Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
190 results
reDOM preview

reDOM

GitHubweirdmachine64/redom

A Burp Suite extension that brings full DOM rendering capabilities directly into Burp, enabling effective security testing of modern JavaScript-heavy…

api-security-testingdynamic-analysis-sandboxinginformation-gathering+5
15
3 months ago
log4jail preview

log4jail

GitHubmufeedvh/log4jail

A firewall reverse proxy for preventing Log4J (Log4Shell aka CVE-2021-44228) attacks.

ids-ips-evasionpenetration-testingvulnerability-analysis+3
224 years ago
http-mcp-bridge preview

http-mcp-bridge

GitHubnccgroup/http-mcp-bridge
api-securitypenetration-testingweb-proxies-interception+1
173 months ago
gofireprox preview

gofireprox

GitHubmr-pmillz/gofireprox

FireProx written in Go

ids-ips-evasionpenetration-testingred-teaming+2
202 years ago
mitm-proxy preview

mitm-proxy

GitHubwelfordian/mitm-proxy

Go-based MITM HTTP/HTTPS proxy with HTTP/2 and HTTP/1.1 interception, local CA/per-host cert generation, CONNECT/WebSocket tunneling, disk caching,…

ai-securityapi-security-testingdebuggers+5
142 months ago
zap-api-rust preview

zap-api-rust

GitHubzaproxy/zap-api-rust
api-securitypenetration-testingvulnerability-scanners+3
152 years ago
undetected-httpx preview

undetected-httpx

GitHubmichele0303/undetected-httpx

Stop getting 403 Forbidden. A specialized httpx-like toolkit for WAF evasion.

anti-botfingerprint-spoofingids-ips-evasion+5
217 months ago
http_bridge preview

http_bridge

GitHubalejandro-llanes/http_bridge

SOCKS5-to-HTTP proxy bridge that tunnels arbitrary TCP streams (SSH, SMTP, TLS) through standard HTTP requests, enabling network traffic obfuscation…

ids-ips-evasionred-teamingweb-proxies-interception
85 years ago
faraday_addon preview

faraday_addon

GitHubinfobyte/faraday_addon

A browser extension for faradaysec platform https://faradaysec.com

penetration-testingvulnerability-analysisweb-proxies-interception+1
67 years ago
BurpImportSitemap preview

BurpImportSitemap

GitHubnccgroup/burpimportsitemap

Import To Sitemap is a Burp Suite Extension to import wstalker CSV file or ZAP export file into Burp Sitemap

information-gatheringpenetration-testingutilities-frameworks+2
63 years ago
cve-2021-33045 preview

cve-2021-33045

GitHubdongpohezui/cve-2021-33045
authenticationexploitationvulnerability-analysis+2
84 years ago
OAuth-Request-Crafter preview

OAuth-Request-Crafter

GitHubajinabraham/oauth-request-crafter

OAuth Request Crafter

api-security-testingauthentication-authorizationpenetration-testing+2
812 years ago
burp-cc-bridge preview

burp-cc-bridge

GitHublarrypeseckis/burp-cc-bridge

REST API automation for Burp Suite Community Edition. Drop-in Java extension exposing send/repeat/history endpoints over a local HTTP API.

api-security-testingpenetration-testingscripting-automation+3
72 months ago
wcfproxy preview

wcfproxy

GitHubsyss-research/wcfproxy

A proxy for net.tcp-based WCF traffic.

api-security-testingauthenticationbinary-analysis+3
84 months ago
InterceptSuite preview

InterceptSuite

GitHubinterceptsuite/interceptsuite

MITM proxy for TCP/TLS/DTLS/UDP traffic, with STARTTLS, IoT, Thick Client and more.

iot-securitynetwork-securitypacket-sniffing-analysis+2
51 month ago
Cookie-Swapper preview

Cookie-Swapper

GitHub0xbartita/cookie-swapper

Burp Suite extension that auto-replaces cookies and headers in requests using configurable rules. Eliminates manual copy-pasting of session tokens…

penetration-testingscripting-automationutilities-frameworks+2
64 months ago
Ssh Mitm preview

Ssh Mitm

GitLabssh-mitm/ssh-mitm

Mirror moved — see GitHub and Codeberg

authenticationinformation-gatheringnetwork-security+3
1 month ago
CVE-2017-6640-POC preview

CVE-2017-6640-POC

GitHubhemp3l/cve-2017-6640-poc

Proof of concept for CVE-2017-6640 as burp extension

authenticationexploitationpenetration-testing+3
26 years ago
Previous1…891011Next