Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
155 results
pyt preview

pyt

GitHubpython-security/pyt

A Static Analysis Tool for Detecting Security Vulnerabilities in Python Web Applications

code-analysisstatic-analysisstatic-code-analysis+2
2.2k
6 years ago
semgrep-rules preview

semgrep-rules

GitHub0xdea/semgrep-rules

A collection of my Semgrep rules to facilitate vulnerability research.

binary-analysiscode-analysiscurated-resources+3
8755 days ago
horusec preview

horusec

GitHubzupit/horusec

Horusec is an open source tool that improves identification of vulnerabilities in your project with just one command.

cloud-securitycode-analysiscontainer-security+5
1.3k3 years ago
kubesec preview

kubesec

GitHubcontrolplaneio/kubesec

Security risk analysis for Kubernetes resources

cloud-infrastructure-securitycloud-securityconfiguration-auditing+7
1.5k3 months ago
cfn_nag preview

cfn_nag

GitHubstelligent/cfn_nag

Linting tool for CloudFormation templates

cloud-securityconfiguration-auditingdevsecops+3
1.3k2 years ago
ngrev preview

ngrev

GitHubmgechev/ngrev

Tool for reverse engineering of Angular applications

code-analysisreverse-engineeringstatic-code-analysis
1.6k5 years ago
agentic-radar preview

agentic-radar

GitHubsplx-ai/agentic-radar

A security scanner for your LLM agentic workflows

adversarial-attackai-securitydevsecops+5
1.1k9 months ago
regexploit preview

regexploit

GitHubdoyensec/regexploit

Find regular expressions which are vulnerable to ReDoS (Regular Expression Denial of Service)

fuzzingstatic-code-analysisvulnerability-analysis
8515 years ago
android-check preview

android-check

GitHubnoveogroup/android-check

Static code analysis plugin for Android project. (Checkstyle, PMD)

android-securitycode-analysisdevsecops+1
2658 years ago
rips-scanner preview

rips-scanner

GitHubrobocoder/rips-scanner

RIPS - A static source code analyser for vulnerabilities in PHP scripts

devsecopsstatic-code-analysisvulnerability-analysis+2
3234 years ago
ASST preview

ASST

GitHubowasp/asst

OWASP ASST (Automated Software Security Toolkit) | A Novel Open Source Web Security Scanner.

code-analysiseducationstatic-code-analysis+2
1881 year ago
whalescan preview

whalescan

GitHubnccgroup/whalescan

Whalescan is a vulnerability scanner for Windows containers, which performs several benchmark checks, as well as checking for CVEs/vulnerable…

container-securitydevsecopsmisconfiguration+2
1553 years ago
hardcodes preview

hardcodes

GitHubs0md3v/hardcodes

find hardcoded strings from source code

code-analysisgeneral-purpose-utilitiessecret-detection+1
2856 years ago
RegEx-DoS preview

RegEx-DoS

GitHubjagracey/regex-dos

👮 👊 RegEx Denial of Service (ReDos) Scanner

defensive-toolsdevsecopsstatic-code-analysis+2
1828 years ago
Creosote preview

Creosote

GitHubadvanced-threat-research/creosote

Creosote is our solution to searching for the tarfile vulnerability described by CVE-2007-4559.

code-analysismisconfigurationstatic-code-analysis+3
823 years ago
autoSource preview

autoSource

GitHubshubhamshubhankar/autosource

Automated static code analysis framework integrated with SonarQube for early vulnerability detection in source code by scanning Git repositories…

code-analysisdevsecopsstatic-code-analysis+1
707 years ago
UTopia preview

UTopia

GitHubsamsung/utopia

UT based automated fuzz driver generation

code-analysisfuzzingstatic-code-analysis+1
1701 year ago
cq preview

cq

GitHubchris-anley/cq

CQ, a code security scanner

code-analysisdevsecopsstatic-code-analysis+1
996 months ago
Previous1…6789Next