Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
354 results
MASTG-Hacking-Playground preview

MASTG-Hacking-Playground

GitHubowasp/mastg-hacking-playground

Collection of intentionally insecure iOS and Android apps for learning mobile security testing, reverse engineering, and vulnerability analysis,…

android-securityeducationios-security+5
695
3 years ago
iGoat-Swift preview

iGoat-Swift

GitHubowasp/igoat-swift

OWASP iGoat (Swift) - A Damn Vulnerable Swift Application for iOS

ctfeducationios-security+6
4548 months ago
D4N155 preview

D4N155

GitHubowasp/d4n155

OWASP D4N155 - Intelligent and dynamic wordlist using OSINT

crawlerinformation-gatheringosint+1
2701 month ago
PwnzzAI preview

PwnzzAI

GitHubowasp/pwnzzai

Hands-on AI security learning platform with intentionally vulnerable LLM applications. Explore OWASP Top 10 for LLMs through interactive pizza shop…

ai-securityctfcurated-resources+6
662 days ago
secure-agent-playbook preview

secure-agent-playbook

GitHubowasp/secure-agent-playbook

OWASP Secure Agent Playbook Project

ai-securityapi-securitycloud-security+9
1683 months ago
WebGoat.NET preview

WebGoat.NET

GitHubowasp/webgoat.net

OWASP WebGoat.NET

code-analysiseducationlabs-practice+3
7313 years ago
OWASPBugBounty preview

OWASPBugBounty

GitHubowasp/owaspbugbounty

This is a container of web applications that work with OWASP Bug Bounty for Projects

ctfeducationlabs-practice+3
341 year ago
Security-Champions preview

Security-Champions

GitHubowasp/security-champions

OWASP guide for security champions, providing curated resources and learning paths to foster security culture and practices within development teams.

curated-resourceseducationlearning-paths-courses+2
191 month ago
mas-website preview

mas-website

GitHubowasp/mas-website

The OWASP Mobile Application Security Project website is the central hub for industry-leading standards, guides, and resources—helping developers and…

android-securitycurated-resourceseducation+4
1313h 7m ago
SAPKiln preview

SAPKiln

GitHubowasp/sapkiln

OWASP SAPKiln is a graphical user interface (GUI) tool designed to facilitate securing and auditing SAP systems effectively.

configuration-auditinglateral-movementosint+3
303 years ago
DonkAI preview

DonkAI

GitHubowasp/donkai

DonkAI is a hands-on lab for the OWASP Top 10 for LLM Applications (2025) - no real LLM required.

ai-securityctfeducation+6
123 months ago
wwwgrep preview
Archived

wwwgrep

GitHubowasp/wwwgrep

OWASP Foundation Web Respository

code-analysisinformation-gatheringpenetration-testing+3
365 years ago
SecurityShepherd preview

SecurityShepherd

GitHubowasp/securityshepherd

Web and mobile application security training platform

ctfeducationlabs-practice+3
1.5k15 days ago
DVSA preview

DVSA

GitHubowasp/dvsa

a Damn Vulnerable Serverless Application

api-security-testingcloud-infrastructure-securitycloud-security+6
5473 years ago
OWASPWebGoatPHP preview

OWASPWebGoatPHP

GitHubowasp/owaspwebgoatphp

A deliberately vulnerable web application for learning web application security.

ctfeducationlabs-practice+3
1591 year ago
owasp-istg preview

owasp-istg

GitHubowasp/owasp-istg

The IoT Security Testing Guide (ISTG) provides a comprehensive methodology for penetration tests in the IoT field, offering flexibility to adapt…

curated-resourceseducationembedded-systems-security+9
1301 month ago
WebGoat preview

WebGoat

GitHubowasp/webgoat

This is a defunct code base. The project is located at: https://github.com/WebGoat

educationlabs-practicepenetration-testing+3
5510 years ago
QRLJacking preview

QRLJacking

GitHubowasp/qrljacking

Social engineering attack vector and exploitation framework for hijacking user sessions via QR code login, targeting web applications like WhatsApp,…

exploit-frameworkspenetration-testingphishing+2
1.6k1 year ago
Previous1…345…20Next