Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
92 results
ajpfuzzer preview

ajpfuzzer

GitHubdoyensec/ajpfuzzer

A command-line fuzzer for the Apache JServ Protocol (ajp13)

fuzzingpenetration-testingvulnerability-analysis+1
983 years ago
wfuzz preview

wfuzz

GitHubxmendez/wfuzz

Modular web fuzzer for automated security testing. Injects payloads into any HTTP request field to discover vulnerabilities, brute-force parameters,…

fuzzingpenetration-testingvulnerability-analysis+2
6.6k8 months ago
boofuzz preview

boofuzz

GitHubjtpereyda/boofuzz

A fork and successor of the Sulley Fuzzing Framework

dns-fuzzingfuzzingnetwork-security+3
2.4k4 days ago
turbo-intruder preview

turbo-intruder

GitHubportswigger/turbo-intruder

High-speed Burp Suite extension for sending large volumes of HTTP requests with a custom stack, Python-based attack configuration, and advanced…

fuzzingpenetration-testingvulnerability-analysis+1
1.8k2 days ago
HackVault preview

HackVault

GitHub0xsobky/hackvault

A container repository for my public web hacks!

fuzzingpenetration-testingreconnaissance+1
2.0k8 years ago
WAFNinja preview

WAFNinja

GitHubkhalilbijjou/wafninja

WAFNinja is a tool which contains two functions to attack Web Application Firewalls.

fuzzingpenetration-testingwaf-bypass+1
8341 month ago
Coercer preview

Coercer

GitHubp0dalirius/coercer

A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 12 methods.

authenticationexploitationfuzzing+3
2.3k5 months ago
TLS-Attacker preview

TLS-Attacker

GitHubtls-attacker/tls-attacker

Java-based framework for systematic fuzzing and analysis of TLS libraries. Enables arbitrary protocol message crafting, modification, and testing of…

cryptographyfuzzingnetwork-security+2
8812 months ago
Freeway preview

Freeway

GitHubflock4h/freeway

WiFi Penetration Testing & Auditing Tool

fuzzingpenetration-testingwi-fi-auditing+1
9215 days ago
CANalyzat0r preview

CANalyzat0r

GitHubschutzwerk/canalyzat0r

Security analysis toolkit for proprietary car protocols

fuzzinghardware-iot-securitypenetration-testing+1
7946 years ago
DeepZero preview

DeepZero

GitHub416rehman/deepzero

Find zero-days while you sleep. DeepZero is an automated vulnerability research framework that parses, decompiles, and analyzes thousands of Windows…

ai-assisted-reversingbinary-analysisfuzzing+3
72815 days ago
fuzzowski preview

fuzzowski

GitHubnccgroup/fuzzowski

the Network Protocol Fuzzer that we will want to use.

fuzzingnetwork-securitypenetration-testing+1
7944 years ago
mutiny-fuzzer preview

mutiny-fuzzer

GitHubcisco-talos/mutiny-fuzzer

Network protocol fuzzer that replays PCAP traffic through a mutational engine (Radamsa) to quickly discover vulnerabilities in target hosts via…

fuzzingnetwork-securitypenetration-testing+1
6414 years ago
DHCPig preview

DHCPig

GitHubkamorin/dhcpig

DHCP exhaustion script written in python using scapy network library

exploitationfuzzingnetwork-security+3
35513 days ago
lightbulb-framework preview

lightbulb-framework

GitHublightbulb-framework/lightbulb-framework

Tools for auditing WAFS

fuzzingpenetration-testingvulnerability-analysis+2
4655 years ago
htcap preview

htcap

GitHubfcavallarin/htcap

htcap is a web application scanner able to crawl single page application (SPA) recursively by intercepting ajax calls and DOM changes.

crawlerfuzzingpenetration-testing+2
6284 years ago
WS-Attacker preview

WS-Attacker

GitHubrub-nds/ws-attacker

WS-Attacker is a modular framework for web services penetration testing. It is developed by the Chair of Network and Data Security, Ruhr University…

fuzzingpenetration-testingvulnerability-analysis+1
4944 years ago
goWAPT preview

goWAPT

GitHubdzonerzy/gowapt

Go Web Application Penetration Test

fuzzingpenetration-testingscripting-automation+4
3452 years ago
Previous123456Next