Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Web Security — Tools | Kitploit

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
2465 results
security-research preview

security-research

GitHuboscerd/security-research

Vulnerabilities I've reported to the Apache Software Foundation: 46 CVEs across 15 projects

vulnerability-analysisexploitationweb-security+1
1
2h 31m ago
cats preview

cats

GitHubendava/cats

Automated REST API fuzzer and negative testing tool for OpenAPI endpoints. Generates, runs, and reports thousands of self-healing tests with no…

vulnerability-scannersapi-security-testingweb-security+1
1.4k2h 32m ago
caddy preview

caddy

GitHubcaddyserver/caddy

Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS

general-purpose-utilitiesencryption-decryption-toolsweb-security+1
74.8k2h 45m ago
xalgorix preview

xalgorix

GitHubxalgord/xalgorix

Autonomous AI pentesting agents — real-time reconnaissance, vulnerability detection, and exploitation orchestration. Go + TypeScript.

reconnaissancevulnerability-scannersdynamic-analysis-sandboxing+7
8513h 22m ago
CheatSheetSeries preview

CheatSheetSeries

GitHubowasp/cheatsheetseries

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

code-analysisweb-securitycryptography+6
32.9k3h 55m ago
beelzebub preview

beelzebub

GitHubbeelzebub-labs/beelzebub

A secure low code deception runtime framework, leveraging AI for System Virtualization.

defensive-toolscontainer-securitysecurity-virtualization+7
2.1k4h 55m ago
hacktricks preview

hacktricks

GitHubhacktricks-wiki/hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

osintpassword-crackingprivilege-escalation+11
12.1k5h 24m ago
yakit preview

yakit

GitHubyaklang/yakit

All-in-one penetration testing platform with MITM proxy, web fuzzer, reverse connection handler, and plugin system for automated security testing and…

penetration-testing-frameworksvulnerability-scannersexploit-frameworks+9
7.7k5h 51m ago
BrowserBox preview

BrowserBox

GitHubbrowserbox/browserbox

💚🇺🇸🗽Secure remote browsing anywhere, any way you like it.

defensive-toolsweb-securitynetwork-security+3
3.9k7h 36m ago
authelia preview

authelia

GitHubauthelia/authelia

The Single Sign-On Multi-Factor portal for web apps. OpenID Certified™ and Post-Quantum Cryptography Ready.

authentication-authorizationidentity-managementnetwork-access-control+3
28.5k7h 48m ago
htmlpurifier preview

htmlpurifier

GitHubezyang/htmlpurifier

Standards compliant HTML filter written in PHP

defensive-toolsstatic-analysisvulnerability-analysis+3
3.3k9h 14m ago
pipelock preview

pipelock

GitHubluckypipewrench/pipelock

Open-source AI agent firewall that scans HTTP, MCP, A2A, and WebSocket traffic for exfiltration, SSRF, and prompt injection, emitting verifiable…

vulnerability-scannersids-ips-evasiondata-exfiltration+8
7929h 28m ago
LangAlpha preview

LangAlpha

GitHubginlix-ai/langalpha

Automated OSINT framework for reconnaissance, data harvesting, and threat intelligence gathering with modular crawlers, scanners, and extraction…

osintreconnaissancescripting-automation+6
1.6k9h 40m ago
bramble preview

bramble

GitHubflythenimbus/bramble

Local-first password manager with direct device-to-device sync

osintpassword-crackingencryption-decryption-tools+7
30310h 31m ago
qyvora-anansi preview

qyvora-anansi

GitHubqyvora/qyvora-anansi

Terminal-first attack surface intelligence engine. Built for speed, portability, and raw technical signal.

osintreconnaissancevulnerability-scanners+8
411h 23m ago
resterm preview

resterm

GitHubunkn0wn-root/resterm

Terminal API client for HTTP, GraphQL, gRPC, WebSocket and SSE. Plain .http files you can diff and version, with scripted tests, workflows, mocks,…

scripting-automationapi-security-testingweb-security+3
1.8k12h 33m ago
discover preview

discover

GitHubleebaird/discover

Custom Bash and Python scripts used to automate various penetration testing tasks including recon, scanning, enumeration, and malicious payload…

osintreconnaissancevulnerability-scanners+9
3.9k12h 39m ago
secator preview

secator

GitHubfreelabz/secator

secator - the pentester's swiss knife

osintpenetration-testing-frameworksreconnaissance+8
1.3k13h 15m ago
Previous12…100Next