Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems Security
General Purpose Utilities
Indicator of Compromise (IOC) Management
OSINT (Open Source Intelligence)
Packet Sniffing & Analysis
Password Cracking
Penetration Testing Frameworks
Phishing Tools
Privilege Escalation
Reconnaissance
Static Analysis
Vulnerability Scanners
Web Vulnerability Scanners
Wi-Fi Auditing
Bluetooth Security
Container Security
Dynamic Analysis (Sandboxing)
Encryption/Decryption Tools
Exploit Frameworks
Identity Management
iOS Security
IoT Security
Memory Forensics
Network Mapping
OSINT for Social Engineering
Password Attacks
Payload Generation
Persistence Mechanisms
Port Scanning
Static Code Analysis (SAST)
Threat Feeds & Aggregators
Vulnerability Analysis
Web Proxies & Interception
Code Analysis
DNS & Subdomain Enumeration
Dynamic Code Analysis (DAST)
Exploitation
Hash Analysis
IDS/IPS Evasion
Impersonation Tools
Lateral Movement
Mobile App Pentesting
Network Forensics
Reverse Engineering
RFID/NFC Tools
SCADA/ICS Security
Scripting & Automation
Serverless Security
Shellcode
Web Application Exploitation
API Security Testing
Configuration Auditing
Data Exfiltration
Debuggers
Forensics
Information Gathering
Mobile Forensics
Network Access Control
Post-Exploitation
Security Virtualization
Phishing
WAF Bypass
Web Security
Fuzzing
Network Security
Steganography
Wireless Security
Data Recovery
Malware Analysis
Digital Forensics
Hardware Hacking
Cryptography
CTF
Penetration Testing
Cloud Security
DevSecOps
Mobile Security
Privacy
Command and Control
Social Engineering
Hardware Security
Utilities & Frameworks
Hardware & IoT Security
Secret Detection
Binary Analysis
Threat Intelligence
Identity & Access Management (IAM)
Supply Chain Security
Authentication
Machine Learning
Intrusion Detection
Papers & Research
Misconfiguration
Subdomain Enumeration
Email Harvesting
Learning & Education
AI-Assisted Reversing
DNS Fuzzing
Red Teaming
Incident Response
Crawler
Curated Resources
Remote Access Tool
Shellcode Generation
Payload Development
Remote Access Trojan
API Security
Anti-Bot
Fingerprint Spoofing
CAPTCHA Bypass
Email Security
DNS Analysis
Chaos Engineering
Learning Paths & Courses
Container Escape
AI Security
Database Security
Firmware Analysis
Anomaly Detection
Log Analysis
Adversarial Attack
Binary Exploitation
Labs & Practice
NewestRelevanceMost popularRecently updated
132 results
SafeLine preview

SafeLine

GitHubchaitin/safeline

Self-hosted WAF and reverse proxy that filters malicious HTTP traffic, blocks SQL injection, XSS, and bot attacks, with rate limiting and dynamic…

anti-botapi-securityapi-security-testing+8
22.6k5 days ago
westone-CVE-2020-14883-scanner preview

westone-CVE-2020-14883-scanner

GitHubosyanina/westone-cve-2020-14883-scanner

A vulnerability scanner that detects CVE-2020-14883 vulnerabilities.

exploitationinformation-gatheringpenetration-testing+2
5 years ago
ftw preview

ftw

GitHubcoreruleset/ftw

YAML-driven framework for testing Web Application Firewall (WAF) rules using OWASP Core Rule Set baselines. Automates regression detection and…

devsecopspenetration-testingvulnerability-scanners+2
1424 years ago
nmap-CVE-2022-21907 preview

nmap-CVE-2022-21907

GitHubgpiechnik2/nmap-cve-2022-21907

Repository containing nse script for vulnerability CVE-2022-21907. It is a component (IIS) vulnerability on Windows. It allows remote code execution.…

exploitationinformation-gatheringpenetration-testing+2
24 years ago
CRLFsuite preview

CRLFsuite

GitHubraghavd3v/crlfsuite

The most powerful CRLF injection (HTTP Response Splitting) scanner.

penetration-testingvulnerability-scannerswaf-bypass+2
5992 years ago
py-log4shellscanner preview

py-log4shellscanner

GitHubscheibling/py-log4shellscanner

Scanner for the Log4j vulnerability dubbed Log4Shell (CVE-2021-44228)

dns-analysisexploitationfuzzing+3
4 years ago
vaf preview

vaf

GitHubandreiverse/vaf

Multi-threaded web fuzzer for URL path, HTTP header, and POST data brute-forcing with proxy support, status code filtering, and reflexive content…

fuzzingpenetration-testingvulnerability-scanners+1
3184 years ago
wsvuls preview

wsvuls

GitHubanouarbensaad/wsvuls

CLI website vulnerability scanner that detects outdated server software, insecure HTTP headers, and extracts Cloudflare IP/port data with performance…

crawlerinformation-gatheringvulnerability-scanners+1
574 years ago
milvus-auth-audit preview

milvus-auth-audit

GitHubqianlijaingshan/milvus-auth-audit

Milvus 认证安全检测脚本：CVE-2025-64513 (sourceid后门) / CVE-2026-26190 (/expr弱token) / 内部端口53100

api-security-testingauthentication-authorizationdatabase-security+4
1 month ago
burp-vulners-scanner preview

burp-vulners-scanner

GitHubvulnerscom/burp-vulners-scanner

Vulnerability scanner based on vulners.com search API

exploit-frameworksvulnerability-analysisvulnerability-scanners+1
89911 months ago
cherrybomb preview

cherrybomb

GitHubblst-security/cherrybomb

CLI tool that audits OpenAPI specifications, validates them against best practices, and runs automated security tests to detect vulnerabilities and…

api-securityapi-security-testingdynamic-analysis-sandboxing+3
1.2k1 year ago
http-request-smuggling preview

http-request-smuggling

GitHubanshumanpattnaik/http-request-smuggling

CLI tool to detect HTTP Request Smuggling vulnerabilities using time-delay analysis with built-in CL.TE and TE.CL payloads for automated security…

penetration-testingvulnerability-scannersweb-application-exploitation+1
5464 years ago
gori preview

gori

GitHubhahwul/gori

A fast, keyboard-driven HTTP intercepting proxy and hacking & pentesting toolkit for the terminal.

api-security-testingfuzzinginformation-gathering+8
954 days ago
smugglefuzz preview

smugglefuzz

GitHubmoopinger/smugglefuzz

A rapid HTTP downgrade smuggling scanner written in Go.

api-security-testingfuzzingpenetration-testing+3
3132 years ago
crlfmap preview

crlfmap

GitHubethicalhackingplayground/crlfmap

CRLFMap is a tool to find HTTP Splitting vulnerabilities

fuzzingvulnerability-scannersweb-security
256 years ago
SiteCore-RCE-Detection preview

SiteCore-RCE-Detection

GitHubcrankyyash/sitecore-rce-detection

Python script to detect Sitecore Experience Platform pre-auth RCE (CVE-2021-42237) by probing vulnerable Report.ashx endpoints and analyzing HTTP…

exploitationpenetration-testingreconnaissance+2
3 years ago
spurt preview

spurt

GitHubzer-far/spurt

HTTP stress testing tool that can overload web servers.

penetration-testingvulnerability-scannersweb-security
12611 months ago
CVE-2013-2028_Checker preview

CVE-2013-2028_Checker

GitHubxiw1ll/cve-2013-2028_checker

Tool for checking Nginx CVE-2013-2028

exploitationpenetration-testingvulnerability-analysis+2
2 years ago
Previous12…8Next