Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
208 results
purpleteam-app-scanner preview
Archived

purpleteam-app-scanner

GitLabpurpleteam-labs/purpleteam-app-scanner

Application scanning component of purpleteam

api-security-testingcloud-securitydevsecops+4
1
5 years ago
purpleteam-orchestrator preview
Archived

purpleteam-orchestrator

GitLabpurpleteam-labs/purpleteam-orchestrator

Orchestration component of purpleteam

cloud-securitydevsecopspenetration-testing-frameworks+2
15 years ago
purpleteam-tls-checker preview
Archived

purpleteam-tls-checker

GitLabpurpleteam-labs/purpleteam-tls-checker

TLS checking component of purpleteam

cloud-securitydevsecopsnetwork-security+2
15 years ago
purpleteam-server-scanner preview
Archived

purpleteam-server-scanner

GitLabpurpleteam-labs/purpleteam-server-scanner

Server scanning component of purpleteam

api-security-testingcloud-securitydevsecops+3
15 years ago
purpleteam preview
Archived

purpleteam

GitLabpurpleteam-labs/purpleteam

CLI component of purpleteam

api-security-testingcloud-securitydevsecops+3
25 years ago
purpleteam-s2-containers preview
Archived

purpleteam-s2-containers

GitLabpurpleteam-labs/purpleteam-s2-containers

Stage two containers

cloud-securitycontainer-securitydevsecops+5
15 years ago
awesome-web-hacking preview

awesome-web-hacking

GitHubinfoslack/awesome-web-hacking

A list of web application security

cryptographyctfcurated-resources+6
7.2k7 days ago
zaproxy preview

zaproxy

GitHubzaproxy/zaproxy

Open-source web application security scanner for automated vulnerability detection, manual penetration testing, and API security testing with a…

api-security-testingdevsecopsdynamic-analysis-sandboxing+5
15.6k9h 14m ago
owtf preview

owtf

GitHubowtf/owtf

Modular penetration testing framework integrating multiple tools for automated web application security assessment, aligned with OWASP Testing Guide,…

exploit-frameworkspenetration-testingpenetration-testing-frameworks+2
1.9k3 days ago
Sitadel preview

Sitadel

GitHubshenril/sitadel

Web Application Security Scanner

information-gatheringpenetration-testingvulnerability-scanners+3
6131 day ago
skipfish preview

skipfish

GitHubspinkham/skipfish

Web application security scanner created by lcamtuf for google - Unofficial Mirror

crawlerdynamic-analysis-sandboxingfuzzing+7
8753 years ago
pygoat preview

pygoat

GitHubadeyosemanputra/pygoat

intentionally vuln web Application Security in django

educationlabs-practicepenetration-testing+2
3404 months ago
ReconNote preview

ReconNote

GitHub0xdekster/reconnote

Web Application Security Automation Framework which recons the target for various assets to maximize the attack surface for security professionals &…

information-gatheringpenetration-testingreconnaissance+3
4115 years ago
BWASP preview

BWASP

GitHubbwasp/bwasp

BoB Web Application Security Project

educationpenetration-testingvulnerability-analysis+3
2228 months ago
Lfi-Space preview

Lfi-Space

GitHubcapture0x/lfi-space

Automated Local File Inclusion (LFI) vulnerability scanner with Google Dork search and targeted URL scan modes for web application security testing.

information-gatheringpenetration-testingvulnerability-scanners+1
1123 months ago
HackerInfo preview

HackerInfo

GitHubmatrix07ksa/hackerinfo

Hackerinfo infromations Web Application Security

information-gatheringosintvulnerability-scanners+1
766 years ago
Pegasus-Pentest-Arsenal preview

Pegasus-Pentest-Arsenal

GitHubsobri3195/pegasus-pentest-arsenal

A comprehensive web application security testing toolkit that combines 10 powerful penetration testing features into one tool.

api-security-testingctfeducation+9
554 months ago
Moxy preview

Moxy

GitHubmatank001/moxy

Moxy is an open-source DAST tool designed for modern web application security testing. It provides an easy-to-use interface with agentic capabilities…

ai-securityapi-security-testingdynamic-analysis-sandboxing+9
1197 months ago
Previous12…12Next