Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Categories

Web Security

Tools for testing, exploiting, and securing web applications and APIs.

NewestRelevanceMost popularRecently updated
17039 results
rabid preview
Archived

rabid

GitHuborange-cyberdefense/rabid

🍪 A CLI tool and library allowing to simply decode all kind of BigIP cookies.

reconnaissanceencryption-decryption-toolsinformation-gathering+2
39
6 years ago
NekoBotV1 preview
Archived

NekoBotV1

GitHubtegal1337/nekobotv1

NekoBot | Auto Exploiter With 500+ Exploit 2000+ Shell

vulnerability-scannersexploit-frameworksweb-application-exploitation+2
3955 years ago
CFUnmitigate preview
Archived

CFUnmitigate

GitHubmrakovic-org/cfunmitigate

Layer 7 UAM Bypass

ids-ips-evasionwaf-bypassweb-security+2
106 years ago
InjuredAndroid preview
Archived

InjuredAndroid

GitHubb3nac/injuredandroid

A vulnerable Android application that shows simple examples of vulnerabilities in a ctf style.

android-securityvulnerability-analysismobile-app-pentesting+5
7625 years ago
cloud-buster preview
Archived

cloud-buster

GitHubsagehack/cloud-buster

A Cloudflare resolver that works

reconnaissancevulnerability-analysisinformation-gathering+5
1467 years ago
pwl preview
Archived

pwl

GitHubwkovacs64/pwl

Password Lense: reveal character types in a password

general-purpose-utilitiespassword-crackingpassword-attacks+3
2310 months ago
syntribos preview
Archived

syntribos

GitHubopenstack-archive/syntribos

Python API security testing tool from OpenStack Security Group

vulnerability-scannersapi-security-testingweb-security+2
2716 years ago
xmlrpc-bruteforcer preview
Archived

xmlrpc-bruteforcer

GitHubkavishgr/xmlrpc-bruteforcer

An XMLRPC brute forcer targeting Wordpress written in Python 3. (DISCONTINUED)

password-attacksweb-application-exploitationinformation-gathering+2
631 year ago
Maryam preview
Archived

Maryam

GitHubsaeeddhqan/maryam

Maryam: Open-source Intelligence(OSINT) Framework

osintreconnaissancedns-subdomain-enumeration+2
1.2k1 year ago
HRShell preview
Archived

HRShell

GitHubchrispetrou/hrshell

HRShell is an HTTPS/HTTP reverse shell built with flask. It is an advanced C2 server with many features & capabilities.

encryption-decryption-toolsexploitationreverse-engineering+7
2484 years ago
FDsploit preview
Archived

FDsploit

GitHubchrispetrou/fdsploit

File Inclusion & Directory Traversal fuzzing, enumeration & exploitation tool.

vulnerability-scannersexploitationweb-application-exploitation+3
2735 years ago
goop preview
Archived

goop

GitHubs0md3v/goop

Google Search Scraper

osintreconnaissanceinformation-gathering+3
5717 years ago
XSpear preview
Archived

XSpear

GitHubhahwul/xspear

🔱 Powerfull XSS Scanning and Parameter analysis tool&gem

reconnaissancestatic-analysisvulnerability-scanners+8
1.4k5 months ago
BadIntent preview
Archived

BadIntent

GitHub1ultimat3/badintent

Intercept, modify, repeat and attack Android's Binder transactions using Burp Suite

android-securitydynamic-analysis-sandboxingweb-proxies-interception+4
3229 years ago
h2buster preview
Archived

h2buster

GitHub00xc/h2buster

A threaded, recursive, web directory brute-force scanner over HTTP/2.

reconnaissancevulnerability-scannersweb-vulnerability-scanners+3
376 years ago
quarantyne preview
Archived

quarantyne

GitHubquarantyne/quarantyne

Modern Web Firewall: stop account takeovers, weak passwords, cloud IPs, DoS attacks, disposable emails

vulnerability-scannersweb-securitythreat-intelligence+3
1234 years ago
Bashter preview
Archived

Bashter

GitHubzerobyte-id/bashter

Web Vulnerability Scanner using Shell Script

web-vulnerability-scannersvulnerability-analysisweb-security+3
594 years ago
naxsi preview
Archived

naxsi

GitHubnbs-system/naxsi

NAXSI is an open-source, high performance, low rules maintenance WAF for NGINX

vulnerability-scannersids-ips-evasionweb-application-exploitation+3
4.8k2 years ago
Previous1…942943944…947Next