Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
76 results
HawkScan preview

HawkScan

GitHubc0dejump/hawkscan

Security Tool for Reconnaissance and Information Gathering on a website. (python 3.x)

crawlerfuzzinginformation-gathering+5
463
2 months ago
angryFuzzer preview

angryFuzzer

GitHubihebski/angryfuzzer

Tools for information gathering

fuzzinginformation-gatheringpenetration-testing+2
3632 years ago
CVE-2023-20052 preview

CVE-2023-20052

GitHubnokn0wthing/cve-2023-20052

CVE-2023-20052, information leak vulnerability in the DMG file parser of ClamAV

exploitationfuzzinginformation-gathering+2
293 years ago
CVE-2022-36163 preview

CVE-2022-36163

GitHubmaherazzouzi/cve-2022-36163

Proof-of-concept exploit for CVE-2022-36163, a format string vulnerability in pdftoroff hovacui 1.1.0 PDF reader, demonstrating local…

binary-analysisexploitationfuzzing+2
14 years ago
Bheem preview
Archived

Bheem

GitHubharsh-bothra/bheem

Scope-based reconnaissance automation framework that orchestrates multiple open-source tools for subdomain enumeration, vulnerability scanning, and…

dns-analysisfuzzinginformation-gathering+5
3755 years ago
Raccoon preview

Raccoon

GitHubevyatarmeged/raccoon

A high performance offensive security tool for reconnaissance and vulnerability scanning

dns-analysisfuzzinginformation-gathering+6
4.0k1 year ago
CaA preview

CaA

GitHuboverspace-labs/caa

BurpSuite plugin for HTTP packet analysis and fuzzing dictionary generation. Extracts parameters, paths, and files from requests, counts frequency,…

fuzzinginformation-gatheringpayload-generation+2
1.5k3 months ago
PenBox preview

PenBox

GitHubx3omdax/penbox

PenBox - A Penetration Testing Framework - The Tool With All The Tools , The Hacker's Repo

exploitationfuzzinginformation-gathering+8
5369 years ago
fuzz.txt preview

fuzz.txt

GitHubbo0om/fuzz.txt

Potentially dangerous files

fuzzinginformation-gatheringpenetration-testing+3
3.3k1 month ago
fuzz4bounty preview

fuzz4bounty

GitHub0xpugal/fuzz4bounty

1337 Wordlists for Bug Bounty Hunting

curated-resourcesfuzzinginformation-gathering+2
98322h 6m ago
ParamSpider preview

ParamSpider

GitHubdevanshbatham/paramspider

Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing

fuzzinginformation-gatheringosint+2
3.2k6 months ago
OneListForAll preview

OneListForAll

GitHubsix2dez/onelistforall

Curated, categorized wordlist generator for web fuzzing, directory enumeration, and subdomain discovery. Automatically syncs 36+ sources, classifies…

curated-resourcesfuzzinginformation-gathering+3
3.2k6 months ago
Oralyzer preview

Oralyzer

GitHubr0075h3ll/oralyzer

Python-based open redirect vulnerability scanner that fuzzes URLs to detect header, JavaScript, and meta tag-based redirects, with integrated…

fuzzinginformation-gatheringvulnerability-scanners+1
82618 days ago
BlackWidow preview

BlackWidow

GitHub1n3/blackwidow

A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.

fuzzinginformation-gatheringosint+3
1.8k4 months ago
TIDoS-Framework preview

TIDoS-Framework

GitHub0xinfection/tidos-framework

The Offensive Manual Web Application Penetration Testing Framework.

exploitationfuzzinginformation-gathering+7
1.9k5 years ago
leaky-paths preview

leaky-paths

GitHubayoubfathi/leaky-paths

A collection of special paths linked to common sensitive APIs, devops internals, frameworks conf, known misconfigurations, juicy APIs ..etc. It could…

curated-resourcesfuzzinginformation-gathering+3
1.2k5 months ago
NucleiFuzzer preview

NucleiFuzzer

GitHub0xkayala/nucleifuzzer

Automated web vulnerability scanner combining URL discovery tools (ParamSpider, waybackurls, gauplus, hakrawler, katana) with Nuclei fuzzing…

fuzzinginformation-gatheringpenetration-testing+3
1.9k4 months ago
GAP-Burp-Extension preview

GAP-Burp-Extension

GitHubxnl-h4ck3r/gap-burp-extension

Burp Extension to find potential endpoints, parameters, and generate a custom target wordlist

fuzzinginformation-gatheringpenetration-testing+3
1.5k8 months ago
Previous12345Next