Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
16 results
DumpChromeSecrets preview
Archived

DumpChromeSecrets

GitHubmaldev-academy/dumpchromesecrets

Extract data from modern Chrome versions, including refresh tokens, cookies, saved credentials, autofill data, browsing history, and bookmarks

data-exfiltrationdigital-forensicseducation+8
560
7 months ago
bypass-firewalls-by-DNS-history preview

bypass-firewalls-by-DNS-history

GitHubvincentcox/bypass-firewalls-by-dns-history

Firewall bypass script based on DNS history records. This script will search for DNS A history records and check if the server replies for that…

dns-analysispenetration-testingreconnaissance+2
1.3k5 years ago
sniffly preview

sniffly

GitHubdiracdeltas/sniffly

Sniffing browser history using HSTS

information-gatheringosintweb-security
9389 years ago
BurpSuite-Team-Extension preview

BurpSuite-Team-Extension

GitHubstatic-flow/burpsuite-team-extension

This Burpsuite plugin allows for multiple web app testers to share their proxy history with each other in real time. Requests that comes through your…

penetration-testingred-teamingutilities-frameworks+2
2603 years ago
CustomHeader preview

CustomHeader

GitHubmirfansulaiman/customheader

This Burp Suite extension allows you to customize header with put a new header into HTTP REQUEST BurpSuite (Scanner, Intruder, Repeater, Proxy…

api-security-testingpenetration-testingweb-proxies-interception+1
533 years ago
burp2caido preview

burp2caido

GitHubcaido-community/burp2caido

A tool to migrate Burpsuite HTTP history to Caido

penetration-testingutilities-frameworksweb-proxies-interception+1
421 year ago
leakish preview

leakish

GitHubqruiqai/leakish

Browser privacy-leak detector — eight detection modules, risk scoring, and per-account history, all in your browser.

anomaly-detectionapi-securitydns-analysis+7
72 months ago
shell-history-leaks preview

shell-history-leaks

GitHubcappricio-securities/shell-history-leaks

This tool is used to find shell history leaking

information-gatheringpenetration-testingreconnaissance+2
22 years ago
Burp-Recordadora preview

Burp-Recordadora

GitHubhackwarts12/burp-recordadora

Persists BurpSuite proxy history, Repeater requests, and Intruder payloads across sessions; exports and imports .log files for web pentesting context.

penetration-testingutilities-frameworksweb-proxies-interception+1
9 months ago
DevGuide preview

DevGuide

GitHubowasp/devguide

The OWASP Developer Guide

code-analysiscurated-resourceseducation+2
2.2k25 days ago
GitHacker preview

GitHacker

GitHubwangyihang/githacker

🕷️ A `.git` folder exploiting tool that is able to restore the entire Git repository, including stash, common branches and common tags.

information-gatheringpenetration-testingreconnaissance+2
1.7k13 days ago
GraphQLGrapper preview

GraphQLGrapper

GitHubm19o/graphqlgrapper
api-security-testinginformation-gatheringpenetration-testing+3
211 year ago
burpfox preview

burpfox

GitHubhalilkirazkaya/burpfox

A Burp Suite extension that integrates Dalfox XSS scanner directly into your workflow.

dynamic-analysis-sandboxingpenetration-testingvulnerability-analysis+3
236 months ago
PHP-8.1.0-dev-Backdoor preview

PHP-8.1.0-dev-Backdoor

GitHubk3ystr0k3r/php-8.1.0-dev-backdoor

PHP 8.1.0-dev User-Agentt Backdoor Remote Code Execution (RCE)

exploitationpayload-developmentsupply-chain-security+3
11 month ago
x-stream__xstream_CVE-2020-26217_1-4-14-java77 preview

x-stream__xstream_CVE-2020-26217_1-4-14-java77

GitHubshoucheng3/x-stream__xstream_cve-2020-26217_1-4-14-java77
code-analysisdynamic-analysis-sandboxingexploitation+3
0 years ago
SOC227-Microsoft-SharePoint-Server-Elevation-of-Privilege-Possible-CVE-2023-29357-Exploitation preview

SOC227-Microsoft-SharePoint-Server-Elevation-of-Privilege-Possible-CVE-2023-29357-Exploitation

GitHubdeividasterechovas/soc227-microsoft-sharepoint-server-elevation-of-privilege-possible-cve-2023-29357-exploitation
educationincident-responselog-analysis+3
1 year ago