Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
61 results
redai preview

redai

GitHubkpolley/redai

AI-driven vulnerability discovery and live validation

ai-securitydynamic-analysis-sandboxingeducation+6
3414 months ago
jspanda preview

jspanda

GitHubredsection/jspanda

client-side prototype pullution vulnerability scanner

dynamic-analysis-sandboxingstatic-code-analysisvulnerability-scanners+1
465 years ago
skipfish preview

skipfish

GitHubspinkham/skipfish

Web application security scanner created by lcamtuf for google - Unofficial Mirror

crawlerdynamic-analysis-sandboxingfuzzing+7
87913 years ago
zap-hud preview

zap-hud

GitHubzaproxy/zap-hud

The ZAP Heads Up Display (HUD)

dynamic-analysis-sandboxingpenetration-testingvulnerability-scanners+2
27622 days ago
Scrapling preview

Scrapling

GitHubd4vinci/scrapling

🕷️ An adaptive Web Scraping framework that handles everything from a single request to a full-scale crawl!

anti-botcrawlerdynamic-analysis-sandboxing+2
79.2k4 days ago
svg_phishing_tools preview

svg_phishing_tools

GitHubhackinglz/svg_phishing_tools

SVG Analysis and generation tools for commonly seen SVG attachment phishing

dynamic-analysis-sandboxinginformation-gatheringmalware-analysis+5
5711 months ago
cdb preview

cdb

GitHubpownjs/cdb

Automate common Chrome Debug Protocol tasks to help debug web applications from the command-line and actively monitor and intercept HTTP requests and…

debuggersnetwork-mappingpenetration-testing+2
725 years ago
FirmAE preview

FirmAE

GitHubpr0v3rbs/firmae

Towards Large-Scale Emulation of IoT Firmware for Dynamic Analysis

dynamic-analysis-sandboxingembedded-systems-securityfirmware-analysis+3
9232 months ago
echteeteepee preview

echteeteepee

GitHubperplext/echteeteepee

Go tool and Nuclei template for testing James Kettle's (CVE-2025-32094) HTTP/1.1 must die: the desync endgame

dynamic-analysis-sandboxingeducationfuzzing+3
61 year ago
AMSIext preview

AMSIext

GitHubelevenpaths/amsiext

AMSIext

defensive-toolsdynamic-analysis-sandboxingmalware-analysis+2
66 years ago
http-request-smuggler preview

http-request-smuggler

GitHubportswigger/http-request-smuggler

Burp Suite extension for automated detection and exploitation of HTTP request smuggling vulnerabilities, supporting HTTP/1.1 and HTTP/2-downgrade…

dynamic-analysis-sandboxingpenetration-testingvulnerability-scanners+3
1.2k26 days ago
React2Shell preview

React2Shell

GitHubphanhoangkhang/react2shell

Isolated Docker lab and static scanner for CVE-2025-55182, with vulnerable/patched Next.js builds and PoC validation of RSC Flight deserialization.

dynamic-analysis-sandboxingeducationexploitation+6
22 days ago
awesome-hacking preview

awesome-hacking

GitHubcarpedm20/awesome-hacking

A curated list of awesome Hacking tutorials, tools and resources

cryptographyctfcurated-resources+6
17.0k2 years ago
XSpear preview
Archived

XSpear

GitHubhahwul/xspear

🔱 Powerfull XSS Scanning and Parameter analysis tool&gem

dynamic-analysis-sandboxingfuzzinginformation-gathering+8
1.4k6 months ago
masc preview

masc

GitHubsfaci/masc

A Web Malware Scanner

dynamic-analysis-sandboxingmalware-analysisstatic-analysis+2
973 years ago
not-slithering-anywhere preview

not-slithering-anywhere

GitHubtrailofbits/not-slithering-anywhere

The Python Version of our Not Go-ing Anywhere Vulnerable Application

dynamic-analysis-sandboxingeducationlabs-practice+3
112 years ago
betwixt preview

betwixt

GitHubkdzwinel/betwixt

:zap: Web Debugging Proxy based on Chrome DevTools Network panel.

debuggerspacket-sniffing-analysisweb-proxies-interception+1
4.6k7 years ago
rzweb preview

rzweb

GitHubindalok/rzweb

A complete browser-based reverse engineering platform built on Rizin, running entirely client-side via WebAssembly.

binary-analysisdebuggersdynamic-analysis-sandboxing+5
7576 days ago
Previous1234Next