Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

13802 results

sysbox

nestybox/sysbox

An open-source, next-generation "runc" that empowers rootless containers to run workloads such as Systemd, Docker, Kubernetes, just like VMs.

cloud-infrastructure-securitycontainer-securitysecurity-virtualization+2

3.9k

10 days ago

xed

intelxed/xed

Low-level library for encoding and decoding IA32/Intel64 x86 instructions, exposing APIs for instruction length, operands, categories, control-flow…

static-analysiscode-analysisreverse-engineering+3

1.6k2 months ago

memory-forensic

securityronin/memory-forensic

Walk any memory dump. Find what's hidden. Linux + Windows kernel forensics from a single static Rust binary — no Python required.

ioc-managementmemory-forensicsnetwork-forensics+7

122 months ago

dex

dexidp/dex

OpenID Connect (OIDC) identity and OAuth 2.0 provider with pluggable connectors

authentication-authorizationcloud-infrastructure-securityidentity-management+4

11.2k2 days ago

melange

chainguard-dev/melange

Compiles source code into auditable, signed APK packages using declarative pipelines for Wolfi/Alpine, with multi-architecture QEMU emulation and…

container-securitydevsecopsutilities-frameworks+1

62916h 55m ago

serverless-application-model

aws/serverless-application-model

Transforms SAM templates into CloudFormation resources, generating Lambda functions, IAM roles, and policies with built-in serverless best practices.

cloud-infrastructure-securityserverless-securitycloud-security+1

9.6k5 days ago

AngryOxide

ragnt/angryoxide

Offensive 802.11 auditing tool that automates WPA/WPA2 handshake and PMKID capture using deauthentication, rogue-client, and channel-switch attacks,…

packet-sniffing-analysiswi-fi-auditingpassword-attacks+5

2.0k1 day ago

bluez

bluez/bluez

Linux Bluetooth protocol stack with daemons, command-line clients, HCI monitor, and support for BR/EDR, LE, Mesh, audio profiles, providing device…

general-purpose-utilitiespacket-sniffing-analysisbluetooth-security+3

1.2k22h 57m ago

openwisp-controller

openwisp/openwisp-controller

Network and WiFi controller: provisioning, configuration management and updates, (pull via openwisp-config or push via SSH), x509 PKI management and…

iot-securitynetwork-access-controlnetwork-security+3

79217h 47m ago

anew

tomnomnom/anew

A tool for adding new lines to files, skipping duplicates

general-purpose-utilitiesscripting-automationutilities-frameworks

1.7k4 years ago

unfurl

tomnomnom/unfurl

Pull out bits of URLs provided on stdin

general-purpose-utilitiesreconnaissanceinformation-gathering+1

1.3k4 years ago

fabric

fabric/fabric

Simple, Pythonic remote execution and deployment.

general-purpose-utilitiesscripting-automationremote-access-tool

15.5k6 months ago

qubes-core-admin

qubesos/qubes-core-admin

Manages the core lifecycle of Qubes OS domains via a Python admin API, handling secure compartmentalization with Xen and exposing an event system for…

defensive-toolssecurity-virtualizationutilities-frameworks

1488 days ago

libsigrok

sigrokproject/libsigrok

C library providing a portable API for acquiring signals from logic analyzers, oscilloscopes, multimeters, and other test instruments, with…

embedded-systems-securitygeneral-purpose-utilitieshardware-hacking+4

4482 years ago

extundelete

cherojeong/extundelete

Undelete and recover accidentally erased files from ext3 and ext4 filesystems, using inode scanning and block recovery for forensic and data-loss…

disk-forensicsdata-recoverydigital-forensics

5410 years ago

user.js

arkenfox/user.js

Firefox hardening template that applies privacy and security settings to reduce tracking, fingerprinting, and telemetry while preserving core browser…

defensive-toolsconfiguration-auditingweb-security+2

12.9k1 month ago

ddrescue

gnu-mirror-unofficial/ddrescue

Copies data from damaged or failing storage devices, handles read errors, and performs efficient rescue operations to recover as much data as…

disk-forensicsdata-recoverydigital-forensics

16 years ago

mitmproxy_rs

mitmproxy/mitmproxy_rs

Rust components for traffic interception and redirection, enabling WireGuard device proxying and local app redirection across macOS, Windows, and…

web-proxies-interceptionmobile-app-pentestingapi-security-testing+2

4617 days ago

Previous 1…818283…100 Next