Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

731 results

jarm

salesforce/jarm

Active TLS server fingerprinting tool that sends crafted Client Hello packets to generate unique JARM hashes for identifying server configurations,…

information-gatheringnetwork-securityreconnaissance+1

1.3k

1 month ago

Zeek-Endpoint-Enrichment

corelight/zeek-endpoint-enrichment

Zeek log enrichment tool that adds host information and known entity references to enhance network security monitoring and incident response.

information-gatheringlog-analysisnetwork-security+1

42 months ago

ICS-Security-Tools

iti/ics-security-tools

Tools, tips, tricks, and more for exploring ICS Security.

curated-resourcesdefensive-toolseducation+4

2.0k1 year ago

Royal_APT

nccgroup/royal_apt

Royal APT - APT15 - Related Information from NCC Group Cyber Defense Operations Research

command-and-controlcurated-resourcesintrusion-detection+3

528 years ago

Archived

WhoDat

mitrecnd/whodat

Pivotable Reverse WhoIs / PDNS Fusion with Registrant Tracking & Alerting plus API for automated queries (JSON/CSV/TXT)

api-securitydata-exfiltrationdns-analysis+5

1594 years ago

DGA

andrewaeva/dga

The repository that contains the algorithms for generating domain names, dictionaries of malicious domain names. Developed to research the…

dns-analysiseducationmachine-learning+4

2269 years ago

MaliciousBrowserExtensions

gherardofiori/maliciousbrowserextensions

This Repository is created after my own research into malicious browser extensions, by brining the work of many others and news articles into one…

curated-resourcesdynamic-analysis-sandboxingeducation+4

302 days ago

netlas-cookbook

netlas-io/netlas-cookbook

The goal of this guide is very simple - to teach anyone interested in cyber security, regardless of their knowledge level, how to make the most of…

curated-resourcesdigital-forensicseducation+9

8891 year ago

xz-backdoor-github

emirkmo/xz-backdoor-github

History of commits related to the xz backdoor Discovered On March 29, 2024: CVE-2024-3094.

curated-resourcesdigital-forensicseducation+3

112 years ago

Argus

jasonxtn/argus

The Ultimate Information Gathering Toolkit

crawlerdns-analysisemail-harvesting+7

4.1k9 months ago

patoolkit

pentesteracademy/patoolkit

PA Toolkit is a collection of traffic analysis plugins focused on security

dns-analysiseducationnetwork-security+3

4336 years ago

CVE-2021-44228

fireeye/cve-2021-44228

OpenIOC rules to facilitate hunting for indicators of compromise

forensicsincident-responseioc-management+3

374 years ago

VolWeb

k1nd0ne/volweb

A centralized and enhanced memory analysis platform

digital-forensicseducationforensics+5

5381 month ago

veilgate

c0oki3s/veilgate

Asymmetric defense against adversarial AI agents. VeilGate evaluates each incoming request, redirects suspected agents into a per-IP-consistent…

ai-securityanomaly-detectionanti-bot+6

152 months ago

attackgen

mrwadams/attackgen

AttackGen is a cybersecurity incident response testing tool that leverages the power of large language models and the comprehensive MITRE ATT&CK…

ai-securityctfeducation+5

1.2k1 day ago

Minesweeper

codingo/minesweeper

A Burpsuite plugin (BApp) to aid in the detection of scripts being loaded from over 23000 malicious cryptocurrency mining domains (cryptojacking).

cryptographythreat-intelligencevulnerability-scanners+1

2037 years ago

memOptix

blueteam0ps/memoptix

A Jupyter notebook to assist with the analysis of the output generated from Volatility memory extraction framework.

digital-forensicsforensicsincident-response+2

983 years ago

decider

cisagov/decider

A web application that assists network defenders, analysts, and researchers in the process of mapping adversary behaviors to the MITRE ATT&CK®…

curated-resourceseducationpenetration-testing+1

1.2k1 year ago

Previous 1 234…41 Next