Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Categories

Web Security

Tools for testing, exploiting, and securing web applications and APIs.

NewestRelevanceMost popularRecently updated
17039 results
RedWarden preview
Archived

RedWarden

GitHubmgeeky/redwarden

Cobalt Strike C2 Reverse proxy that fends off Blue Teams, AVs, EDRs, scanners through packet inspection and malleable profile correlation

penetration-testing-frameworksreconnaissanceexploit-frameworks+8
997
3 years ago
firefox_tunnel preview
Archived

firefox_tunnel

GitHubconviso-archives/firefox_tunnel
payload-generationweb-proxies-interceptionids-ips-evasion+5
618 years ago
CVE-2021-31166 preview
Archived

CVE-2021-31166

GitHub0vercl0k/cve-2021-31166

Proof of concept for CVE-2021-31166, a remote HTTP.sys use-after-free triggered remotely.

vulnerability-analysisexploitationweb-security+2
8275 years ago
nginxpwner preview
Archived

nginxpwner

GitHubstark0de/nginxpwner

Nginxpwner is a simple tool to look for common Nginx misconfigurations and vulnerabilities.

vulnerability-scannersweb-application-exploitationinformation-gathering+3
1.6k2 years ago
MeterPwrShell preview
Archived

MeterPwrShell

GitHubgetrektboy724/meterpwrshell

Automated Tool That Generates The Perfect Meterpreter Powershell Payload

privilege-escalationexploit-frameworkspayload-generation+7
2274 years ago
gitls preview
Archived

gitls

GitHubhahwul/gitls

🖇 Enumerate git repository URL from list of URL / User / Org. Friendly to pipeline

osintreconnaissanceinformation-gathering+2
561 year ago
sub404 preview
Archived

sub404

GitHubr3curs1v3-pr0xy/sub404

A python tool to check subdomain takeover vulnerability

reconnaissancevulnerability-scannersweb-security+3
3523 years ago
kenzer preview
Archived

kenzer

GitHubarpsyndicate/kenzer

automated web assets enumeration & scanning [DEPRECATED]

osintreconnaissancevulnerability-scanners+8
2883 years ago
Bheem preview
Archived

Bheem

GitHubharsh-bothra/bheem
reconnaissancevulnerability-scannersinformation-gathering+5
3755 years ago
widevine-l3-decryptor preview
Archived

widevine-l3-decryptor

GitHubtomer8007/widevine-l3-decryptor

A Chrome extension that demonstrates bypassing Widevine L3 DRM

encryption-decryption-toolsexploitationreverse-engineering+3
1.2k3 years ago
Gxss preview
Archived

Gxss

GitHubkathanp19/gxss

A tool to check a bunch of URLs that contain reflecting params.

reconnaissancevulnerability-analysisinformation-gathering+2
6032 years ago
findom-xss preview
Archived

findom-xss

GitHubdwisiswant0/findom-xss

A fast DOM based XSS vulnerability scanner with simplicity.

web-vulnerability-scannersvulnerability-analysisdynamic-code-analysis+3
8633 years ago
domained preview
Archived

domained

GitHubtypeerror/domained

Multi Tool Subdomain Enumeration

osintreconnaissancedns-subdomain-enumeration+5
7235 years ago
frida-fuzzer preview
Archived

frida-fuzzer

GitHubandreafioraldi/frida-fuzzer

This experimetal fuzzer is meant to be used for API in-memory fuzzing.

dynamic-analysis-sandboxingexploitationapi-security-testing+3
5776 years ago
sqlmate preview
Archived

sqlmate

GitHubs0md3v/sqlmate

A friend of SQLmap which will do what you always expected from SQLmap.

password-crackingreconnaissancevulnerability-scanners+5
4537 years ago
https-everywhere preview
Archived

https-everywhere

GitHubefforg/https-everywhere

A browser extension that encrypts your communications with many websites that offer HTTPS but still allow unencrypted connections.

defensive-toolsencryption-decryption-toolsweb-security+1
3.4k3 years ago
Pentest-Tools-Framework preview
Archived

Pentest-Tools-Framework

GitHubpikpikcu/pentest-tools-framework

Pentest Tools Framework is a database of exploits, Scanners and tools for penetration testing. Pentest is a powerful framework includes a lot of…

penetration-testing-frameworksprivilege-escalationreconnaissance+6
4611 year ago
Http-Asynchronous-Reverse-Shell preview
Archived

Http-Asynchronous-Reverse-Shell

GitHubonsec-fr/http-asynchronous-reverse-shell

[POC] Asynchronous reverse shell using the HTTP protocol.

ids-ips-evasionlateral-movementweb-application-exploitation+7
2721 year ago
Previous1…941942943…947Next