Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools for intercepting, analyzing, and modifying web traffic for security testing.

Kitploit recommended

Top tools

10 selected

mitmproxy

mitmproxy/mitmproxy

44.7k11h 6m ago

zaproxy

zaproxy/zaproxy

15.6k1 day ago

proxify

projectdiscovery/proxify

3.1k2 days ago

httptoolkit

httptoolkit/httptoolkit

3.7k8 months ago

goproxy

elazarl/goproxy

6.8k1 month ago

proxychains-ng

rofl0r/proxychains-ng

10.7k24 days ago

chisel

jpillora/chisel

16.4k19 days ago

#10

sshuttle

sshuttle/sshuttle

13.5k1 day ago

#11

bettercap

bettercap/bettercap

19.8k7 days ago

#12

mallet

sensepost/mallet

2922 years ago

Newest Relevance Most popular Recently updated

255 results

wifipumpkin3

p0cl4bs/wifipumpkin3

Powerful framework for rogue access point attack.

wi-fi-auditingweb-proxies-interceptionphishing+5

2.5k2 years ago

Archived

selenium-wire

wkeeling/selenium-wire

Extends Selenium's Python bindings to give you the ability to inspect requests made by the browser.

web-proxies-interceptionapi-security-testinginformation-gathering+2

2.0k2 years ago

sandcat

syhunt/sandcat

An open-source, pentest and developer-oriented web browser, using the power of Lua

web-proxies-interceptioninformation-gatheringweb-security+2

5502 years ago

mallory

justmao945/mallory

HTTP/HTTPS proxy over SSH

general-purpose-utilitiesweb-proxies-interceptionnetwork-security

3242 years ago

ssl-kill-switch3

nyamisty/ssl-kill-switch3

Next Generation SSLKillSwitch with much more support!

ios-securityweb-proxies-interceptionmobile-app-pentesting+3

7392 years ago

zap-api-rust

zaproxy/zap-api-rust

Rust client library for the OWASP ZAP API, enabling programmatic access to web application security scanning, vulnerability detection, and proxy…

vulnerability-scannersweb-vulnerability-scannersweb-proxies-interception+3

153 years ago

Good-MITM

zu1k/good-mitm

Rule-based MITM engine. Rewriting, redirecting and rejecting on HTTP(S) requests and responses, supports JavaScript rule.

web-proxies-interceptionscripting-automationweb-security+3

8583 years ago

pip3line

metrodango/pip3line

Swiss Army knife for raw bytes manipulation & interception

packet-sniffing-analysisweb-proxies-interceptioncryptography+2

563 years ago

Burp2Malleable

codextf2/burp2malleable

Quick python utility I wrote to turn HTTP requests from burp suite into Cobalt Strike Malleable C2 profiles

web-proxies-interceptionids-ips-evasioncommand-and-control+2

4183 years ago

burp-vps-proxy

d3mondev/burp-vps-proxy

This Burp Suite extension allows for the automatic creation and deletion of an upstream SOCKS5 proxy on popular cloud services.

web-proxies-interceptionwaf-bypasspenetration-testing+1

2483 years ago

auto-repeater

xnl-h4ck3r/auto-repeater

Automated HTTP Request Repeating With Burp Suite

web-proxies-interceptionweb-securityfuzzing+1

383 years ago

CustomHeader

mirfansulaiman/customheader

This Burp Suite extension allows you to customize header with put a new header into HTTP REQUEST BurpSuite (Scanner, Intruder, Repeater, Proxy…

web-proxies-interceptionapi-security-testingweb-security+1

533 years ago

autochrome

nccgroup/autochrome

This tool downloads, installs, and configures a shiny new copy of Chromium.

web-proxies-interceptionweb-securitypenetration-testing

4803 years ago

privaxy

barre/privaxy

Privaxy is the next generation tracker and advertisement blocker. It blocks ads and trackers by MITMing HTTP(s) traffic. Also check out my new…

web-proxies-interceptionweb-securityprivacy+1

2.5k3 years ago

cs2modrewrite

threatexpress/cs2modrewrite

Convert Cobalt Strike profiles to modrewrite scripts

web-proxies-interceptionids-ips-evasionnetwork-security+3

6083 years ago

BurpImportSitemap

nccgroup/burpimportsitemap

Import To Sitemap is a Burp Suite Extension to import wstalker CSV file or ZAP export file into Burp Sitemap