Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Categories

API Security

API testing, fuzzing, schema validation, authentication testing, and gateway security tools.

Kitploit recommended

Top tools

10 selected
kiterunner preview#1

kiterunner

GitHubassetnote/kiterunner
3.2k5 years ago
zaproxy preview#2

zaproxy

GitHubzaproxy/zaproxy
15.6k4 days ago
nuclei preview#3

nuclei

GitHubprojectdiscovery/nuclei
30.4k4h 25m ago
sqlmap preview#4

sqlmap

GitHubsqlmapproject/sqlmap
38.2k13h 5m ago
graphql-cop preview#5

graphql-cop

GitHubdolevf/graphql-cop
68411 months ago
graphw00f preview#6

graphw00f

GitHubdolevf/graphw00f
8845 months ago
Arjun preview#7

Arjun

GitHubs0md3v/arjun
6.4k1 year ago
jwt_tool preview#8

jwt_tool

GitHubticarpi/jwt_tool
6.7k1 year ago
crAPI preview#9

crAPI

GitHubowasp/crapi
1.6k1 month ago
automatic-api-attack-tool preview#10

automatic-api-attack-tool

GitHubimperva/automatic-api-attack-tool
4956 years ago
NewestRelevanceMost popularRecently updated
496 results
nebulousAD preview
Archived

nebulousAD

GitHubnuid/nebulousad

NebulousAD automated credential auditing tool.

password-crackingpassword-attacksvulnerability-analysis+3
1526 years ago
CrowdFMS preview
Archived

CrowdFMS

GitHubcrowdstrike/crowdfms

CrowdStrike Feed Management System. CrowdFMS is a framework for automating collection and processing of samples from VirusTotal, by leveraging the…

dynamic-analysis-sandboxingmalware-analysisthreat-intelligence+1
1337 years ago
quarantyne preview
Archived

quarantyne

GitHubquarantyne/quarantyne

Modern Web Firewall: stop account takeovers, weak passwords, cloud IPs, DoS attacks, disposable emails

vulnerability-scannersweb-securitythreat-intelligence+3
1234 years ago
fuzzing-templates preview
Archived

fuzzing-templates

GitHubprojectdiscovery/fuzzing-templates

Community curated list of nuclei templates for finding "unknown" security vulnerabilities.

web-vulnerability-scannersvulnerability-analysisweb-security+4
1072 years ago
PSMDATP preview
Archived

PSMDATP

GitHubalexverboon/psmdatp

PowerShell Module for managing Microsoft Defender Advanced Threat Protection

configuration-auditingcloud-securitythreat-intelligence+2
763 years ago
EU_compliance_MCP preview
Archived

EU_compliance_MCP

GitHubansvar-systems/eu_compliance_mcp

EU focused compliance MCP server

information-gatheringcloud-securitydevsecops+5
252 months ago
externalip-webhook preview
Archived

externalip-webhook

GitHubrancher/externalip-webhook

CVE-2020-8554: Man in the middle using LoadBalancer or ExternalIPs

container-securityconfiguration-auditingnetwork-security+3
34 years ago
apollo-koa-minimal preview
Archived

apollo-koa-minimal

GitHubtadhglewis/apollo-koa-minimal

GraphQL vulnerability disclosure: CVE-2023-26144

vulnerability-analysisexploitationweb-security+2
12 years ago
rabl-old preview
Archived

rabl-old

GitHubcph/rabl-old

Ruby templating system for generating JSON and XML APIs, with a fix for CVE-2014-4671. Supports partials, inheritance, and custom nodes for flexible…

general-purpose-utilitiesvulnerability-analysisweb-security+1
9 years ago
tracehound preview
Archived

tracehound

GitHubtracehound/tracehound

Operational security controls with forensic guarantees

defensive-toolsioc-managementforensics+5
2 months ago
Previous1…2728Next
API Security — Page 28 | Kitploit