Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
22 results
fuzz4bounty preview

fuzz4bounty

GitHub0xpugal/fuzz4bounty

1337 Wordlists for Bug Bounty Hunting

curated-resourcesfuzzinginformation-gathering+2
9896 days ago
godirb preview

godirb

GitHubmycode83/godirb

Fast and easy-to-use directory brute-forcer written in Go.

fuzzinginformation-gatheringpenetration-testing+3
51 month ago
w1f1t3kAl1 preview

w1f1t3kAl1

GitHubnu11secur1ty/w1f1t3kal1

w1f1t3kAl1

cryptographyfuzzingpassword-attacks+3
472 months ago
koyane-framework preview

koyane-framework

GitLabpuppetm4ster/koyane-framework

Modular wordlist generation, editing, analysis, and discovery toolkit for password cracking, fuzzing, and ethical security testing. Supports…

educationfuzzingpassword-cracking+1
4 months ago
wfuzz preview

wfuzz

GitHubxmendez/wfuzz

Modular web fuzzer for automated security testing. Injects payloads into any HTTP request field to discover vulnerabilities, brute-force parameters,…

fuzzingpenetration-testingvulnerability-analysis+2
6.6k9 months ago
wordlist.rb preview

wordlist.rb

GitHubpostmodern/wordlist.rb

A Ruby library and CLI for generating and working with wordlists.

fuzzingpassword-attackspenetration-testing+1
509 months ago
forbidden preview

forbidden

GitHubivan-sincek/forbidden

Bypass 4xx HTTP response status codes and more. The tool is based on Python Requests, PycURL, and HTTP Client.

fuzzingids-ips-evasioninformation-gathering+5
2571 year ago
lorsrf preview

lorsrf

GitHubmindpatch/lorsrf

Fast CLI tool to find the parameters that can be used to find SSRF or Out-of-band resource load :artificial_satellite: :crab:

fuzzingpenetration-testingvulnerability-scanners+1
2952 years ago
scan4all preview

scan4all

GitHubghosttroops/scan4all

Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port…

dns-subdomain-enumerationexploit-frameworksfuzzing+9
6.2k2 years ago
CrackQL preview

CrackQL

GitHubnicholasaleks/crackql

GraphQL penetration testing tool that exploits weak rate limits and cost analysis to brute-force credentials, bypass 2FA, enumerate users, and fuzz…

api-security-testingfuzzingpassword-attacks+2
3533 years ago
navgix preview

navgix

GitHubhakaioffsec/navgix

Multi-threaded Go tool to detect nginx alias traversal vulnerabilities using heuristic and brute-force techniques for identifying vulnerable…

fuzzingmisconfigurationvulnerability-scanners+1
753 years ago
chameleon preview

chameleon

GitHubiustin24/chameleon

Technology-aware web content discovery scanner: detects Wappalyzer fingerprints, adapts wordlists/extensions, and performs fast directory bruteforce…

fuzzinginformation-gatheringpenetration-testing+2
3813 years ago
filebuster preview

filebuster

GitHubhenshin/filebuster

An extremely fast and flexible web fuzzer

fuzzinginformation-gatheringpenetration-testing+1
2233 years ago
ParamPamPam preview

ParamPamPam

GitHubbo0om/parampampam

Brute-force tool for discovering hidden GET and POST parameters in web applications, supporting custom wordlists and concurrent requests.

fuzzinginformation-gatheringweb-security
2754 years ago
vaf preview

vaf

GitHubandreiverse/vaf

Multi-threaded web fuzzer for URL path, HTTP header, and POST data brute-forcing with proxy support, status code filtering, and reflexive content…

fuzzingpenetration-testingvulnerability-scanners+1
3184 years ago
FuzzingTool preview

FuzzingTool

GitHubnescau-ufla/fuzzingtool

Software for fuzzing, used on web application pentestings.

fuzzingpenetration-testingvulnerability-scanners+1
1794 years ago
urlbuster preview

urlbuster

GitHubcytopia/urlbuster

Powerful mutable web directory fuzzer to bruteforce existing and/or hidden files or directories.

fuzzinginformation-gatheringvulnerability-scanners+1
1685 years ago
rbuster preview

rbuster

GitHubsmirnovvad/rbuster

yet another dirbuster

fuzzinginformation-gatheringpenetration-testing+1
185 years ago
Previous12Next