Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

180 results

vert-x3__vertx-web_CVE-2019-17640_3-9-3

shoucheng3/vert-x3__vertx-web_cve-2019-17640_3-9-3

Analysis and exploitation code for CVE-2019-17640, a vulnerability in Vert.x-Web. Provides a targeted test case for security researchers validating…

general-purpose-utilitiesvulnerability-analysisweb-application-exploitation+1

1 year ago

CVE-2012-4431

imjdl/cve-2012-4431

Apache Tomcat source code repository for CVE-2012-4431, a Java servlet container vulnerability. Provides the vulnerable codebase for analysis and…

general-purpose-utilitiesvulnerability-analysisweb-application-exploitation+1

7 years ago

nuclei

projectdiscovery/nuclei

Fast YAML-based vulnerability scanner with template-driven detection engine for automated security testing across web apps, APIs, networks, DNS, and…

anti-botapi-securityapi-security-testing+21

31.7k2 days ago

proxy2

inaz2/proxy2

HTTP/HTTPS proxy in a single python script

general-purpose-utilitiesweb-proxies-interceptionweb-security

5519 years ago

password_generator

krishnakanthb13/password_generator

A production-ready, cryptographically secure password generator CLI with 17 generation modes, entropy transparency, and comprehensive customization…

authenticationcryptographyencryption-decryption-tools+3

257 months ago

playwright

microsoft/playwright

Browser automation framework with a single API for Chromium, Firefox, and WebKit. Supports web testing, scraping, screenshots, and network…

captcha-bypasscrawlerfingerprint-spoofing+2

97.1k1 day ago

searxng

searxng/searxng

Privacy-respecting metasearch engine that aggregates results from multiple search services without tracking or profiling users. Self-hostable with…

crawlergeneral-purpose-utilitiesinformation-gathering+2

37.9k4h 43m ago

Agent-Reach

panniantong/agent-reach

Give your AI agent eyes to see the entire internet. Read & search Twitter, Reddit, YouTube, GitHub, Bilibili, XiaoHongShu — one CLI, zero API fees.

ai-securitycrawlergeneral-purpose-utilities+5

87.0k18 days ago

httrack

xroche/httrack

HTTrack Website Copier, copy websites to your computer (Official repository)

crawlergeneral-purpose-utilitiesinformation-gathering

4.8k2 days ago

pagesource

timf34/pagesource

CLI to download websites' actual JS/CSS/assets (not flattened HTML)

crawlergeneral-purpose-utilitiesinformation-gathering+3

3599 months ago

VK-Scraper

vanyasem/vk-scraper

Command-line tool to scrape and download media (photos, videos, stories) from VKontakte users and communities using the VK API. Supports multiple…

crawlergeneral-purpose-utilitiesinformation-gathering+1

593 years ago

startpage-parser

mindpatch/startpage-parser

parsing search results from startpage search engine (based on google.com results)

crawlergeneral-purpose-utilitiesinformation-gathering+2

175 years ago

pepeScraper

juaanreis/pepescraper

4chan content scraper

crawlerdata-exfiltrationgeneral-purpose-utilities+2

62 months ago

Archived

fake-useragent

fake-useragent/fake-useragent

Up-to-date simple useragent faker with real world database

crawlerfingerprint-spoofinggeneral-purpose-utilities+1

4.0k6 months ago

proxy-workbench

davidvoitenko/proxy-workbench

Collects, checks and ranks public HTTP/SOCKS proxies against your own targets, then serves them via ranked exports, pools, a rotating gateway and a…

crawlergeneral-purpose-utilitiesinformation-gathering+5

123 days ago

perwendel__spark_CVE-2018-9159_2-7-1

shoucheng3/perwendel__spark_cve-2018-9159_2-7-1

Lightweight Java 8 web framework with routing, filters, and static file serving. Includes security advisory for older versions and CRUD API examples.

api-security-testingeducationgeneral-purpose-utilities+3

1 year ago

caddy

caddyserver/caddy

Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS

anti-botencryption-decryption-toolsgeneral-purpose-utilities+1

76.3k21h 22m ago

ZX-DDoS

mrgoofydev/zx-ddos

Python-based DDoS stress testing tool for educational and authorized network security evaluation, supporting configurable workers and request counts.

educationgeneral-purpose-utilitiesnetwork-security+3

5214 days ago

Previous12…10 Next