Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
88 results
autochrome preview

autochrome

GitHubnccgroup/autochrome

This tool downloads, installs, and configures a shiny new copy of Chromium.

penetration-testingweb-proxies-interceptionweb-security
4802 years ago
BurpSuiteSharpenerEx preview

BurpSuiteSharpenerEx

GitHubirsdl/burpsuitesharpenerex

This extension enhances Burp Suite by adding several UI and functional features, making it more user-friendly.

penetration-testingutilities-frameworksweb-proxies-interception+1
861 month ago
zap-api-rust preview

zap-api-rust

GitHubzaproxy/zap-api-rust
api-securitypenetration-testingvulnerability-scanners+3
152 years ago
MobileApp-Pentest-Cheatsheet preview

MobileApp-Pentest-Cheatsheet

GitHubtanprathan/mobileapp-pentest-cheatsheet

The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration…

android-securitycurated-resourcesdynamic-code-analysis+9
5.3k2 years ago
bbs preview

bbs

GitHubsynacktiv/bbs

bbs is a router for SOCKS and HTTP proxies. It exposes a SOCKS5 (or HTTP CONNECT) service and forwards incoming requests to proxies or chains of…

network-securitypenetration-testingred-teaming+2
9824 days ago
ritm preview

ritm

GitHubargos83/ritm

Ruby In The Middle (HTTP/HTTPS interception proxy)

dynamic-analysis-sandboxingpenetration-testingweb-proxies-interception+1
1017 years ago
HUNT preview

HUNT

GitHubbugcrowd/hunt
curated-resourcespenetration-testingvulnerability-analysis+3
2.3k2 months ago
birp preview

birp

GitHubsensepost/birp

Big Iron Recon & Pwnage

information-gatheringpenetration-testingreconnaissance+2
1258 years ago
Tunna preview

Tunna

GitHubsecforce/tunna

Tunna is a set of tools which will wrap and tunnel any TCP communication over HTTP. It can be used to bypass network restrictions in fully firewalled…

ids-ips-evasionpenetration-testingred-teaming+1
1.3k5 years ago
BurpSuite-Team-Extension preview

BurpSuite-Team-Extension

GitHubstatic-flow/burpsuite-team-extension

This Burpsuite plugin allows for multiple web app testers to share their proxy history with each other in real time. Requests that comes through your…

penetration-testingred-teamingutilities-frameworks+2
2603 years ago
faraday_burp preview

faraday_burp

GitHubinfobyte/faraday_burp

Burp Extension for collaboration in Faraday

api-security-testingdevsecopspenetration-testing+3
135 months ago
RAT-via-Telegram preview
Archived

RAT-via-Telegram

GitHubmvrozanti/rat-via-telegram

Windows Remote Administration Tool via Telegram

command-and-controldata-exfiltrationpassword-cracking+6
7137 years ago
BurpSuiteJSBeautifier preview

BurpSuiteJSBeautifier

GitHubirsdl/burpsuitejsbeautifier

Burp Suite JS Beautifier

code-analysisdebuggersweb-proxies-interception+1
10112 years ago
CaddySmith preview

CaddySmith

GitHubicecubesandwich/caddysmith

Generate Caddy redirector configs from Cobalt Strike or Sliver C2 profiles.

command-and-controlids-ips-evasionpayload-development+3
231 month ago
hoverfly preview

hoverfly

GitHubspectolabs/hoverfly

Lightweight service virtualization/ API simulation / API mocking tool for developers and testers

api-security-testingweb-proxies-interception
2.5k1 day ago
rep-chrome preview

rep-chrome

GitHubrepplus/rep-chrome

rep+ — Burp-style HTTP Repeater for Chrome DevTools with built‑in AI to explain requests and suggest attacks

ai-securityapi-security-testingfuzzing+6
1.6k7 months ago
AES-Killer preview

AES-Killer

GitHubebryx/aes-killer

Burp Plugin to decrypt AES encrypted traffic on the fly

api-security-testingencryption-decryption-toolsmobile-security+1
6515 years ago
mcpsnoop preview

mcpsnoop

GitHubkerlenton/mcpsnoop

Wireshark for MCP. A transparent proxy that shows every real tool call between your AI client and your MCP servers, live in your terminal.

api-security-testingdebuggersdynamic-analysis-sandboxing+5
3395 days ago
Previous12345Next