Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

1317 results

syswarden

duggytuxy/syswarden

Host-local Linux security orchestrator enforcing nftables policy with HIDS/HIPS telemetry, bounded threat-intelligence feeds, out-of-band WAAP log…

defensive-toolsconfiguration-auditingnetwork-security+4

397

9h 30m ago

vuln-list

aquasecurity/vuln-list

NVD, Ubuntu, Alpine

vulnerability-analysisthreat-intelligencecurated-resources

4629h 41m ago

pocindex

0xmarcio/pocindex

Search public CVE proof-of-concept exploits from GitHub, Nuclei, ExploitDB, Metasploit and Vulhub, with CVSS, EPSS and CISA KEV context.

osintvulnerability-scannersexploit-frameworks+5

1.5k9h 50m ago

worldmonitor

koala73/worldmonitor

Real-time global intelligence dashboard. AI-powered news aggregation, geopolitical monitoring, and infrastructure tracking in a unified situational…

osintreconnaissancenetwork-mapping+7

80.6k9h 52m ago

tenzir

tenzir/tenzir

Collect, parse, normalize, aggregate, store, query, and route security telemetry data at scale using pipeline-based dataflows for threat detection…

network-securitythreat-intelligenceincident-response+1

75410h 5m ago

yara-x

virustotal/yara-x

A rewrite of YARA in Rust.

defensive-toolsdisk-forensicsioc-management+14

1.2k10h 13m ago

maigret

soxoj/maigret

🕵️‍♂️ Collect a dossier on a person by username from 6K websites

osintreconnaissanceosint-social-engineering+8

36.5k10h 25m ago

Shadowbroker

bigbodycobain/shadowbroker

Real-time geospatial OSINT platform aggregating 60+ public telemetry feeds (ADS-B, AIS, satellites, CCTV) into a unified map with server-side recon…

osintreconnaissancenetwork-mapping+7

10.7k11h 25m ago

connectors

opencti-platform/connectors

Collection of OpenCTI connectors that ingest and synchronize threat intelligence, IOCs, and CTI data from external sources like MISP and MITRE ATT&CK…

defensive-toolsioc-managementthreat-feeds-aggregators+5

59011h 47m ago

Azure-Sentinel

azure/azure-sentinel

Cloud-native SIEM for intelligent security analytics for your entire enterprise.

defensive-toolscloud-securitythreat-intelligence+5

6.1k11h 59m ago

Tyr

cyberactivity/tyr

Tools collection to explore CVE and theirs associated data.

vulnerability-analysisinformation-gatheringutilities-frameworks+1

12h 5m ago

pmg

safedep/pmg

PMG protects developers, AI agents from malicious open source packages using proxy, sandbox and SafeDep's threat intelligence feed.

vulnerability-scannerscontainer-securitydynamic-analysis-sandboxing+6

46612h 23m ago

arkime

arkime/arkime

Arkime is an open source, large scale, full packet capturing, indexing, and database system.

defensive-toolspacket-sniffing-analysisnetwork-forensics+7

7.4k12h 47m ago

user-scanner

kaifcodec/user-scanner

Multi-platform OSINT scanner for email and username reconnaissance across 295+ vectors. Extracts profile metadata, checks account registrations, and…

osintreconnaissanceinformation-gathering+2

3.1k12h 53m ago

detection-rules

elastic/detection-rules

Develop, validate, and publish SIEM detection rules for Elastic Security, with Python CLI tooling, KQL parsing, Kibana integration, and packaged…

defensive-toolsthreat-intelligenceintrusion-detection+3

2.7k13h 42m ago

nl-kat-coordination

ssc-ict-innovatie/nl-kat-coordination

Modular network scanning framework that integrates diverse tools and external databases to detect vulnerabilities and configuration errors, producing…

vulnerability-scannersconfiguration-auditinginformation-gathering+2

18214h 28m ago

trufflehog

trufflesecurity/trufflehog

Find, verify, and analyze leaked credentials

vulnerability-scannersdynamic-analysis-sandboxingcode-analysis+6

27.4k14h 29m ago

SkillSpector

nvidia/skillspector

Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and…

static-analysisvulnerability-scannersdynamic-analysis-sandboxing+8

14.5k14h 48m ago

Previous 123…74 Next