Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools for testing, exploiting, and securing web applications and APIs.

Kitploit recommended

Top tools

10 selected

zaproxy

zaproxy/zaproxy

15.6k15h 50m ago

nuclei

projectdiscovery/nuclei

30.4k8h 34m ago

sqlmap

sqlmapproject/sqlmap

38.2k1 day ago

ffuf

ffuf/ffuf

16.5k27 days ago

dirsearch

maurosoria/dirsearch

14.6k5 days ago

feroxbuster

epi052/feroxbuster

8.0k8 days ago

nikto

sullo/nikto

10.6k2 months ago

wpscan

wpscanteam/wpscan

9.7k25 days ago

XSStrike

s0md3v/xsstrike

15.1k1 year ago

#10

wapiti

wapiti-scanner/wapiti

1.9k20 days ago

Newest Relevance Most popular Recently updated

19018 results

CVE-2022-44877

numanturle/cve-2022-44877

Proof-of-concept exploit for CVE-2022-44877, an unauthenticated remote code execution in Centos Web Panel 7 (< 0.9.8.1147) via command injection in…

vulnerability-analysisexploitationweb-application-exploitation+2

1033 years ago

lazyrecon

storenth/lazyrecon

Wicked sick v2.0 script is intended to automate your reconnaissance process in an organized fashion.

osintreconnaissancevulnerability-scanners+4

1493 years ago

spraycharles

tw1sm/spraycharles

Low and slow password spraying tool, designed to spray on an interval over a long period of time

password-crackingpassword-attacksweb-security+2

2238 months ago

crithit

codingo/crithit

Takes a single wordlist item and tests it one by one over a large collection of websites before moving onto the next. Create signatures to…

vulnerability-scannersinformation-gatheringwaf-bypass+2

2126 years ago

CVE-2019-19781

mpgn/cve-2019-19781

CVE-2019-19781 - Remote Code Execution on Citrix ADC Netscaler exploit

vulnerability-analysisexploitationweb-application-exploitation+4

1576 years ago

CVE-2017-10271

c0mmand3ropsec/cve-2017-10271

Unauthenticated remote code execution exploit for Oracle WebLogic CVE-2017-10271. Provides XML payload and endpoint list for penetration testing of…

payload-generationvulnerability-analysisexploitation+3

1438 years ago

ARTLAS

mthbernardes/artlas

Apache Real Time Logs Analyzer System

vulnerability-scannersweb-securitythreat-intelligence+3

1255 years ago

pysqli

sysdream/pysqli

Python SQL injection framework

exploit-frameworksvulnerability-analysisweb-application-exploitation+3

13213 years ago

bugbounty_tools

dawgyg/bugbounty_tools

Collection of scripts and tools used during bug bounty work. This will be the location of my automation scripts created for my own personal use, and…

reconnaissanceweb-vulnerability-scannersvulnerability-analysis+3

15210 months ago

CVE-2019-0604

linhlhq/cve-2019-0604

Proof-of-concept exploit for CVE-2019-0604, a remote code execution vulnerability in Microsoft SharePoint. Provides a working implementation for…

vulnerability-analysisexploitationweb-application-exploitation+2

1297 years ago

all-my-collection-repos

alphaseclab/all-my-collection-repos

All Security Resource Collections Repos That I Published.

reverse-engineeringforensicsweb-security+6

1336 years ago

Hexestra

absllk/hexestra

AI-native penetration testing IDE where operators and an AI agent share browser, terminals, traffic capture, shells, asset graph, tasks, and evidence…

penetration-testing-frameworksreconnaissancenetwork-mapping+7

1038 days ago