Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
211 results
OAuth-Request-Crafter preview

OAuth-Request-Crafter

GitHubajinabraham/oauth-request-crafter

OAuth Request Crafter

api-security-testingauthentication-authorizationpenetration-testing+2
8
12 years ago
burp-cc-bridge preview

burp-cc-bridge

GitHublarrypeseckis/burp-cc-bridge

REST API automation for Burp Suite Community Edition. Drop-in Java extension exposing send/repeat/history endpoints over a local HTTP API.

api-security-testingpenetration-testingscripting-automation+3
73 months ago
wcfproxy preview

wcfproxy

GitHubsyss-research/wcfproxy

A proxy for net.tcp-based WCF traffic.

api-security-testingauthenticationbinary-analysis+3
85 months ago
CVE-2017-6640-POC preview

CVE-2017-6640-POC

GitHubhemp3l/cve-2017-6640-poc

Proof of concept for CVE-2017-6640 as burp extension

authenticationexploitationpenetration-testing+3
26 years ago
cve-2022-1040 preview

cve-2022-1040

GitHubkeith-amateur/cve-2022-1040

Save the trouble to open the burpsuite...

exploitationpenetration-testingvulnerability-analysis+2
33 years ago
faraday_zap preview

faraday_zap

GitHubinfobyte/faraday_zap

Zap Extension for collaboration in Faraday

api-security-testingpenetration-testingvulnerability-scanners+2
26 months ago
ProxySqlMap preview

ProxySqlMap

GitHubianxtianxt/proxysqlmap

From Proxy to SqlMapApi

penetration-testingvulnerability-scannersweb-application-exploitation+2
16 years ago
IfritProxy preview

IfritProxy

GitHub0tsystemspublicrepos/ifritproxy

IFRIT is an AI-powered reverse proxy that intercepts incoming requests in real time, classifying each one as legitimate or malicious. Legitimate…

ai-securitydefensive-toolsids-ips-evasion+7
17 months ago
CVE-2025-32407 preview

CVE-2025-32407

GitHubdiegovargasj/cve-2025-32407

Proof-of-concept exploit for CVE-2025-32407: TLS certificate validation bypass in Samsung Internet for Galaxy Watch, enabling Man-in-the-Middle…

dns-analysisexploitationmobile-security+6
1 year ago
burp-alfresco-referer-proxy-cve-2014-9301 preview

burp-alfresco-referer-proxy-cve-2014-9301

GitHubottimo/burp-alfresco-referer-proxy-cve-2014-9301

Burp Suite extension exploiting CVE-2014-9301 in Alfresco Referer Proxy for targeted web application penetration testing.

exploitationpenetration-testingvulnerability-analysis+2
9 years ago
martian preview
Archived

martian

GitHubgoogle/martian

Martian is a library for building custom HTTP/S proxies

api-security-testingdynamic-analysis-sandboxingpenetration-testing+3
2.0k1 year ago
ExtendedMacro preview
Archived

ExtendedMacro

GitHubfruh/extendedmacro

ExtendedMacro - BurpSuite plugin providing extended macro functionality

api-security-testingpenetration-testingscripting-automation+3
155 years ago
RAT-via-Telegram preview
Archived

RAT-via-Telegram

GitHubmvrozanti/rat-via-telegram

Windows Remote Administration Tool via Telegram

command-and-controldata-exfiltrationpassword-cracking+6
7167 years ago
Previous1…1112Next