Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

103 results

zap-hud

zaproxy/zap-hud

The ZAP Heads Up Display (HUD)

dynamic-analysis-sandboxingpenetration-testingvulnerability-scanners+2

276

1 month ago

toxiproxy

shopify/toxiproxy

:alarm_clock: :fire: A TCP proxy to simulate network and system conditions for chaos and resiliency testing

chaos-engineeringgeneral-purpose-utilitiesweb-proxies-interception

12.4k29 days ago

pentest-copilot

bugbasesecurity/pentest-copilot

AI-driven penetration testing agent that connects to a Kali box, autonomously runs security tools, analyzes results, and iterates through…

ai-securitycommand-and-controlctf+8

1.5k1 month ago

requests-ip-rotator

ge0rg3/requests-ip-rotator

A Python library to utilize AWS API Gateway's large IP pool as a proxy to generate pseudo-infinite IPs for web scraping and brute forcing.

crawlerids-ips-evasioninformation-gathering+5

1.7k2 months ago

mitmproxy_rs

mitmproxy/mitmproxy_rs

Rust components for traffic interception and redirection, enabling WireGuard device proxying and local app redirection across macOS, Windows, and…

api-security-testingmobile-app-pentestingnetwork-security+2

4471 month ago

qyvora-toha3ee

qyvora/qyvora-toha3ee

Go-based network exploitation and MITM framework for authorized penetration testing, network reconnaissance, traffic interception, wireless security…

exploitationnetwork-securityosint+9

49 days ago

mhr-cfw

denuitt1/mhr-cfw

A Domain-Fronting Relay that routes traffic though GAS (Google Apps Script) and forwards it to Cloudflare Workers. Designed to bypass DPI.

cloud-securityids-ips-evasionred-teaming+1

4.4k4 months ago

whitelist-bypass

kulikov0/whitelist-bypass

Tunneling data over webrtc to bypass censorship

anti-botencryption-decryption-toolsnetwork-security+3

1.7k1 day ago

MITM_Intercept

cyberark/mitm_intercept

A little bit less hackish way to intercept and modify non-HTTP protocols through Burp & others.

penetration-testingweb-proxies-interception

2204 years ago

IPRotate_Burp_Extension

rhinosecuritylabs/iprotate_burp_extension

Extension for Burp Suite which uses AWS API Gateway to rotate your IP on every request.

cloud-securityids-ips-evasionpenetration-testing+2

8957 months ago

IfritProxy

0tsystemspublicrepos/ifritproxy

IFRIT is an AI-powered reverse proxy that intercepts incoming requests in real time, classifying each one as legitimate or malicious. Legitimate…

ai-securitydefensive-toolsids-ips-evasion+7

17 months ago

wuzz

asciimoo/wuzz

Interactive cli tool for HTTP inspection

general-purpose-utilitiesscripting-automationweb-proxies-interception

10.7k1 month ago

AES-Killer

ebryx/aes-killer

Burp Plugin to decrypt AES encrypted traffic on the fly

api-security-testingencryption-decryption-toolsmobile-security+1

6535 years ago

HopLa

synacktiv/hopla

HopLa Burp Suite Extender plugin - Brings AI capabilities, autocompletion support, and a set of useful payloads to Burp Suite

ai-securityapi-security-testingpayload-generation+3

8365 months ago

bambdas

portswigger/bambdas

Bambdas collection for Burp Suite Professional and Community.

curated-resourceseducationscripting-automation+3

5303 months ago

bettercap

bettercap/bettercap

The Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.

bluetooth-securitydata-exfiltrationfingerprint-spoofing+16

20.0k1 month ago

Archived

firefox_tunnel

conviso-archives/firefox_tunnel

Browser-based C2 tunnel that exfiltrates payloads through Firefox's cookie.sqlite and auto-submitting HTML/JS, enabling stealthy firewall bypass for…

command-and-controldata-exfiltrationids-ips-evasion+5

618 years ago

mallory

justmao945/mallory

HTTP/HTTPS proxy over SSH

general-purpose-utilitiesnetwork-securityweb-proxies-interception

3242 years ago

Previous12 3 4 5 6 Next