasp/wpbullet

Static code analysis scanner for WordPress plugins and themes. Detects vulnerabilities like XSS and SQL injection via modular, extensible…

code-analysispenetration-testingstatic-code-analysis+3
624 years ago
C0deVari4nt preview

C0deVari4nt

GitHubwhitesquirrell/c0devari4nt

A variant analysis and visualisation tool that scans codebases for similar vulnerabilities

code-analysisstatic-code-analysisvulnerability-analysis
754 years ago
glasgo preview

glasgo

GitHubnccgroup/glasgo

Go static analysis tool that checks for security issues using an AST.

code-analysisstatic-code-analysisvulnerability-analysis
297 years ago
Weggli_rules_SSTIC2023 preview

Weggli_rules_SSTIC2023

GitHubsynacktiv/weggli_rules_sstic2023

Curated weggli queries for static analysis of C/C++ code to identify dangerous functions, stack issues, and malloc overflow vulnerabilities.

code-analysiscurated-resourcesstatic-code-analysis+1
323 years ago
cobol-shield preview

cobol-shield

GitHubluiscastellanos-dev/cobol-shield

Security hardening toolkit for COBOL legacy systems — invisible Unicode detection, format boundary analysis, source transformation integrity

defensive-toolsdevsecopsstatic-code-analysis+2
9 days ago
SecretScrub preview

SecretScrub

GitHubnccgroup/secretscrub

Processes SARIF output from static analysis tools to detect and redact hard-coded secrets in source code, creating a clean copy without the original…

configuration-auditingdevsecopssecret-detection+2
52 years ago
CVE-2026-13158 preview

CVE-2026-13158

GitHubminhhk68/cve-2026-13158

Proof-of-concept exploit and technical advisory for an Admin+ arbitrary file upload to remote code execution vulnerability in Everest Toolkit…

exploitationpayload-developmentpenetration-testing+4
11 month ago
sonarcloud-scan preview

sonarcloud-scan

Bitbucketsonarsource/sonarcloud-scan

A Bitbucket Pipe to trigger SonarCloud analysis

code-analysisdevsecopsstatic-analysis+2
2 months ago
CVE-2023-31606 preview

CVE-2023-31606

GitHubmerbinr/cve-2023-31606

Documentation of CVE-2023-31606: a ReDoS vulnerability in Redcloth gem's sanitize_html function, with root cause analysis, CVSS 7.5 scoring, and…

educationpapers-researchstatic-code-analysis+2
23 years ago
gokart preview
Archived

gokart

GitHubpraetorian-inc/gokart

A static analysis tool for securing Go code

code-analysisdevsecopsmisconfiguration+3
2.2k2 years ago
gradle-static-analysis-plugin preview
Archived

gradle-static-analysis-plugin

GitHubnovoda/gradle-static-analysis-plugin

Easy setup of static analysis tools for Android and Java projects.

android-securitycode-analysisdevsecops+3
4034 years ago
infer preview

infer

GitHubfacebook/infer

A static analyzer for Java, C, C++, and Objective-C

code-analysisdevsecopsstatic-analysis+1
15.7k8 days ago
OSCE3-Complete-Guide preview

OSCE3-Complete-Guide

GitHubjoasasantos/osce3-complete-guide

OSWE, OSEP, OSED, OSEE

binary-exploitationcurated-resourceseducation+9
3.9k8 months ago
Previous1234…9Next