Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Automated tools for detecting common web application flaws (e.g., XSS, SQLi).

Kitploit recommended

Top tools

10 selected

zaproxy

Web Vulnerability Scanners

Automated tools for detecting common web application flaws (e.g., XSS, SQLi).

Kitploit recommended

Top tools

10 selected

zaproxy

zaproxy/zaproxy

15.6k12h 59m ago

nuclei

projectdiscovery/nuclei

30.4k20h 43m ago

wapiti

wapiti-scanner/wapiti

1.9k26 days ago

nikto

sullo/nikto

10.6k26 days ago

sqlmap

sqlmapproject/sqlmap

38.2k1 day ago

XSStrike

s0md3v/xsstrike

15.1k1 year ago

wpscan

wpscanteam/wpscan

9.7k21 days ago

Nettacker

owasp/nettacker

5.5k0 days ago

ffuf

ffuf/ffuf

16.5k1 day ago

#10

dirsearch

maurosoria/dirsearch

14.6k19h 17m ago

Newest Relevance Most popular Recently updated

314 results

Archived

request_smuggler

sh1yo/request_smuggler

Http request smuggling vulnerability scanner

vulnerability-scannersweb-vulnerability-scannersweb-application-exploitation+3

2284 years ago

Archived

fuzzing-templates

projectdiscovery/fuzzing-templates

Community curated list of nuclei templates for finding "unknown" security vulnerabilities.

web-vulnerability-scannersvulnerability-analysisweb-security+4

1072 years ago

Archived

SPIPScan

paulsec/spipscan

SPIP (CMS) Scanner for penetration testing purpose written in Python

reconnaissancevulnerability-scannersweb-vulnerability-scanners+3

7312 years ago

Archived

Bashter

zerobyte-id/bashter

Web Vulnerability Scanner using Shell Script

web-vulnerability-scannersvulnerability-analysisweb-security+3

594 years ago

Archived

pathprober

xchopath/pathprober

Probe and discover HTTP pathname using brute-force methodology and filtered by specific word or 2 words at once

reconnaissancevulnerability-scannersweb-vulnerability-scanners+3

485 years ago

Archived

ssllabs.rb

shopify/ssllabs.rb

Ruby client for the Qualys SSL Labs API enabling automated SSL/TLS server assessment, vulnerability detection (e.g., BEAST), and security grade…

vulnerability-scannersweb-vulnerability-scannersweb-security+2

379 years ago

Archived

h2buster

00xc/h2buster

A threaded, recursive, web directory brute-force scanner over HTTP/2.

reconnaissancevulnerability-scannersweb-vulnerability-scanners+3

376 years ago

Archived

purpleteam-app-scanner

purpleteam-labs/purpleteam-app-scanner

Application scanning component of purpleteam

vulnerability-scannersweb-vulnerability-scannersapi-security-testing+4

15 years ago

Previous 1…1718Next