Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools for analyzing application behavior during runtime to find security vulnerabilities.

Kitploit recommended

Top tools

10 selected

zaproxy

zaproxy/zaproxy

15.6k6 days ago

nuclei

projectdiscovery/nuclei

30.4k1 day ago

wapiti

wapiti-scanner/wapiti

1.9k17 days ago

nikto

sullo/nikto

10.6k2 months ago

sqlmap

sqlmapproject/sqlmap

38.2k5h 27m ago

XSStrike

s0md3v/xsstrike

15.1k1 year ago

wpscan

wpscanteam/wpscan

9.7k23 days ago

Nettacker

owasp/nettacker

5.5k11 days ago

ffuf

ffuf/ffuf

16.5k25 days ago

#10

dirsearch

maurosoria/dirsearch

14.6k3 days ago

Newest Relevance Most popular Recently updated

147 results

Veridiff

veridiff/veridiff

Dynamic branch-divergence finder for native code -- traces two Frida executions and finds the exact instruction where they diverge.

dynamic-analysis-sandboxingcode-analysisdynamic-code-analysis+7

820 days ago

frida-scripts

0xdea/frida-scripts

A collection of my Frida instrumentation scripts to reverse engineer mobile apps and more.

android-securityios-securitydynamic-code-analysis+3

1.6k1 day ago

Archived

de4dot

de4dot/de4dot

.NET deobfuscator and unpacker.

static-analysisdynamic-code-analysisreverse-engineering+2

7.4k6 years ago

XXStrike

anonmoty/xxstrike

XSStrike based XSS scanner with custom features. Detects XSS vulnerabilities in web applications.

vulnerability-scannersweb-vulnerability-scannersdynamic-code-analysis+5

51 month ago

agentic-radar

splx-ai/agentic-radar

A security scanner for your LLM agentic workflows

vulnerability-scannersstatic-code-analysisdynamic-code-analysis+5

1.1k10 months ago

HookCase

steven-michaud/hookcase

Tool for reverse engineering macOS/OS X

dynamic-code-analysisreverse-engineeringdebuggers+1

8395 months ago

zairo

iamavu/zairo

Scans code diffs with context to build an impact graph and uses LLMs to find vulnerabilities, supporting multi-repo scans and CI gating with SARIF…

static-analysisvulnerability-analysiscode-analysis+3

1414 days ago

wafw00f

enablesecurity/wafw00f

Automated Web Application Firewall fingerprinting tool that identifies and detects over 200 WAF products by analyzing HTTP responses to normal and…

reconnaissancevulnerability-scannersweb-vulnerability-scanners+6

6.5k6 months ago

hermes-decomp

symbioticsec/hermes-decomp

A powerful decompiler that lets you reverse-engineer React Native mobile apps by converting their compiled Hermes bytecode (.hbc) files back into…

android-securitystatic-analysisios-security+8

13820 days ago

Angora

angorafuzzer/angora

Coverage-guided fuzzer that uses taint tracking and scalar optimization to solve path constraints without symbolic execution, improving branch…

vulnerability-analysisdynamic-code-analysisfuzzing

9574 years ago

fnprint

1rhino2/fnprint

match functions in binaries by what they do, not what their bytes look like. behavioral function fingerprinting via microexecution.

vulnerability-analysisdynamic-code-analysisreverse-engineering+3

5512 days ago

feroxbuster

epi052/feroxbuster

A fast, simple, recursive content discovery tool written in Rust.

reconnaissanceweb-vulnerability-scannersdynamic-code-analysis+8

8.0k6 days ago

WinDbg-Samples

microsoft/windbg-samples

Sample extensions, scripts, and API uses for WinDbg.

dynamic-code-analysisreverse-engineeringscripting-automation+2

8216 days ago

hermit

xv4l3x/hermit

Inspects, decompiles and structurally patches Hermes bytecode (HBC) from React Native apps, with a GDB-style REPL, CFG, decompiler and re-serializing…

android-securitystatic-analysisios-security+7

67 days ago