Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

28 results

BurpSuite-For-Pentester

ignitetechnologies/burpsuite-for-pentester

This cheatsheet is built for the Bug Bounty Hunters and penetration testers in order to help them hunt the vulnerabilities from P4 to P1 solely and…

authentication-authorizationcurated-resourceseducation+7

2.6k

6 months ago

BurpSuite-Plugin

jas502n/burpsuite-plugin

Plugin For BurpSuite (Pentester)

penetration-testing-frameworksvulnerability-analysisweb-application-exploitation+2

375 years ago

BurpSuiteHTTPSmuggler

nccgroup/burpsuitehttpsmuggler

A Burp Suite extension to help pentesters to bypass WAFs or test their effectiveness using a number of techniques

ids-ips-evasionpenetration-testingvulnerability-analysis+3

7447 years ago

Jboss_JMXInvokerServlet_Deserialization_RCE

jas502n/jboss_jmxinvokerservlet_deserialization_rce

Jboss_JMXInvokerServlet_Deserialization_RCE

exploitationpayload-generationpenetration-testing+2

217 years ago

Burp_AES_Plugin

jas502n/burp_aes_plugin

Burpsuite Plugin For AES Crack

cryptographyencryption-decryption-toolsfuzzing+4

386 years ago

CVE-2023-25690

thanhlam-attt/cve-2023-25690

Proof-of-concept exploit for CVE-2023-25690 HTTP Request Smuggling in Apache mod_proxy. Includes lab environment with Docker, BurpSuite walkthrough,…

educationexploitationpenetration-testing+3

42 years ago

SpringVulScan

tpt11fb/springvulscan

burpsuite 的Spring漏洞扫描插件。SpringVulScan：支持检测：路由泄露|CVE-2022-22965|CVE-2022-22963|CVE-2022-22947|CVE-2016-4977

api-security-testingexploitationpenetration-testing+3

1553 years ago

SILENTCHAIN

silentchainai/silentchain

AI-powered vulnerability scanner extension for Burp Suite with multi-provider support (Ollama, OpenAI, Claude, Gemini)

ai-securityapi-security-testingcode-analysis+8

4642 months ago

GraphQLGrapper

m19o/graphqlgrapper

Burp Suite extension to extract and collect GraphQL API endpoints from HTTP request history for security testing and reconnaissance.

api-security-testinginformation-gatheringpenetration-testing+3

211 year ago

Log4j-RCE

momos1337/log4j-rce

Log4j RCE - (CVE-2021-44228)

exploitationpayload-generationpenetration-testing+2

74 years ago

log4j-Scan-Burpsuite

snow0715/log4j-scan-burpsuite

Log4j漏洞（CVE-2021-44228）的Burpsuite检测插件

dynamic-analysis-sandboxingexploitationpenetration-testing+3

134 years ago

Spring4Shell

loneyers/spring4shell

Spring4Shell , Spring Framework RCE (CVE-2022-22965) , Burpsuite Plugin

api-security-testingexploitationpenetration-testing+3

44 years ago

CVE-2024-10914

egi08/cve-2024-10914

CVE-2024-10914_Manual testing with burpsuite

command-and-controlexploitationpenetration-testing+3

1 year ago

cve-2022-1040

keith-amateur/cve-2022-1040

Save the trouble to open the burpsuite...

exploitationpenetration-testingvulnerability-analysis+2

33 years ago

CVE-2025-29927

kh4sh3i/cve-2025-29927

CVE-2025-29927: Next.js Middleware Bypass Vulnerability

authentication-authorizationexploitationpenetration-testing+3

21 year ago

cve-2022-44268

jkobierczynski/cve-2022-44268

ctfexploitationinformation-gathering+3

1 year ago

jwt-spoof-tool

amr9k8/jwt-spoof-tool

Automate JWT Exploit (CVE-2018-0114)

authentication-authorizationeducationexploitation+3

3 years ago

log4j2burpscanner

f0ng/log4j2burpscanner

CVE-2021-44228 Log4j2 BurpSuite Scanner,Customize ceye.io api or other apis,including internal networks

dns-analysisexploitationpenetration-testing+2

8413 years ago

Previous12 Next