Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools for testing, exploiting, and securing web applications and APIs.

Newest Relevance Most popular Recently updated

17039 results

PoC-in-GitHub

nomi-sec/poc-in-github

📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.

exploit-frameworksvulnerability-analysisexploitation+5

8.0k1 day ago

patchright

kaliiiiiiiiii-vinyzu/patchright

Undetected version of the Playwright testing and automation library.

ids-ips-evasionwaf-bypasscrawler+2

4.1k1 day ago

BrowserBox

browserbox/browserbox

💚🇺🇸🗽Secure remote browsing anywhere, any way you like it.

defensive-toolsweb-securitynetwork-security+3

3.9k1 day ago

VulnReach

owasp/vulnreach

Runtime-aware SCA — proves which CVEs are actually reachable, not just installed.

static-analysisvulnerability-scannersdynamic-analysis-sandboxing+5

81 day ago

Scrapling

d4vinci/scrapling

🕷️ An adaptive Web Scraping framework that handles everything from a single request to a full-scale crawl!

dynamic-analysis-sandboxingweb-securitycrawler+2

73.4k1 day ago

halo-cve-2026-67919

k0nnect/halo-cve-2026-67919

halo cms plugin 1-request rce from a url, PoC + exploit chain

exploitationweb-application-exploitationweb-security+3

11 day ago

vigolium

vigolium/vigolium

Vigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision

vulnerability-scannersweb-vulnerability-scannersdynamic-analysis-sandboxing+9

9711 day ago

threat-dragon

owasp/threat-dragon

An open source threat modeling tool from OWASP

defensive-toolsvulnerability-analysisweb-security+5

1.6k1 day ago

CVE-2026-15748

ubaydev/cve-2026-15748

Forminator Forms <= 1.56.1 - Unauthenticated Arbitrary File Upload via Forged Upload Field Configuration

vulnerability-analysisexploitationweb-application-exploitation+3

1 day ago

CVE-2026-64849.yaml

zavisco/cve-2026-64849.yaml

Detects unauthenticated MLflow webhook SSRF (CVE-2026-64849) that accesses internal or cloud metadata services and leaks response details via…

vulnerability-scannersexploitationweb-application-exploitation+3

1 day ago

noir

owasp-noir/noir

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

static-analysisvulnerability-analysisweb-security+3

1.4k1 day ago

CVE-2021-42013_821311

andreamammano89-maker/cve-2021-42013_821311

Exploits Apache HTTP Server CVE-2021-42013 for path traversal and CGI-based remote code execution during penetration testing.

vulnerability-analysisexploitationweb-application-exploitation+1

1 day ago

spider

spider-rs/spider

Get web data for AI agents and LLMs

information-gatheringweb-securitycrawler+2

2.6k1 day ago

EasySpider

naibowang/easyspider

A visual no-code/code-free web crawler/spider易采集：一个可视化浏览器自动化测试/数据采集/网页爬虫软件，可以无代码图形化的设计和执行爬虫任务。别名：ServiceWrapper面向Web应用的智能化服务封装系统。

scripting-automationweb-securityeducation+1

44.4k1 day ago

DVWA

digininja/dvwa

Intentionally vulnerable PHP/MariaDB web application for practicing common web security vulnerabilities across multiple difficulty levels in a legal,…

vulnerability-analysisweb-securitypenetration-testing+2

13.5k1 day ago