Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

27 results

mitmproxy

mitmproxy/mitmproxy

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

android-securityapi-securityapi-security-testing+12

44.9k

13 days ago

chisel

jpillora/chisel

Fast TCP/UDP tunnel over HTTP with SSH encryption, supporting reverse port forwarding, SOCKS5 proxy, and client authentication for secure network…

command-and-controldata-exfiltrationgeneral-purpose-utilities+8

16.5k6 days ago

brpc

apache/brpc

Industrial-grade C++ RPC framework for building high-performance distributed systems, supporting multiple protocols (HTTP, gRPC, Redis, Thrift) with…

api-securitycloud-securitygeneral-purpose-utilities+3

17.6k0 days ago

httpx

projectdiscovery/httpx

Fast, multi-probe HTTP toolkit for reconnaissance and information gathering. Probes TLS, CSP, headers, tech stack, and CDN. Supports matchers,…

api-securityapi-security-testingcrawler+18

10.4k3 days ago

wuzz

asciimoo/wuzz

Interactive cli tool for HTTP inspection

general-purpose-utilitiesscripting-automationweb-proxies-interception

10.7k1 month ago

mallory

justmao945/mallory

HTTP/HTTPS proxy over SSH

general-purpose-utilitiesnetwork-securityweb-proxies-interception

3242 years ago

httptoolkit

httptoolkit/httptoolkit

HTTP Toolkit is a beautiful & open-source tool for debugging, testing and building with HTTP(S) on Windows, Linux & Mac :tada: Open an issue here…

api-security-testinggeneral-purpose-utilitiespenetration-testing+1

3.6k7 months ago

httpstat

reorx/httpstat

CLI tool that wraps curl to visualize HTTP request timing breakdowns (DNS, TCP, TLS, server processing) with structured JSON output and SLO threshold…

general-purpose-utilitiesnetwork-securityscripting-automation

6.2k5 months ago

caddy

caddyserver/caddy

Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS

anti-botencryption-decryption-toolsgeneral-purpose-utilities+1

75.6k9h 21m ago

ethr

microsoft/ethr

Cross-platform CLI for network performance testing over TCP, UDP, HTTP, HTTPS, and ICMP: bandwidth, connections/s, packets/s, latency, loss, jitter,…

data-exfiltrationgeneral-purpose-utilitiesinformation-gathering+3

5.9k9 months ago

httprobe

tomnomnom/httprobe

Take a list of domains and probe for working HTTP and HTTPS servers

dns-subdomain-enumerationgeneral-purpose-utilitiesinformation-gathering+7

3.1k4 years ago

cli

httpie/cli

🥧 HTTPie CLI — modern, user-friendly command-line HTTP client for the API era. JSON support, colors, sessions, downloads, plugins & more.

api-security-testinggeneral-purpose-utilitiesweb-security

38.5k1 year ago

sish

antoniomika/sish

HTTP(S)/WS(S)/TCP Tunnels to localhost using only SSH.

general-purpose-utilitiesnetwork-securityutilities-frameworks+1

4.7k2 months ago

proxychains-ng

rofl0r/proxychains-ng

proxychains ng (new generation) - a preloader which hooks calls to sockets in dynamically linked programs and redirects it through one or more…

command-and-controldata-exfiltrationgeneral-purpose-utilities+6

10.7k11 days ago

squid

squid-cache/squid

Squid Web Proxy Cache - Source Code

authentication-authorizationdns-analysisgeneral-purpose-utilities+3

3.1k6 days ago

httplab

qustavo/httplab

Interactive web server for inspecting HTTP requests and forging responses, with a terminal UI for real-time debugging and API testing.

api-security-testingdebuggersgeneral-purpose-utilities+1

4.1k2 years ago

square__retrofit_CVE-2018-1000850_2-4-0

shoucheng3/square__retrofit_cve-2018-1000850_2-4-0

Type-safe HTTP client library for Android and Java, enabling REST API communication with annotation-based request configuration and converter support.

api-security-testinggeneral-purpose-utilities

1 year ago

Retrofit-1

epicosy/retrofit-1

Type-safe HTTP client for Android and Java with annotation-based API binding, converter support, and integration with OkHttp for network…

api-security-testinggeneral-purpose-utilitiesvulnerability-analysis

2 years ago

Previous12 Next