Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
16 results
restler-fuzzer preview

restler-fuzzer

GitHubmicrosoft/restler-fuzzer

RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and…

api-security-testingcloud-securityfuzzing+2
2.9k
6 months ago
WS-Attacker preview

WS-Attacker

GitHubrub-nds/ws-attacker

WS-Attacker is a modular framework for web services penetration testing. It is developed by the Chair of Network and Data Security, Ruhr University…

fuzzingpenetration-testingvulnerability-analysis+1
4954 years ago
RatRace preview

RatRace

GitHubbogdanticu88/ratrace

A lightweight CLI tool for systematically detecting and exploiting race conditions in web applications, APIs, and modern services.

api-security-testingdevsecopsexploitation+5
104 months ago
Raccoon preview

Raccoon

GitHubevyatarmeged/raccoon

A high performance offensive security tool for reconnaissance and vulnerability scanning

dns-analysisfuzzinginformation-gathering+6
4.0k4 months ago
py3webfuzz preview

py3webfuzz

GitHubjangelesg/py3webfuzz

A Python3 module to assist in fuzzing web applications

fuzzingpayload-generationpenetration-testing+2
572 years ago
gobuster preview

gobuster

GitHuboj/gobuster

Directory/File, DNS and VHost busting tool written in Go

cloud-securitydns-subdomain-enumerationfuzzing+3
14.1k7 months ago
Penetration-Testing-Tools preview

Penetration-Testing-Tools

GitHubmgeeky/penetration-testing-tools

A collection of more than 170+ tools, scripts, cheatsheets and other loots that I've developed over years for Red Teaming/Pentesting/IT Security…

cloud-securitycurated-resourcesexploitation+8
3.0k3 years ago
collection-document preview

collection-document

GitHubtom0li/collection-document

Collection of quality safety articles. Awesome articles.

cloud-securitycurated-resourcesdevsecops+9
2.1k5 years ago
WindowsProtocolTestSuites preview

WindowsProtocolTestSuites

GitHubmicrosoft/windowsprotocoltestsuites

⭐⭐ Join us at SNIA SDC for the SMB3 IO Lab (September 28 - October 1, 2026), see upcoming Interoperability Events

authenticationcloud-securityconfiguration-auditing+6
56513h 31m ago
pythem preview

pythem

GitHubm4n3dw0lf/pythem

pentest framework

exploitationfuzzingnetwork-mapping+5
1.2k7 years ago
awesome-rust-security preview

awesome-rust-security

GitHubosirislab/awesome-rust-security

Curated list of awesome projects and resources related to Rust and computer security

binary-analysiscloud-securitycryptography+9
6052 years ago
LogMePwn preview

LogMePwn

GitHub0xinfection/logmepwn

A fully automated, reliable, super-fast, scanning and validation toolkit for the Log4J RCE CVE-2021-44228 vulnerability.

exploitationfuzzingnetwork-mapping+3
3951 month ago
pentest-mcp preview

pentest-mcp

GitHubdmontgomery40/pentest-mcp

NOT for educational purposes: An MCP server for professional penetration testers including STDIO/HTTP/SSE support, nmap, go/dirbuster, nikto, JtR,…

exploitationfuzzingnetwork-mapping+8
1435 months ago
nili preview

nili

GitHubniloofarkheirkhah/nili

Nili is a Tool for Network Scan, Man in the Middle, Protocol Reverse Engineering and Fuzzing.

fuzzingnetwork-mappingpacket-sniffing-analysis+1
2186 years ago
nextjs-cve-2026-44578 preview

nextjs-cve-2026-44578

GitHublove07oj/nextjs-cve-2026-44578

Nuclei templates for detecting CVE-2026-44578 (Next.js WebSocket Upgrade SSRF) with multi-cloud metadata validation, Next.js fingerprinting, and…

cloud-securityexploitationfuzzing+3
73 months ago
onefuzz preview
Archived

onefuzz

GitHubmicrosoft/onefuzz

A self-hosted Fuzzing-As-A-Service platform

cloud-securitydevsecopsdynamic-analysis-sandboxing+2
2.8k2 years ago