Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Fuzz testing, mutation-based, generation-based, and coverage-guided fuzzing tools.

Kitploit recommended

Top tools

10 selected

AFLplusplus

aflplusplus/aflplusplus

6.7k1 day ago

oss-fuzz

google/oss-fuzz

12.5k22h 30m ago

honggfuzz

google/honggfuzz

3.4k24 days ago

clusterfuzz

google/clusterfuzz

5.6k3 days ago

domato

googleprojectzero/domato

1.8k1 year ago

cargo-fuzz

rust-fuzz/cargo-fuzz

1.9k3 months ago

#10

LibAFL

aflplusplus/libafl

2.6k0 days ago

#11

boofuzz

jtpereyda/boofuzz

2.4k29 days ago

#16

Angora

angorafuzzer/angora

9574 years ago

#17

Awesome-Fuzzing

secfigo/awesome-fuzzing

5.9k3 years ago

Newest Relevance Most popular Recently updated

1007 results

ghidra-mcp

bethington/ghidra-mcp

MCP server bridging Ghidra's reverse engineering with AI tools: 256 tools for decompilation, P-code emulation, live debugging, data flow analysis,…

static-analysisdynamic-analysis-sandboxingreverse-engineering+7

3.3k6 days ago

dynamorio

dynamorio/dynamorio

Runtime instrumentation framework for building dynamic analysis tools: tracing, profiling, code coverage, memory debugging, fuzzing, and disassembly…

code-analysisdynamic-code-analysisreverse-engineering+3

3.2k18h 34m ago

sandsifter

xoreaxeaxeax/sandsifter

The x86 processor fuzzer

vulnerability-analysisreverse-engineeringfuzzing+2

5.1k9 years ago

honggfuzz

google/honggfuzz

Security oriented software fuzzer. Supports evolutionary, feedback-driven fuzzing based on code coverage (SW and HW based)

vulnerability-analysisdynamic-code-analysisfuzzing+1

3.4k24 days ago

raptor

gadievron/raptor

Autonomous security research framework integrating static analysis, binary analysis, fuzzing, LLM-powered vulnerability validation, exploit…

penetration-testing-frameworksdynamic-analysis-sandboxingexploit-frameworks+7

3.6k1 day ago

payloads

foospidy/payloads

Git All the Payloads! A collection of web attack payloads.

password-crackingvulnerability-analysisinformation-gathering+6

4.0k5 years ago

wfuzz

xmendez/wfuzz

Modular web fuzzer for automated security testing. Injects payloads into any HTTP request field to discover vulnerabilities, brute-force parameters,…

web-vulnerability-scannersvulnerability-analysisweb-security+2

6.5k9 months ago

IntruderPayloads

1n3/intruderpayloads

A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.

vulnerability-scannersweb-securityfuzzing+3

4.0k5 years ago

pentest-tools

gwen001/pentest-tools

A collection of custom security tools for quick needs.

osintreconnaissancevulnerability-scanners+7

3.3k2 days ago

publications

trailofbits/publications

Publications from Trail of Bits

static-analysisfuzzingcryptography+5

1.9k17h 45m ago

ESP32-DIV

cifertech/esp32-div

ESP32DIV is a multi-purpose wireless offensive and defensive toolkit powered by an ESP32

embedded-systems-securitywi-fi-auditingbluetooth-security+8

3.7k1 month ago

echidna

crytic/echidna

Ethereum smart contract fuzzer

vulnerability-analysisfuzzing

3.2k5 days ago

Raccoon

evyatarmeged/raccoon

A high performance offensive security tool for reconnaissance and vulnerability scanning

osintreconnaissancevulnerability-scanners+6

4.0k1 year ago

boringssl

google/boringssl

Fork of OpenSSL implementing TLS, cryptographic primitives, and X.509 certificate handling for use in Chrome and Android, with no API/ABI…

encryption-decryption-toolsfuzzingnetwork-security+1

2.3k18 days ago

jwt_tool

ticarpi/jwt_tool

:snake: A toolkit for testing, tweaking and cracking JSON Web Tokens

vulnerability-scannersapi-security-testingweb-security+5

6.7k1 year ago

fuzzilli

googleprojectzero/fuzzilli

A JavaScript Engine Fuzzer

vulnerability-analysisfuzzingbinary-analysis+2

2.3k8 days ago

Arjun

s0md3v/arjun

HTTP parameter discovery tool that finds valid query parameters for URL endpoints using a large dictionary, supporting GET/POST/JSON/XML requests,…

reconnaissanceapi-security-testinginformation-gathering+3

6.4k1 year ago

dnstwist

elceef/dnstwist

Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation

osintreconnaissancedns-subdomain-enumeration+5

5.7k1 year ago

Previous 1 234…56 Next