Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

123 results

CredMaster

knavesec/credmaster

Refactored & improved CredKing password spraying tool, uses FireProx APIs to rotate IP addresses, stay anonymous, and beat throttling

api-security-testingauthenticationcloud-security+9

1.3k

1 year ago

Archived

hackazon

rapid7/hackazon

A modern vulnerable web app

api-security-testingeducationpenetration-testing+3

1.0k5 years ago

Tiredful-API

payatu/tiredful-api

An intentionally designed broken web application based on REST API.

api-security-testingeducationlabs-practice+2

5835 years ago

waf-checker

papamica/waf-checker

Tests your WAF with +160 payloads

api-security-testingdns-analysisids-ips-evasion+8

5535 months ago

DVSA

owasp/dvsa

a Damn Vulnerable Serverless Application

api-security-testingcloud-infrastructure-securitycloud-security+6

5452 years ago

automatic-api-attack-tool

imperva/automatic-api-attack-tool

Imperva's customizable API attack tool takes an API specification as an input, generates and runs attacks that are based on it as an output.

api-security-testingfuzzingvulnerability-scanners+1

4956 years ago

SAMLRaider

compasssecurity/samlraider

SAML2 Burp Extension

api-security-testingauthenticationcryptography+6

4485 months ago

Archived

poc-graphql

righettod/poc-graphql

Research on GraphQL from an AppSec point of view.

api-security-testingeducationlabs-practice+3

4183 years ago

Vega

subgraph/vega

Subgraph Vega

api-security-testingdynamic-analysis-sandboxingpenetration-testing+3

36310 years ago

CrackQL

nicholasaleks/crackql

GraphQL penetration testing tool that exploits weak rate limits and cost analysis to brute-force credentials, bypass 2FA, enumerate users, and fuzz…

api-security-testingfuzzingpassword-attacks+2

3503 years ago

smugglefuzz

moopinger/smugglefuzz

A rapid HTTP downgrade smuggling scanner written in Go.

api-security-testingfuzzingpenetration-testing+3

3122 years ago

sqlipy

codewatchorg/sqlipy

SQLiPy is a Python plugin for Burp Suite that integrates SQLMap using the SQLMap API.

api-security-testingpenetration-testingvulnerability-scanners+2

2601 year ago

Archived

request_smuggler

sh1yo/request_smuggler

Http request smuggling vulnerability scanner

api-security-testingpenetration-testingvulnerability-scanners+3

2284 years ago

poc_salesforce_lightning

moniik/poc_salesforce_lightning

Academic purposes only. Attack against Salesforce lightning with guest privilege.

api-security-testingdata-exfiltrationexploitation+4

1855 years ago

TProxer

ethicalhackingplayground/tproxer

A Burp Suite extension made to automate the process of finding reverse proxy path based SSRF.

api-security-testingpenetration-testingvulnerability-analysis+2

1844 years ago

SpringVulScan

tpt11fb/springvulscan

burpsuite 的Spring漏洞扫描插件。SpringVulScan：支持检测：路由泄露|CVE-2022-22965|CVE-2022-22963|CVE-2022-22947|CVE-2016-4977

api-security-testingexploitationpenetration-testing+3

1543 years ago

CVE-2026-9830

opaxial/cve-2026-9830

Python PoC validating unauthenticated BookingPress Pro REST API exposure and checking for exposed booking/customer data with configurable request…

api-security-testingexploitationinformation-gathering+3

1426 days ago

raider

owasp/raider

OWASP Raider: a novel framework for manipulating the HTTP processes of persistent sessions

api-security-testingauthenticationpenetration-testing+3

1013 years ago

Previous12 3 4 5 6 7 Next