Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
130 results
gitgalaxy preview

gitgalaxy

GitLabsquid-protocol1/gitgalaxy

AST-free heuristic knowledge graph engine for deep repository intelligence and zero-trust security scanning. Integrates as a GitLab CI/CD component,…

code-analysisdevsecopsmalware-analysis+3
15 days ago
raptor preview

raptor

GitHubgadievron/raptor

Autonomous security research framework integrating static analysis, binary analysis, fuzzing, LLM-powered vulnerability validation, exploit…

ai-assisted-reversingbinary-analysisdynamic-analysis-sandboxing+7
3.7k7h 58m ago
security-code-scan preview

security-code-scan

GitHubsecurity-code-scan/security-code-scan

Vulnerability Patterns Detector for C# and VB.NET

code-analysisstatic-code-analysisvulnerability-analysis
9753 years ago
wpbullet preview

wpbullet

GitHubwebarx-security/wpbullet

A static code analysis for WordPress (and PHP)

code-analysisstatic-code-analysisvulnerability-analysis+1
2393 years ago
jsluicepp preview

jsluicepp

GitHub0x999-x/jsluicepp

jsluice++ is a Burp Suite extension designed for passive and active scanning of JavaScript traffic using the CLI tool jsluice

api-security-testinginformation-gatheringreconnaissance+3
3032 years ago
airflowscan preview

airflowscan

GitHubnightwatchcybersecurity/airflowscan

Checklist and tools for increasing security of Apache Airflow

cloud-securityconfiguration-auditingdevsecops+2
325 years ago
appledb_rs preview

appledb_rs

GitHubsynacktiv/appledb_rs

Curated database of Apple internal artifacts (entitlements, frameworks, device versions) with API, CLI, and WebUI for iOS/macOS security research and…

curated-resourcesinformation-gatheringios-security+3
2710 months ago
gradle-static-analysis-plugin preview
Archived

gradle-static-analysis-plugin

GitHubnovoda/gradle-static-analysis-plugin

Easy setup of static analysis tools for Android and Java projects.

android-securitycode-analysisdevsecops+3
4034 years ago
yls preview

yls

GitHubavast/yls

Language server for YARA rule development, providing code completion, linting, formatting, navigation, and debugging support inside IDEs.

code-analysismalware-analysisstatic-code-analysis
746 months ago
ghidrecomp preview

ghidrecomp

GitHubclearbluejar/ghidrecomp

Python Command-Line Ghidra Decompiler

binary-analysisreverse-engineeringstatic-code-analysis+1
1567 months ago
wpBullet preview

wpBullet

GitHubowasp/wpbullet
code-analysispenetration-testingstatic-code-analysis+3
624 years ago
ncccodenavi preview

ncccodenavi

GitHubnccgroup/ncccodenavi

NCC Code Navigator

code-analysisinformation-gatheringstatic-code-analysis+2
5410 years ago
hardcodes preview

hardcodes

GitHubs0md3v/hardcodes

find hardcoded strings from source code

code-analysisgeneral-purpose-utilitiessecret-detection+1
2855 years ago
CVE-2026-56158-.NET-Framework-RCE-PoC-Exploit preview

CVE-2026-56158-.NET-Framework-RCE-PoC-Exploit

GitHubsam00/cve-2026-56158-.net-framework-rce-poc-exploit
exploitationpayload-developmentpayload-generation+4
116 days ago
obridge preview

obridge

GitHubepicosy/obridge

obride with CVE-2018-25075

code-analysisdatabase-securitygeneral-purpose-utilities+1
2 years ago
cve-2020-9373-netgear-r6400 preview

cve-2020-9373-netgear-r6400

GitHublimingxi6/cve-2020-9373-netgear-r6400

解决网络安全漏洞

binary-analysisbinary-exploitationembedded-systems-security+6
8 days ago
auth-header-trust-rules preview

auth-header-trust-rules

GitHubbk-security/auth-header-trust-rules

Semgrep rules that flag header-trust auth bypass patterns (CVE-2025-29927 class). Companion to bk-security.github.io.

authentication-authorizationcode-analysiseducation+3
3 months ago
codehaus-plexus__plexus-utils_CVE-2022-4244_3-0-23 preview

codehaus-plexus__plexus-utils_CVE-2022-4244_3-0-23

GitHubshoucheng3/codehaus-plexus__plexus-utils_cve-2022-4244_3-0-23
code-analysisgeneral-purpose-utilitiesstatic-code-analysis+1
1 year ago
Previous12…8Next