Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

1319 results

pocindex

0xmarcio/pocindex

Search public CVE proof-of-concept exploits from GitHub, Nuclei, ExploitDB, Metasploit and Vulhub, with CVSS, EPSS and CISA KEV context.

osintvulnerability-scannersexploit-frameworks+5

1.5k

48 minutes ago

cartography

cartography-cncf/cartography

Pulls infrastructure assets and their relationships from 30+ cloud, identity, and SaaS platforms into a Neo4j graph for security queries and…

cloud-infrastructure-securitycontainer-securitynetwork-mapping+8

4.1k1h 31m ago

gstack

garrytan/gstack

Use Garry Tan's exact Claude Code setup: 23 opinionated tools that serve as CEO, Designer, Eng Manager, Release Manager, Doc Engineer, and QA

vulnerability-scannerscode-analysisscripting-automation+8

127.4k2h 5m ago

worldmonitor

koala73/worldmonitor

Real-time global intelligence dashboard. AI-powered news aggregation, geopolitical monitoring, and infrastructure tracking in a unified situational…

osintreconnaissancenetwork-mapping+7

80.6k3h 17m ago

Tyr

cyberactivity/tyr

Tools collection to explore CVE and theirs associated data.

vulnerability-analysisinformation-gatheringutilities-frameworks+1

3h 33m ago

opencti

opencti-platform/opencti

Open Cyber Threat Intelligence Platform

ioc-managementosintthreat-feeds-aggregators+6

9.8k4h 40m ago

prowler

prowler-cloud/prowler

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.…

cloud-infrastructure-securitydefensive-toolsvulnerability-scanners+10

14.3k6h 4m ago

misp-objects

misp/misp-objects

Curated JSON object templates that define MISP attributes and relationship types for structured threat intelligence sharing and interoperable IOC…

ioc-managementthreat-feeds-aggregatorsmalware-analysis+3

1116h 12m ago

crowdsec

crowdsecurity/crowdsec

Open-source IDS/IPS and WAF engine that analyzes logs and HTTP requests to detect and block malicious IPs, leveraging a crowdsourced community…

defensive-toolsthreat-feeds-aggregatorsids-ips-evasion+6

14.5k6h 51m ago

vuln-list

aquasecurity/vuln-list

NVD, Ubuntu, Alpine

vulnerability-analysisthreat-intelligencecurated-resources

4627h 7m ago

TrueTree

themittenmac/truetree

A command line tool for pstree-like output on macOS with additional pid capturing capabilities

forensicsdigital-forensicsthreat-intelligence+1

2857h 8m ago

tenzir

tenzir/tenzir

Collect, parse, normalize, aggregate, store, query, and route security telemetry data at scale using pipeline-based dataflows for threat detection…

network-securitythreat-intelligenceincident-response+1

7547h 11m ago

rustnet

domcyrus/rustnet

Per-process network monitoring for your terminal with deep packet inspection. Cross-platform, sandboxed.

packet-sniffing-analysiscontainer-securityforensics+5

4.8k7h 16m ago

nuclei-templates

projectdiscovery/nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

vulnerability-scannersweb-vulnerability-scannersexploit-frameworks+6

12.8k7h 17m ago

ndaal_public_SBOM_Auditor

vpierre/ndaal_public_sbom_auditor

Offline single-binary web app that ingests CycloneDX, SPDX and syft SBOMs, runs an ensemble of CVE scanners, enriches findings with EPSS, CISA-KEV…

defensive-toolsioc-managementstatic-analysis+7

7h 40m ago

detection-rules

elastic/detection-rules

Develop, validate, and publish SIEM detection rules for Elastic Security, with Python CLI tooling, KQL parsing, Kibana integration, and packaged…

defensive-toolsthreat-intelligenceintrusion-detection+3

2.7k7h 44m ago

pipelock

luckypipewrench/pipelock

Open-source AI agent firewall that scans HTTP, MCP, A2A, and WebSocket traffic for exfiltration, SSRF, and prompt injection, emitting verifiable…

vulnerability-scannersids-ips-evasiondata-exfiltration+8

7927h 54m ago

connectors

opencti-platform/connectors

Collection of OpenCTI connectors that ingest and synchronize threat intelligence, IOCs, and CTI data from external sources like MISP and MITRE ATT&CK…

defensive-toolsioc-managementthreat-feeds-aggregators+5

5897h 56m ago

Previous12…74 Next