Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
575 results
firecracker preview

firecracker

GitHubfirecracker-microvm/firecracker

Secure and fast microVMs for serverless computing.

cloud-infrastructure-securitycloud-securitycontainer-security+3
37.5k
6 days ago
kviklet preview

kviklet

GitHubkviklet/kviklet

Pull Request-like Review/Approval flow for database queries. For compliant but smooth Engineering access to production.

authentication-authorizationcloud-securitydatabase-security+1
63219h 32m ago
informer preview

informer

GitHubpaulpierre/informer

A Telegram Mass Surveillance Bot in Python

crawlerdata-exfiltrationimpersonation-tools+3
1.7k1 year ago
parsec-cloud preview

parsec-cloud

GitHubscille/parsec-cloud

Open source Dropbox-like file sharing with full client encryption !

authentication-authorizationcloud-securityencryption-decryption-tools+1
3111 day ago
CiclopeClic preview

CiclopeClic

GitHubpericena/ciclopeclic

Security awareness training tool for authorized phishing simulations and internal IT audits

ai-securityeducationpenetration-testing+4
154 months ago
http-pulse_ssl_vpn.nse preview

http-pulse_ssl_vpn.nse

GitHubr00tpgp/http-pulse_ssl_vpn.nse

Nmap NSE script to detect Pulse Secure SSL VPN file disclosure CVE-2019-11510

exploitationinformation-gatheringpenetration-testing+3
187 years ago
restic preview

restic

GitHubrestic/restic

Fast, secure, efficient backup program

cloud-securitycryptographydata-recovery+3
36.7k3 days ago
cloudflared preview

cloudflared

GitHubcloudflare/cloudflared

Client for Cloudflare Tunnel enabling secure outbound-only connections to origins via Zero Trust architecture. Supports HTTP, WebSocket, SSH, and RDP…

api-securitycloud-infrastructure-securitycloud-security+3
16.2k10h 40m ago
CRT preview

CRT

GitHubcrowdstrike/crt

Audits Azure AD and Exchange Online configurations for hard-to-find permissions, federation trusts, mail forwarding rules, and delegated access to…

cloud-infrastructure-securitycloud-securityconfiguration-auditing+1
7603 years ago
Threat-Intelligence-Alerts preview

Threat-Intelligence-Alerts

GitHubnccgroup/threat-intelligence-alerts

Welcome to the NCC Group Threat Intelligence Alert repo, here you will find the alerts which we have raised to our customers regarding intelligence…

curated-resourcesincident-responsethreat-intelligence
253 years ago
tunnelx preview

tunnelx

GitHubprojectdiscovery/tunnelx

TunnelX is a lightweight ingress tunneling tool designed to create a secure SOCKS5 proxy server for routing network traffic.

authenticationcloud-securitynetwork-security+3
31 month ago
secure-boot-cert-servicing preview

secure-boot-cert-servicing

GitHubets-mse/secure-boot-cert-servicing

Standalone assessment and servicing for the Secure Boot 2011 to 2023 certificate rollover (CVE-2023-24932 / KB5025885). Assess-only by default; no…

configuration-auditingfirmware-analysisvulnerability-analysis
2 months ago
CVE-2024-6387 preview

CVE-2024-6387

GitHubgrupooruss/cve-2024-6387

Python script to scan and secure SSH configurations against the CVE-2024-6387 race condition vulnerability, with automated LoginGraceTime adjustment…

configuration-auditingnetwork-securitypenetration-testing+3
22 years ago
lCTT-Apple-Silicon--Resonance-Vulnerability-CVE-2024-23296 preview

lCTT-Apple-Silicon--Resonance-Vulnerability-CVE-2024-23296

GitHubsimoesctt/lctt-apple-silicon--resonance-vulnerability-cve-2024-23296

Research on a temporal coherence vulnerability in Apple Silicon M-series chips, exploiting golden ratio harmonic clock frequencies to potentially…

educationembedded-systems-securityexploitation+3
8 months ago
aws__aws-sdk-java_CVE-2022-31159_1-12-2600 preview

aws__aws-sdk-java_CVE-2022-31159_1-12-2600

GitHubshoucheng3/aws__aws-sdk-java_cve-2022-31159_1-12-2600

Java SDK for integrating with Amazon Web Services, providing secure API access to S3, DynamoDB, EC2, and more, with built-in authentication,…

api-securityauthentication-authorizationcloud-infrastructure-security+3
1 year ago
gatekeeper-cve-2020-8554 preview

gatekeeper-cve-2020-8554

GitHubalebedev87/gatekeeper-cve-2020-8554

OPA Gatekeeper constraint policy that detects and prevents Kubernetes clusters from being vulnerable to CVE-2020-8554, enforcing secure configuration.

cloud-infrastructure-securitycloud-securityconfiguration-auditing+3
5 years ago
metabadger preview
Archived

metabadger

GitHubsalesforce/metabadger

Prevent SSRF attacks on AWS EC2 via automated upgrades to the more secure Instance Metadata Service v2 (IMDSv2).

cloud-infrastructure-securitycloud-securityconfiguration-auditing+3
1431 year ago
secure-headers-project preview

secure-headers-project

GitHubowasp/secure-headers-project

OWASP knowledge base and validator for HTTP security response headers, providing recommendations, statistics, and automated configuration checks.

configuration-auditingcurated-resourcesdefensive-tools+5
2202 days ago
Previous1…456…32Next