Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Automated tools for detecting common web application flaws (e.g., XSS, SQLi).

Kitploit recommended

Top tools

10 selected

zaproxy

zaproxy/zaproxy

15.6k21h 7m ago

nuclei

projectdiscovery/nuclei

30.4k19h 40m ago

wapiti

wapiti-scanner/wapiti

1.9k24 days ago

nikto

sullo/nikto

10.6k2 months ago

sqlmap

sqlmapproject/sqlmap

38.2k1 day ago

XSStrike

s0md3v/xsstrike

15.1k1 year ago

wpscan

wpscanteam/wpscan

9.7k19h 14m ago

Nettacker

owasp/nettacker

5.5k4 days ago

ffuf

ffuf/ffuf

16.5k1 month ago

#10

dirsearch

maurosoria/dirsearch

14.6k10 days ago

Newest Relevance Most popular Recently updated

382 results

xalgorix

xalgorix/xalgorix

Autonomous AI pentesting agents — real-time reconnaissance, vulnerability detection, and exploitation orchestration. Go + TypeScript.

defensive-toolsreconnaissancevulnerability-scanners+8

1.3k22h 28m ago

open-source-web-scanners

psiinon/open-source-web-scanners

Curated list of open-source web security scanners, including general-purpose scanners, infrastructure scanners, and fuzzers, ordered by GitHub stars.

vulnerability-scannersweb-vulnerability-scannersweb-security+3

1.6k1 year ago

OpenDoor

stanislav-web/opendoor

OWASP Web Recon & Directory Discovery Platform

reconnaissancevulnerability-scannersweb-vulnerability-scanners+4

99616 days ago

Nuclei-Templates-Collection

emadshanab/nuclei-templates-collection

Nuclei Templates Collection

vulnerability-scannersweb-vulnerability-scannersweb-application-exploitation+6

1.2k10 months ago

SQLiDetector

eslam3kl/sqlidetector

Simple python script supported with BurpBouty profile that helps you to detect SQL injection "Error based" by sending multiple requests with 14…

vulnerability-scannersweb-vulnerability-scannersweb-security+1

64024 days ago

rapidscan

skavngr/rapidscan

:new: The Multi-Tool Web Vulnerability Scanner.

reconnaissancevulnerability-scannersweb-vulnerability-scanners+5

2.1k3 years ago

tactical-exploitation

0xdea/tactical-exploitation

Modern tactical exploitation toolkit.

osintreconnaissanceweb-vulnerability-scanners+8

8662 months ago

vulnx

anouarbensaad/vulnx

vulnx 🕷️ an intelligent Bot, Shell can achieve automatic injection, and help researchers detect security vulnerabilities CMS system. It can perform…

vulnerability-scannersweb-vulnerability-scannersexploit-frameworks+5

2.1k4 years ago

w13scan

w-digital-scanner/w13scan

Passive and active web vulnerability scanner with plugin-based detection for XSS, SQL injection, command injection, and sensitive file disclosure.…

vulnerability-scannersweb-vulnerability-scannersweb-security+1

1.9k4 years ago

vigolium

vigolium/vigolium

Vigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision

vulnerability-scannersweb-vulnerability-scannersdynamic-analysis-sandboxing+9

9713 days ago

BlackWidow

1n3/blackwidow

A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.

osintweb-vulnerability-scannersvulnerability-analysis+3

1.8k6 months ago

ActiveScanPlusPlus

albinowax/activescanplusplus

Burp Suite extension that extends active and passive scanning with checks for host header attacks, XXE, expression language injection, shellshock and…

defensive-toolsvulnerability-scannersweb-vulnerability-scanners+7

6697 days ago

dddd

sleepingbag945/dddd

Batch asset collection and vulnerability scanning tool for red teams. Pulls targets from Hunter, Fofa, and Quake, performs fingerprinting, subdomain…

osintreconnaissancevulnerability-scanners+9

1.9k2 years ago

scant3r

mindpatch/scant3r

Module-based web vulnerability scanner and bug bounty automation framework with built-in XSS, SSTI, SSRF, and Firebase detection engines. Designed to…

vulnerability-scannersweb-vulnerability-scannersscripting-automation+2

68524 days ago