Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

142 results

hotpatch-for-apache-log4j2

corretto/hotpatch-for-apache-log4j2

An agent to hotpatch the log4j RCE from CVE-2021-44228.

defensive-toolsexploitationincident-response+2

497

3 years ago

jfrog-CVE-2022-21449

jfrog/jfrog-cve-2022-21449

Scans compiled Java archives (JAR/WAR) for ECDSA algorithm usage to detect CVE-2022-21449 vulnerability. Recursively examines .class files with…

code-analysisstatic-analysissupply-chain-security+1

374 years ago

Detection-script-for-cve-2021-23358

ekamsinghwalia/detection-script-for-cve-2021-23358

Detection script for cve-2021-23358

code-analysisstatic-analysissupply-chain-security+2

13 years ago

loguccino

3pplus/loguccino

Scan and patch tool for CVE-2021-44228 and related log4j concerns.

devsecopssupply-chain-securityvulnerability-analysis+1

4 years ago

Archived

local-log4j-vuln-scanner

hillu/local-log4j-vuln-scanner

[Moved to Codeberg] Simple local scanner for vulnerable log4j instances

code-analysisdevsecopsstatic-analysis+3

3714 years ago

confused

visma-prodsec/confused

Tool to check for dependency confusion vulnerabilities in multiple package management systems

supply-chain-securityvulnerability-analysis

7903 years ago

deptrust

clidey/deptrust

CLI and MCP server that checks package versions for known vulnerabilities across 14+ ecosystems including npm, PyPI, crates.io, Go modules, and…

api-securitycloud-securitydevsecops+4

619 days ago

cve-2022-42889-jmeter

qainsights/cve-2022-42889-jmeter

Script to handle CVE 2022-42889

general-purpose-utilitiesscripting-automationsupply-chain-security+1

73 years ago

CVE-2024-3094-XZ-Utils-Check

jbnetwork-git/cve-2024-3094-xz-utils-check

Shell script to check if your system has a vulnerable version of XZ Utils affected by CVE-2024-3094, enabling quick detection of the supply-chain…

general-purpose-utilitiesscripting-automationsupply-chain-security+2

32 years ago

jfrog-CVE-2022-24675

jfrog/jfrog-cve-2022-24675

Shell script to recursively scan folders for Go binaries using insecure pem.Decode function, detecting vulnerable or stripped binaries for…

binary-analysiscode-analysisstatic-code-analysis+2

4 years ago

aws__aws-sdk-java_CVE-2022-31159_1-12-2600

shoucheng3/aws__aws-sdk-java_cve-2022-31159_1-12-2600

Java SDK for integrating with Amazon Web Services, providing secure API access to S3, DynamoDB, EC2, and more, with built-in authentication,…

api-securityauthentication-authorizationcloud-infrastructure-security+3

1 year ago

CVE-2024-3094-checker

hazemkya/cve-2024-3094-checker

Bash script to detect and remediate CVE-2024-3094, a critical supply-chain vulnerability in the XZ Utils library, with automatic safe version…

misconfigurationscripting-automationsupply-chain-security+2

2 years ago

log4jjndilookupremove

lukepasek/log4jjndilookupremove

A simple script to remove Log4J JndiLookup.class from jars in a given directory, to temporarily protect from CVE-2021-45046 and CVE-2021-44228.

incident-responsemisconfigurationscripting-automation+2

4 years ago

CVE-2024-3094

fractal-tess/cve-2024-3094

Bash script to detect and remediate vulnerable xz-utils versions (5.6.0/5.6.1) by replacing them with a stable, uncompromised build from source.

general-purpose-utilitiesscripting-automationsupply-chain-security+2

2 years ago

codehaus-plexus__plexus-archiver_CVE-2018-1002200_3-5

shoucheng3/codehaus-plexus__plexus-archiver_cve-2018-1002200_3-5

Java library for creating and extracting archives (ZIP, TAR, JAR) with support for various compression formats. Note: version 3.5 contains a fix for…

code-analysisgeneral-purpose-utilitiessupply-chain-security+1

1 year ago

codehaus-plexus__plexus-archiver_CVE-2023-37460_4-7-1

shoucheng3/codehaus-plexus__plexus-archiver_cve-2023-37460_4-7-1

Java library for creating and extracting archives (ZIP, tar, JAR) with integrated security patch for a reported vulnerability, used as a dependency…

general-purpose-utilitiessupply-chain-securityutilities-frameworks+1

10 months ago

syft

anchore/syft

CLI tool and library for generating a Software Bill of Materials from container images and filesystems

container-escapecontainer-securitydevsecops+3

9.4k7 days ago

grype

anchore/grype

A vulnerability scanner for container images and filesystems

container-escapecontainer-securitydevsecops+4

12.8k11h 50m ago

Previous12…8 Next