Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
22 results
SDK preview

SDK

GitHubintelligencex/sdk

SDK for querying the Intelligence X search engine and data archive, supporting selectors like email, domain, IP, and phone. Includes API wrappers in…

api-security-testinginformation-gatheringosint+2
550
3 months ago
feroxfuzz preview

feroxfuzz

GitHubepi052/feroxfuzz

Build structure-aware black-box HTTP fuzzers in Rust with composable mutators, schedulers, observers, deciders, and processors for custom web and API…

api-security-testingfuzzingutilities-frameworks+1
2237 months ago
AutoRepeater preview

AutoRepeater

GitHubnccgroup/autorepeater

Automated HTTP Request Repeating With Burp Suite

api-security-testingauthentication-authorizationpenetration-testing+4
8954 years ago
alexafaraday preview

alexafaraday

GitHubinfobyte/alexafaraday

Alexa skill example for Faraday API

api-security-testingpenetration-testingscripting-automation+2
57 years ago
suds preview

suds

GitHubosirium/suds

Clone of suds 0.4 + suds-0.4-CVE-2013-2217.patch

api-securityapi-security-testingscripting-automation+3
8 years ago
pysap preview

pysap

GitHubowasp/pysap

pysap is an open source Python library that provides modules for crafting and sending packets using SAP's NI, Diag, Enqueue, Router, MS, SNC, IGS,…

educationexploitationfuzzing+5
2568 days ago
burp-cc-bridge preview

burp-cc-bridge

GitHublarrypeseckis/burp-cc-bridge

REST API automation for Burp Suite Community Edition. Drop-in Java extension exposing send/repeat/history endpoints over a local HTTP API.

api-security-testingpenetration-testingscripting-automation+3
73 months ago
resterm preview

resterm

GitHubunkn0wn-root/resterm

Terminal API client for HTTP, GraphQL and gRPC. Plain .http files you can diff and version, with workflows, mocks, profiling, tracing, OpenAPI…

api-security-testingcloud-securitydevsecops+3
1.9k1 day ago
drift-node-sdk preview

drift-node-sdk

GitHubuse-tusk/drift-node-sdk

Node.js SDK for capturing and replaying API calls made to/from your service

api-security-testingscripting-automationutilities-frameworks
1734 months ago
http-breakout-proxy preview

http-breakout-proxy

GitHubjbsouthe/http-breakout-proxy

HTTP Proxy Analysis for reverse engineering protocol communication

api-security-testinginformation-gatheringlog-analysis+5
629 months ago
dwipe preview

dwipe

GitHubjoedefen/dwipe

Tool to securely and efficiently wipe devices and partiitions for Linux

data-recoveryencryption-decryption-toolsforensics+3
1647 months ago
tusk-cli preview

tusk-cli

GitHubuse-tusk/tusk-cli

Automated testing suite with live traffic record and replay

api-security-testingcode-analysisdevsecops+3
1433 months ago
hulak preview

hulak

GitHubxaaha/hulak

Lightweight file-based CLI API client with age-encrypted secrets, first-class GraphQL support and MCP server for agentic workflow.

api-securityapi-security-testingauthentication+4
948 days ago
sopa preview

sopa

GitHubmacmod/sopa

A practical client for ADWS in Golang.

authenticationinformation-gatheringpenetration-testing+3
551 month ago
toolbox preview

toolbox

GitHubgo-appsec/toolbox

Collaborative application security testing between humans and agents via CLI and MCP

api-security-testingcrawlerdynamic-analysis-sandboxing+8
435 days ago
httpx preview

httpx

GitHubprojectdiscovery/httpx

Fast, multi-probe HTTP toolkit for reconnaissance and information gathering. Probes TLS, CSP, headers, tech stack, and CDN. Supports matchers,…

api-securityapi-security-testingcrawler+18
10.4k1 day ago
Burp_Collector preview

Burp_Collector

GitHubsajibuu/burp_collector

A Multi-Processing Tool for collecting and extracting information to an Excel file from a Burp Suite output file.

api-security-testinginformation-gatheringpenetration-testing+4
102 years ago
nuclei-burp-plugin preview

nuclei-burp-plugin

GitHubprojectdiscovery/nuclei-burp-plugin

Burp Suite plugin for generating and executing Nuclei vulnerability templates directly from HTTP requests and responses, with YAML auto-complete and…

api-security-testingpenetration-testingutilities-frameworks+2
1.3k10 months ago
Previous12Next