Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
123 results
netward-standalone preview

netward-standalone

GitHubdragon-lady/netward-standalone

User-space bot and DDoS deflection for small HTTP services

anomaly-detectionanti-botdefensive-tools+6
8 days ago
ARTEX preview

ARTEX

GitHubbaarai/artex

LLM multi-agent autonomous penetration testing platform with planner/worker agents, asset and exploration graphs, MITM traffic recording, and…

ai-securityinformation-gatheringnetwork-mapping+9
8556 days ago
harlogger preview

harlogger

GitHubdoronz88/harlogger

Simple utility for sniffing decrypted HTTP/HTTPS traffic on a macOS/iOS device (either jailbroken or not)

information-gatheringios-securitymobile-app-pentesting+5
1861 month ago
Charles-Proxy-Mobile-Guide preview

Charles-Proxy-Mobile-Guide

GitHubthyrlian/charles-proxy-mobile-guide

Step-by-step guide to intercepting Android and iOS HTTP/HTTPS traffic with Charles Proxy, covering SSL proxying, CA certificate installation, and…

android-securityeducationios-security+6
1568 years ago
Evilginx3-Phishlets preview

Evilginx3-Phishlets

GitHubsimplerhacking/evilginx3-phishlets

This repository provides penetration testers and red teams with an extensive collection of dynamic phishing templates designed specifically for use…

educationlearning-paths-coursespenetration-testing+5
7511 year ago
OBS-graphics-hook32-Hook preview

OBS-graphics-hook32-Hook

GitHubgmh5225/obs-graphics-hook32-hook

Demonstrates hooking OBS graphics-hook32.dll's D3D9 Present pointer to achieve stream-proof rendering that evades anti-cheat game capture detection.

anti-botbinary-analysiseducation+4
24 years ago
ARTEX preview

ARTEX

GitHubtrhhubsd/artex

Multi-agent LLM system for autonomous penetration testing in isolated labs: planner/worker agents share asset and exploration graphs, with MITM…

ai-securityexploitationinformation-gathering+7
2.1k13 days ago
NoDPI4Android preview

NoDPI4Android

GitHubgvcoder09/nodpi4android

Android proxy app that circumvents Deep Packet Inspection censorship by fragmenting TLS ClientHello packets and rewriting the TLS version to restore…

android-securityanti-botnetwork-security+3
4451 day ago
summit preview

summit

GitHubpennacle-security/summit

Open-source web security testing platform: proxy, scanner and fuzzer in one CLI. By Pennacle Security.

api-security-testingfuzzinginformation-gathering+9
46 days ago
redknife preview

redknife

GitLabyukibtc/redknife

A Swiss Army knife for offensive security.

command-and-controlinformation-gatheringpenetration-testing+4
2 days ago
burp-ResponseClusterer preview

burp-ResponseClusterer

GitHubmodzero/burp-responseclusterer

Burp plugin that clusters responses to show an overview of received responses

anomaly-detectiondefensive-toolspenetration-testing+5
147 years ago
ColonelClustered preview

ColonelClustered

GitHubhoodoer/colonelclustered

A Java Burp Plugin that performs text clustering on responses to identify outliers/groups based on the actual content of the server responses, say…

fuzzingmachine-learningpenetration-testing+5
121 month ago
PentagridResponseOverview preview

PentagridResponseOverview

GitHubpentagridsec/pentagridresponseoverview

Response Overview Extension for BurpSuite - Find exotic responses by grouping response bodies

anomaly-detectiondefensive-toolsinformation-gathering+6
119 months ago
repeat-strike preview

repeat-strike

GitHubhackvertor/repeat-strike

Burp Suite extension that uses AI-generated regex strike rules to detect IDOR and access-control flaws, then scans proxy history to find similar…

ai-securityapi-security-testinginformation-gathering+6
411 year ago
shadow-repeater preview

shadow-repeater

GitHubhackvertor/shadow-repeater

Burp Suite Repeater extension that automatically mutates payloads and analyzes responses to uncover path traversal, SQL injection, XSS, and other web…

ai-securityapi-security-testingfuzzing+6
4311 months ago
burp-extensions-montoya-api-examples preview

burp-extensions-montoya-api-examples

GitHubportswigger/burp-extensions-montoya-api-examples

Sample Burp Suite extensions demonstrating the Montoya API, covering HTTP and proxy handlers, custom scan checks, Intruder payloads, WebSocket…

api-security-testingeducationpenetration-testing+6
1874 months ago
waf-fu preview

waf-fu

GitHubconfused-binary/waf-fu

Terminal UI for browsing and replaying AWS WAF v2 logs from CloudWatch, S3, and the sampling API, with YAML filtering, auth detection, and…

cloud-securitydefensive-toolsincident-response+6
22 months ago
blinder preview

blinder

GitHubsplinters-io/blinder

Content-blind reverse proxy for exposure-protected security scanning

anti-botcaptcha-bypassdefensive-tools+7
51 month ago
Previous1234567Next