Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Categories

API Security Testing

Tools for assessing the security of REST, SOAP, and GraphQL APIs.

Kitploit recommended

Top tools

10 selected
kiterunner preview#1

kiterunner

GitHubassetnote/kiterunner
3.2k5 years ago
zaproxy preview#2

zaproxy

GitHubzaproxy/zaproxy
15.6k1 day ago
nuclei preview#3

nuclei

GitHubprojectdiscovery/nuclei
30.4k1 day ago
sqlmap preview#4

sqlmap

GitHubsqlmapproject/sqlmap
38.2k3 days ago
graphql-cop preview#5

graphql-cop

GitHubdolevf/graphql-cop
68410 months ago
graphw00f preview#6

graphw00f

GitHubdolevf/graphw00f
8843 months ago
Arjun preview#7

Arjun

GitHubs0md3v/arjun
6.4k1 year ago
jwt_tool preview#8

jwt_tool

GitHubticarpi/jwt_tool
6.7k1 year ago
crAPI preview#9

crAPI

GitHubowasp/crapi
1.6k2 days ago
automatic-api-attack-tool preview#10

automatic-api-attack-tool

GitHubimperva/automatic-api-attack-tool
4956 years ago
NewestRelevanceMost popularRecently updated
367 results
raider preview
Archived

raider

GitHubdigeex/raider

DEPRECATED, please use the new repository from OWASP: https://github.com/OWASP/raider

api-security-testingweb-securitypenetration-testing+1
1394 years ago
columbus-server preview
Archived

columbus-server

GitHubelmasy-com/columbus-server

API-first subdomain discovery service using Certificate Transparency logs for fast, passive enumeration of subdomains via a REST API with JSON or…

osintreconnaissancedns-subdomain-enumeration+3
283 years ago
ExtendedMacro preview
Archived

ExtendedMacro

GitHubfruh/extendedmacro

ExtendedMacro - BurpSuite plugin providing extended macro functionality

web-proxies-interceptionscripting-automationapi-security-testing+3
155 years ago
brokeCLAUDIA preview
Archived

brokeCLAUDIA

GitHubthemalwareguardian/brokeclaudia

CVE-2025-41090 (brokeCLAUDIA): Broken access control in microCLAUDIA, the anti-ransomware platform by CCN-CERT.

vulnerability-analysisexploitationweb-application-exploitation+3
310 months ago
purpleteam preview
Archived

purpleteam

GitLabpurpleteam-labs/purpleteam

CLI component of purpleteam

vulnerability-scannersapi-security-testingweb-security+3
25 years ago
purpleteam-server-scanner preview
Archived

purpleteam-server-scanner

GitLabpurpleteam-labs/purpleteam-server-scanner

Server scanning component of purpleteam

vulnerability-scannersapi-security-testingweb-security+3
15 years ago
purpleteam-app-scanner preview
Archived

purpleteam-app-scanner

GitLabpurpleteam-labs/purpleteam-app-scanner

Application scanning component of purpleteam

vulnerability-scannersweb-vulnerability-scannersapi-security-testing+4
15 years ago
Previous1…2021Next