Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
22 results
thermoptic preview

thermoptic

GitHubmandatoryprogrammer/thermoptic

A next-generation HTTP stealth proxy which perfectly cloaks requests as the Chrome browser across all layers of the stack.

anti-botcaptcha-bypasscrawler+5
1.0k
4 months ago
Azure-APIM-Dev-Portal-Signup-Bypass preview

Azure-APIM-Dev-Portal-Signup-Bypass

GitHubdz-y/azure-apim-dev-portal-signup-bypass

Python script to bypass Azure APIM signup when UI is disabled, this is different from the CVE-2025-66390 as it does not require you to setup anything…

api-securityapi-security-testingauthentication-authorization+6
15 days ago
anti-anti-automation preview

anti-anti-automation

GitHubbishopfox/anti-anti-automation

Anti-Anti-Automation Framework

anti-botcaptcha-bypasspenetration-testing+1
10012 years ago
core preview

core

GitHubopnsense/core

OPNsense GUI, API and systems backend

api-securitycaptcha-bypassconfiguration-auditing+4
4.6k2h 48m ago
PwnSTAR preview

PwnSTAR

GitHubsilverfoxx/pwnstar

PwnSTAR (Pwn SofT-Ap scRipt) - for all your fake-AP needs!

captcha-bypassdns-analysisexploitation+7
2608 years ago
awswaf preview

awswaf

GitHubxkiian/awswaf

AWS WAF Solver, full reverse implemented in 100% Python & Golang.

anti-botcaptcha-bypassids-ips-evasion+3
3561 year ago
nodriver preview

nodriver

GitHubultrafunkamsterdam/nodriver

Successor of Undetected-Chromedriver. Providing a blazing fast framework for web automation, webscraping, bots and any other creative ideas which are…

anti-botcaptcha-bypasscrawler+8
4.7k3 months ago
CVE-2026-49952 preview

CVE-2026-49952

GitHubpasswa11/cve-2026-49952

Chaining Security Bugs in Discuz! X5.0: from Race Condition to Pre-Auth RCE

captcha-bypassexploitationpenetration-testing+2
32 months ago
recaptcha preview

recaptcha

GitHubelyelysiox/recaptcha

Documentation and reverse engineering of reCAPTCHA

anti-botcaptcha-bypassdynamic-code-analysis+3
2331 month ago
HATCHA preview

HATCHA

GitHubmondaycom/hatcha

CAPTCHA proves you're human. HATCHA proves you're not.

ai-securityanti-botauthentication+3
1005 months ago
AudioCaptchaBypass-CVE-2008-2019 preview

AudioCaptchaBypass-CVE-2008-2019

GitHubtherook/audiocaptchabypass-cve-2008-2019
captcha-bypassexploitationfuzzing+2
26 years ago
CVE-2026-5411 preview

CVE-2026-5411

GitHubizxci/cve-2026-5411

CVE-2026-5411 WP Captcha PRO

captcha-bypassexploitationvulnerability-analysis+2
2 months ago
Dorkwright preview

Dorkwright

GitHubsan-tus/dorkwright

From Dork to Download: Automating Google Dorks with Playwright

captcha-bypasscrawlerinformation-gathering+3
493 months ago
noapi-google-search-mcp preview

noapi-google-search-mcp

GitHubvincentkaufmann/noapi-google-search-mcp

MCP server for Google search and page fetching using headless Chromium

anti-botcaptcha-bypasscrawler+8
1224 days ago
skyvern preview

skyvern

GitHubskyvern-ai/skyvern

Automate browser based workflows with AI

ai-securityanti-botcaptcha-bypass+2
22.8k9h 50m ago
vercel-botid preview

vercel-botid

GitHubxkiian/vercel-botid

Vercel BotID Solver "X-Is-Human" using 100% golang

anti-botcaptcha-bypassweb-application-exploitation+1
678 months ago
uncaptcha preview

uncaptcha

GitHubecthros/uncaptcha

Defeating Google's audio reCaptcha with 85% accuracy.

captcha-bypasseducationmachine-learning+2
2.8k8 years ago
evilTrust preview

evilTrust

GitHubs4vitar/eviltrust

Herramienta ideal para el despliegue automatizado de un Rogue AP con capacidad de selección de plantilla + 2FA. No requiere de conexión cableada.

captcha-bypassids-ips-evasionimpersonation-tools+5
6056 years ago
Previous12Next