Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
169 results
JShunter preview

JShunter

GitHubcc1a2b/jshunter

jshunter is a command-line tool designed for analyzing JavaScript files and extracting endpoints. This tool specializes in identifying sensitive…

api-securitydynamic-code-analysispenetration-testing+6
541
21 days ago
static-analysis preview

static-analysis

GitHubanalysis-tools-dev/static-analysis

Curated directory of static analysis (SAST) tools and linters for programming languages, configs, build tools, and CI, focused on improving code…

code-analysiscurated-resourcesdevsecops+5
14.8k2 days ago
raptor preview

raptor

GitHubgadievron/raptor

Autonomous security research framework integrating static analysis, binary analysis, fuzzing, LLM-powered vulnerability validation, exploit…

ai-assisted-reversingbinary-analysisdynamic-analysis-sandboxing+7
3.9k7h 12m ago
security-code-scan preview

security-code-scan

GitHubsecurity-code-scan/security-code-scan

Vulnerability Patterns Detector for C# and VB.NET

code-analysisstatic-code-analysisvulnerability-analysis
9713 years ago
wpbullet preview

wpbullet

GitHubwebarx-security/wpbullet

A static code analysis for WordPress (and PHP)

code-analysisstatic-code-analysisvulnerability-analysis+1
2407 years ago
jsluicepp preview

jsluicepp

GitHub0x999-x/jsluicepp

jsluice++ is a Burp Suite extension designed for passive and active scanning of JavaScript traffic using the CLI tool jsluice

api-security-testinginformation-gatheringreconnaissance+3
3052 years ago
airflowscan preview

airflowscan

GitHubnightwatchcybersecurity/airflowscan

Checklist and tools for increasing security of Apache Airflow

cloud-securityconfiguration-auditingdevsecops+2
325 years ago
appledb_rs preview

appledb_rs

GitHubsynacktiv/appledb_rs

Curated database of Apple internal artifacts (entitlements, frameworks, device versions) with API, CLI, and WebUI for iOS/macOS security research and…

curated-resourcesinformation-gatheringios-security+3
290 years ago
advisory preview

advisory

GitHubcarlosalbertotuma/advisory

Public security advisories and PoCs for vulnerabilities discovered in open-source web software, with root-cause analysis, CVE references,…

code-analysiscurated-resourceseducation+7
214 days ago
sast-scan-action preview

sast-scan-action

GitHuboffensive360/sast-scan-action

GitHub Action for Offensive360 SAST scans and SARIF results. See the open-source program for eligibility and setup.

api-security-testingcloud-securitycode-analysis+4
2 months ago
jstachio__jstachio_CVE-2023-33962_1-0-0 preview

jstachio__jstachio_CVE-2023-33962_1-0-0

GitHubshoucheng3/jstachio__jstachio_cve-2023-33962_1-0-0

Type-safe Java Mustache templating engine with compile-time template validation, static value binding, and extensible escaping for HTML and other…

code-analysiseducationgeneral-purpose-utilities+2
1 year ago
gradle-static-analysis-plugin preview
Archived

gradle-static-analysis-plugin

GitHubnovoda/gradle-static-analysis-plugin

Easy setup of static analysis tools for Android and Java projects.

android-securitycode-analysisdevsecops+3
4034 years ago
ghidrecomp preview

ghidrecomp

GitHubclearbluejar/ghidrecomp

Python Command-Line Ghidra Decompiler

binary-analysisreverse-engineeringstatic-code-analysis+1
1599 months ago
yls preview

yls

GitHubavast/yls

YARA Language Server

code-analysismalware-analysisstatic-code-analysis
758 months ago
ncccodenavi preview

ncccodenavi

GitHubnccgroup/ncccodenavi

NCC Code Navigator

code-analysisinformation-gatheringstatic-code-analysis+2
5410 years ago
alter-zero preview

alter-zero

GitHublinuztx/alter-zero

RAM efficient terminal agent harness for coding, cybersecurity, and automation.

ai-securitycode-analysiscommand-and-control+6
435 days ago
CVE-2026-56158-.NET-Framework-RCE-PoC-Exploit preview

CVE-2026-56158-.NET-Framework-RCE-PoC-Exploit

GitHubsam00/cve-2026-56158-.net-framework-rce-poc-exploit

Generates five .NET deserialization payload formats for CVE-2026-56158, delivers them over HTTP/SOAP/JSON endpoints, includes mock server, scanner,…

exploitationpayload-developmentpayload-generation+4
12 months ago
codehaus-plexus__plexus-utils_CVE-2022-4244_3-0-23 preview

codehaus-plexus__plexus-utils_CVE-2022-4244_3-0-23

GitHubshoucheng3/codehaus-plexus__plexus-utils_cve-2022-4244_3-0-23

Java utility library with patched CVE-2022-4244 vulnerability, providing common helper classes for I/O, reflection, and CLI argument parsing in…

code-analysisgeneral-purpose-utilitiesstatic-code-analysis+1
1 year ago
Previous12…10Next