Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools for testing, exploiting, and securing web applications and APIs.

Newest Relevance Most popular Recently updated

17039 results

Claude-BugHunter

elementalsouls/claude-bughunter

A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curated across 24…

osintreconnaissancevulnerability-analysis+8

3.5k

4h 29m ago

METATRON

sooryathejas/metatron

AI-powered penetration testing assistant using local LLM on linux (Parrot OS)

reconnaissancevulnerability-analysisexploitation+5

3.4k4 months ago

FinalRecon

thewhiteh4t/finalrecon

Automated web reconnaissance tool providing header analysis, DNS enumeration, subdomain discovery, directory scanning, SSL inspection, and port…

osintreconnaissanceport-scanning+7

2.9k2 months ago

pentest-guide

voorivex/pentest-guide

Penetration tests guide based on OWASP including test cases, resources and examples.

privilege-escalationvulnerability-analysisinformation-gathering+6

2.8k5 years ago

Astra

flipkart-incubator/astra

Automated Security Testing For REST API's

vulnerability-scannersapi-security-testingweb-security+2

2.7k2 years ago

nodejsscan

ajinabraham/nodejsscan

nodejsscan is a static security code scanner for Node.js applications.

static-analysisvulnerability-scannerscode-analysis+2

2.6k1 year ago

caido

caido/caido

Lightweight web proxy for intercepting, inspecting, and modifying HTTP traffic to audit web applications during penetration testing and bug bounty…

web-proxies-interceptionweb-securitypenetration-testing

2.5k2 months ago

hoverfly

spectolabs/hoverfly

Lightweight service virtualization/ API simulation / API mocking tool for developers and testers

web-proxies-interceptionapi-security-testing

2.5k1 day ago

Archived

bettercap

evilsocket/bettercap

DEPRECATED, bettercap developement moved here: https://github.com/bettercap/bettercap

packet-sniffing-analysisreconnaissancepassword-attacks+3

2.5k8 years ago

wifipumpkin3

p0cl4bs/wifipumpkin3

Powerful framework for rogue access point attack.

wi-fi-auditingweb-proxies-interceptionphishing+5

2.5k2 years ago

jaeles

jaeles-project/jaeles

The Swiss Army knife for automated Web Application Testing

vulnerability-scannersweb-vulnerability-scannersweb-security+1

2.4k2 months ago

Gpt-Agreement-Payment

danops-1/gpt-agreement-payment

ChatGPT Plus/Team/Pro 订阅协议端到端重放工具集 · hCaptcha 视觉求解器 · 反欺诈机制实证研究 / End-to-end protocol replay toolkit for ChatGPT Plus/Team/Pro subscription with…

web-application-exploitation

2.2k2 months ago

LFISuite

d35m0nd142/lfisuite

Totally Automatic LFI Exploiter (+ Reverse Shell) and Scanner

vulnerability-scannerspayload-generationexploitation+3

2.0k8 years ago

sslsplit

droe/sslsplit

Transparent man-in-the-middle proxy that terminates SSL/TLS connections, forges certificates on-the-fly, and logs decrypted traffic for network…

packet-sniffing-analysisencryption-decryption-toolsids-ips-evasion+5

1.9k9 months ago

nomore403

devploit/nomore403

🚫 Advanced tool for security researchers to bypass 403/40X restrictions through smart techniques and adaptive request manipulation. Fast. Precise.…

reconnaissancevulnerability-scannersids-ips-evasion+3

1.8k2 months ago

Brute_Force

matrix07ksa/brute_force

Brute_Force_Attack Gmail Hotmail Twitter Facebook Netflix

password-crackingpassword-attacksweb-security+1

1.8k6 years ago

uro

s0md3v/uro

declutters url lists for crawling/pentesting

information-gatheringweb-securityutilities-frameworks+1

1.6k1 year ago

exploits

xiphosresearch/exploits

Miscellaneous exploit code

privilege-escalationvulnerability-analysisexploitation+3

1.6k2 years ago

Previous 1…456…947 Next