Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
29 results
pgaudit preview

pgaudit

GitHubpgaudit/pgaudit

PostgreSQL Audit Extension

configuration-auditingdatabase-securityforensics+1
1.7k25 days ago
np-audit preview

np-audit

GitHubkoblers/np-audit

Static security analysis for npm packages. Detects obfuscated code, malicious patterns, and known vulnerabilities before installation.

code-analysismalware-analysissecret-detection+3
71 month ago
wifite2 preview

wifite2

GitHubderv82/wifite2

Rewrite of the popular wireless network auditor, "wifite"

password-attackspenetration-testingwi-fi-auditing+1
8.1k19 days ago
OSXAuditor preview

OSXAuditor

GitHubjipegit/osxauditor

OS X Auditor is a free Mac OS X computer forensics tool

digital-forensicsdisk-forensicsforensics+4
3.1k6 years ago
pcc preview

pcc

GitHubsektioneins/pcc

Automated PHP configuration auditor that scans php.ini for security misconfigurations, supports CLI and web modes, and outputs results in text, HTML,…

code-analysisconfiguration-auditingvulnerability-scanners
8186 months ago
tailsnitch preview

tailsnitch

GitHubadversis/tailsnitch

A security auditor for Tailscale configurations. Scans your tailnet for misconfigurations, overly permissive access controls, and security best…

cloud-securityconfiguration-auditingdevsecops+4
1.1k5 months ago
flounder preview

flounder

GitHubadshao/flounder

Autonomous white-hat security auditor for AI-driven code review, bug bounty research, exploit construction, and execution-grounded verification.

ai-securitycode-analysisdynamic-analysis-sandboxing+5
3301 day ago
sec-af preview

sec-af

GitHubagent-field/sec-af

AI-native code security auditor on AgentField that proves exploitability with verdicts, traces, and actionable evidence.

ai-securitycode-analysisdevsecops+7
1963 days ago
REC2 preview

REC2

GitHubg0h4n/rec2

REC2 (Rusty External Command and Control) is client and server tool allowing auditor to execute command from VirusTotal and Mastodon APIs written in…

command-and-controlpayload-developmentpenetration-testing+3
1612 years ago
Beleth preview

Beleth

GitHubchokepoint/beleth

Multi-threaded SSH Password Auditor

password-attackspassword-crackingpenetration-testing
9312 years ago
raccoon preview

raccoon

GitHubnccgroup/raccoon

Salesforce object access auditor

cloud-infrastructure-securitycloud-securityconfiguration-auditing+4
1183 years ago
oversight preview

oversight

GitHubrakosn1cek/oversight

A lightweight security auditor and sandbox for shell scripts. Oversight combines a Static Analysis engine (Rust) with Dynamic Enforcement (Linux…

code-analysisdevsecopsdynamic-analysis-sandboxing+7
3929 days ago
sshfinder preview

sshfinder

GitHubkabiri-labs/sshfinder

Parallel SSH service discovery and security auditor that scans any port, validates SSH banners, and audits authentication methods, weak cryptography,…

cryptographyinformation-gatheringnetwork-security+5
325 days ago
asterion-network-minotaur preview

asterion-network-minotaur

GitHubrodhnin/asterion-network-minotaur

Network and domain security auditor scanning Windows Active Directory, Linux systems, and network infrastructure with AI-powered hardening guides…

ai-securitycloud-securityconfiguration-auditing+5
33 months ago
directus-security preview

directus-security

GitHubperufitlife/directus-security

Keyless active-probe security auditor for Directus CMS. Proves public-role data exposure, user enumeration, unauthenticated version/schema leaks,…

api-security-testingcrawlerdevsecops+6
2 months ago
CVE-2026-23918-Passive-Audit preview

CVE-2026-23918-Passive-Audit

GitHubaa022/cve-2026-23918-passive-audit

Passive HTTP metadata auditor for CVE-2026-23918 exposure triage

information-gatheringreconnaissancevulnerability-scanners+1
3 months ago
hephaestus-server-forger preview

hephaestus-server-forger

GitHubrodhnin/hephaestus-server-forger

server security auditor scanning Apache, Nginx, and IIS configurations with AI-powered hardening guides and professional reporting.

ai-securitycloud-securityconfiguration-auditing+4
13 months ago
LDAPRecon-AI preview

LDAPRecon-AI

GitLabayinedjimi-consultants/ldaprecon-ai

Active Directory LDAP Security Auditor with AI-Powered Analysis - By Ayi NEDJIMI https://ayinedjimi-consultants.fr

ai-securityconfiguration-auditingmachine-learning+2
6 months ago
Previous12Next