Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
518 results
cirrusgo preview

cirrusgo

GitHubph33rr/cirrusgo

A fast tool to scan SAAS,PAAS App written in Go

cloud-securityinformation-gatheringvulnerability-scanners+1
854 years ago
react preview

react

GitHubjanhalendk/react

A OSINT project that explores how to dump data from React

educationinformation-gatheringosint+2
811 year ago
navgix preview

navgix

GitHubhakaioffsec/navgix

Multi-threaded Go tool to detect nginx alias traversal vulnerabilities using heuristic and brute-force techniques for identifying vulnerable…

fuzzingmisconfigurationvulnerability-scanners+1
753 years ago
hulk preview

hulk

GitHubgrafov/hulk

HULK DoS tool ported to Go with some additional features.

penetration-testingutilities-frameworksweb-security
9085 years ago
unwaf preview

unwaf

GitHubmmarting/unwaf

Go tool that passively discovers the real origin IP behind a WAF/CDN using multiple OSINT sources, then verifies candidates via HTML similarity, SSL…

dns-subdomain-enumerationinformation-gatheringnetwork-mapping+7
1927 months ago
crlfuzz preview

crlfuzz

GitHubdwisiswant0/crlfuzz

A fast tool to scan CRLF vulnerability written in Go

fuzzingvulnerability-scannersweb-security
1.6k4 years ago
CVE-2025-66478-github-patcher preview

CVE-2025-66478-github-patcher

GitHubjibaru/cve-2025-66478-github-patcher

Go-based automation tool that scans GitHub repositories for vulnerable Next.js versions (CVE-2025-66478) and automatically creates pull requests with…

code-analysisdevsecopssupply-chain-security+2
10 months ago
http2smugl preview

http2smugl

GitHubneex/http2smugl

Detects and exploits HTTP request smuggling vulnerabilities via HTTP/2 to HTTP/1.1 conversion, using automated header smuggling techniques to…

penetration-testingvulnerability-analysisweb-application-exploitation+1
5641 year ago
andor preview

andor

GitHubsadicann/andor

Blind SQL Injection Tool with Golang

database-securitypenetration-testingvulnerability-analysis+1
884 years ago
jsfinder preview

jsfinder

GitHubkacakb/jsfinder

Fetches JavaScript files quickly and comprehensively.

crawlerinformation-gatheringreconnaissance+1
1393 years ago
ppmap preview

ppmap

GitHubkleiton0x00/ppmap

A scanner/exploitation tool written in GO, which leverages client-side Prototype Pollution to XSS by exploiting known gadgets.

exploitationpenetration-testingvulnerability-scanners+2
5184 years ago
github-endpoints preview

github-endpoints

GitHubgwen001/github-endpoints

Find endpoints on GitHub.

information-gatheringosintpenetration-testing+2
2273 years ago
http2-rst-stream-attacker preview

http2-rst-stream-attacker

GitHubndrscodes/http2-rst-stream-attacker

Highly configurable tool to check a server's vulnerability against CVE-2023-44487 by rapidly sending HEADERS and RST_STREAM frames and documenting…

exploitationpenetration-testingvulnerability-analysis+1
62 years ago
jsleak preview
Archived

jsleak

GitHub0xteles/jsleak

a Go code to detect leaks in JS files via regex patterns

information-gatheringosintreconnaissance+3
1514 years ago
mantra preview

mantra

GitHubbrosck/mantra

「🔑」A tool used to hunt down API key leaks in JS files and pages

information-gatheringsecret-detectionvulnerability-scanners+1
9467 months ago
vulnknox preview

vulnknox

GitHubiqzer0/vulnknox

A Go-based wrapper for the KNOXSS API to automate XSS vulnerability testing.

penetration-testingvulnerability-scannersweb-application-exploitation+1
72 years ago
golang-CVE-2023-44487 preview

golang-CVE-2023-44487

GitHubretocode/golang-cve-2023-44487

Testing resources and attacker tool for CVE-2023-44487 (HTTP/2 Rapid Reset) to evaluate server resilience across Go, gRPC, reverse proxy, and nginx…

exploitationfuzzingpenetration-testing+2
22 years ago
galer preview

galer

GitHubdwisiswant0/galer

A fast tool to fetch URLs from HTML attributes by crawl-in.

crawlerinformation-gatheringutilities-frameworks+1
2621 year ago
Previous12…29Next