Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Categories

API Security

API testing, fuzzing, schema validation, authentication testing, and gateway security tools.

Kitploit recommended

Top tools

10 selected
kiterunner preview#1

kiterunner

GitHub
API Security — Page 6 | Kitploit
assetnote/kiterunner
3.2k5 years ago
zaproxy preview#2

zaproxy

GitHubzaproxy/zaproxy
15.6k13h 55m ago
nuclei preview#3

nuclei

GitHubprojectdiscovery/nuclei
30.4k2 days ago
sqlmap preview#4

sqlmap

GitHubsqlmapproject/sqlmap
38.2k8h 6m ago
graphql-cop preview#5

graphql-cop

GitHubdolevf/graphql-cop
68411 months ago
graphw00f preview#6

graphw00f

GitHubdolevf/graphw00f
8845 months ago
Arjun preview#7

Arjun

GitHubs0md3v/arjun
6.4k1 year ago
jwt_tool preview#8

jwt_tool

GitHubticarpi/jwt_tool
6.7k1 year ago
crAPI preview#9

crAPI

GitHubowasp/crapi
1.6k1 month ago
automatic-api-attack-tool preview#10

automatic-api-attack-tool

GitHubimperva/automatic-api-attack-tool
4956 years ago
NewestRelevanceMost popularRecently updated
497 results
bmcweb preview

bmcweb

GitHubopenbmc/bmcweb

A do everything Redfish, KVM, GUI, and DBus webserver for OpenBMC

authentication-authorizationcloud-infrastructure-securityembedded-systems-security+6
2302 months ago
carbon-identity-framework preview

carbon-identity-framework

GitHubwso2/carbon-identity-framework

Core framework for identity and access management, providing authentication, authorization, and identity governance capabilities for enterprise…

authentication-authorizationidentity-managementcloud-security+2
13721h 17m ago
JShunter preview

JShunter

GitHubcc1a2b/jshunter

jshunter is a command-line tool designed for analyzing JavaScript files and extracting endpoints. This tool specializes in identifying sensitive…

reconnaissancestatic-code-analysisvulnerability-analysis+6
5291 month ago
cherrybomb preview

cherrybomb

GitHubblst-security/cherrybomb

CLI tool that audits OpenAPI specifications, validates them against best practices, and runs automated security tests to detect vulnerabilities and…

static-analysisvulnerability-scannersdynamic-analysis-sandboxing+3
1.2k1 year ago
GraphStrike preview

GraphStrike

GitHubredsiege/graphstrike

Cobalt Strike HTTPS beaconing over Microsoft Graph API

penetration-testing-frameworksexploit-frameworkscloud-security+3
6352 years ago
secret-regex-list preview

secret-regex-list

GitHubh33tlit/secret-regex-list

List of regex for scraping secret API keys and juicy information.

reconnaissanceinformation-gatheringweb-security+3
7294 years ago
keyFinder preview

keyFinder

GitHubmomenbasel/keyfinder

Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.

osintreconnaissanceinformation-gathering+2
6963 months ago
graphw00f preview

graphw00f

GitHubdolevf/graphw00f

GraphQL server engine fingerprinting tool that sends benign and malformed queries to identify backend technology and assess security defenses via the…

reconnaissanceweb-vulnerability-scannersdynamic-code-analysis+5
8845 months ago
PatrowlManager preview

PatrowlManager

GitHubpatrowl/patrowlmanager

PatrOwl - Open Source, Smart and Scalable Security Operations Orchestration Platform

vulnerability-scannersthreat-intelligenceincident-response+1
6384 years ago
automatic-api-attack-tool preview

automatic-api-attack-tool

GitHubimperva/automatic-api-attack-tool

Imperva's customizable API attack tool takes an API specification as an input, generates and runs attacks that are based on it as an output.

vulnerability-scannersweb-application-exploitationapi-security-testing+2
4956 years ago
ldapsdk preview

ldapsdk

GitHubpingidentity/ldapsdk

UnboundID LDAP SDK for Java

authentication-authorizationencryption-decryption-toolsutilities-frameworks+3
3741 day ago
censys-python preview

censys-python

GitHubcensys/censys-python

An easy-to-use and lightweight API wrapper for Censys APIs.

osintreconnaissanceinformation-gathering+2
4681 month ago
matchlock preview

matchlock

GitHubjingkaihe/matchlock

Ephemeral microVM sandbox for AI agents with network allowlisting, secret injection via MITM proxy, and VM-level isolation. Boots in under a second,…

container-securitysecurity-virtualizationnetwork-security+5
6112 months ago
agent-skills preview

agent-skills

GitHubelastic/agent-skills

Official Elastic Skills

cloud-infrastructure-securityapi-security-testingcloud-security+6
5461 month ago
azureOutlookC2 preview

azureOutlookC2

GitHubboku7/azureoutlookc2

Azure Outlook Command & Control (C2) - Remotely control a compromised Windows Device from your Outlook mailbox. Threat Emulation Tool for North…

cloud-securitycommand-and-controlred-teaming+2
5043 years ago
Threat_Model_Examples preview

Threat_Model_Examples

GitHubtaleliyahu/threat_model_examples

A collection of real-world threat model examples across various technologies, providing practical insights into identifying and mitigating security…

container-securityiot-securityweb-security+6
5141 year ago
cli preview

cli

GitHubcloudgraphdev/cli

The universal GraphQL API and CSPM tool for AWS, Azure, GCP, K8s, and tencent.

cloud-infrastructure-securityvulnerability-scannersconfiguration-auditing+3
8883 years ago
proxy preview

proxy

GitHubgit-pkgs/proxy

A lightweight caching proxy for package registries.

vulnerability-analysiscloud-securitydevsecops+2
15514h 42m ago
Previous1…567…28Next