Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

26 results

mitmproxy

mitmproxy/mitmproxy

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

android-securityapi-securityapi-security-testing+12

45.1k

5 days ago

ecapture

gojue/ecapture

Capturing SSL/TLS plaintext without a CA certificate using eBPF. Supported on Linux/Android kernels for amd64/arm64.

android-securitydatabase-securitydynamic-analysis-sandboxing+3

15.5k5 days ago

PCAPdroid

emanuele-f/pcapdroid

No-root network monitor, firewall and PCAP dumper for Android

android-securitydns-analysiseducation+8

4.7k18h 25m ago

evil-twin-ap

jean-nestor/evil-twin-ap

Automated evil twin access point toolkit with traffic capture and real-time monitoring for wireless penetration testing and security research.

educationnetwork-securitypacket-sniffing-analysis+4

1111 months ago

android

csploit/android

cSploit - The most complete and advanced IT security professional toolkit on Android.

android-securityexploit-frameworksmobile-security+4

3.7k5 years ago

Hx0-HawkEye

asaotomo/hx0-hawkeye

一个轻量级浏览器抓包与安全分析扩展，在浏览器侧边栏中即可完成抓包、拦截、修改、重放、规则检测与AI辅助分析的完整工作流。（A lightweight browser extension for traffic capture and security analysis, enabling…

ai-securityapi-security-testingctf+7

835 days ago

USBArmyKnife

i-am-shodan/usbarmyknife

USB Army Knife – the ultimate close access tool for penetration testers and red teamers.

bluetooth-securitydata-exfiltrationhardware-hacking+8

2.9k10 days ago

MESH

barghest-ngo/mesh

Encrypted peer-to-peer mesh VPN for remote mobile forensics, enabling wireless ADB and libimobiledevice acquisition, network monitoring, and…

android-securitydigital-forensicsencryption-decryption-tools+8

1863 days ago

MobileApp-Pentest-Cheatsheet

tanprathan/mobileapp-pentest-cheatsheet

The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration…

android-securitycurated-resourcesdynamic-code-analysis+9

5.3k2 years ago

game-of-kingshot-re

kdbugk/game-of-kingshot-re

Educational reverse engineering study of a Unity/IL2CPP Android game. Documents gateway protocol decoding, native anti-tampering SDK analysis, SSL…

android-securitybinary-analysisdynamic-analysis-sandboxing+5

314 months ago

Archived

reFlutter

ptswarm/reflutter

Flutter Reverse Engineering Framework

android-securitybinary-analysisdynamic-analysis-sandboxing+4

1.5k4 years ago

NetRipper

nytrorst/netripper

NetRipper - Smart traffic sniffing for penetration testers

packet-sniffing-analysispenetration-testingpost-exploitation

1.4k4 years ago

minipwner

nicholasadamou/minipwner

A script to configure a TP-Link MR3040 running OpenWRT into a simple, yet powerful penetration-testing "dropbox".

exploitationids-ips-evasioninformation-gathering+8

741 year ago

android_kernel_xiaomi_sm8150

loukious/android_kernel_xiaomi_sm8150

Nethunter kernel for the POCO X3 Pro (vayu) based on crDroid's kernel.

android-securitymobile-securitynetwork-security+4

261 day ago

flare-fakenet-ng

mandiant/flare-fakenet-ng

FakeNet-NG - Next Generation Dynamic Network Analysis Tool

dynamic-analysis-sandboxingmalware-analysisnetwork-security+2

2.2k3 months ago

CyberScan

medbenali/cyberscan

Open-source network forensics toolkit for packet analysis, port scanning, host discovery, and IP geolocation. Supports ARP, ICMP, TCP, UDP pings and…

information-gatheringnetwork-forensicsnetwork-mapping+3

4694 months ago

hyenae-ng

r-richter/hyenae-ng

Cross-platform network packet generator with full layer spoofing, pattern-based address randomization, and flood detection evasion for stress-testing…

fuzzingnetwork-securitypacket-sniffing-analysis+1

1356 years ago

Hermes-Proxy

jp/hermes-proxy

Hermes Proxy - HTTP Traffic Analyzer

api-security-testingdebuggersdynamic-analysis-sandboxing+3

665 days ago

Previous12 Next