Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

62 results

dromara__hutool_CVE-2018-17297_4-1-1111

shoucheng3/dromara__hutool_cve-2018-17297_4-1-1111

Comprehensive Java utility library providing modules for cryptography, HTTP client, caching, JSON, scripting, and captcha generation, simplifying…

captcha-bypasscryptographyencryption-decryption-tools+3

1 year ago

WebSecProbe

spyboy-productions/websecprobe

Security testing tool for analyzing HTTP 403 responses and identifying access control misconfigurations in web applications.

misconfigurationpenetration-testingvulnerability-scanners+2

1858 months ago

skyhook

blackhillsinfosec/skyhook

A round-trip obfuscated HTTP file transfer setup built to bypass IDS detections.

data-exfiltrationids-ips-evasionred-teaming+1

2892 years ago

NTLMRecon

praetorian-inc/ntlmrecon

A tool for performing light brute-forcing of HTTP servers to identify commonly accessible NTLM authentication endpoints.

authenticationinformation-gatheringpenetration-testing+2

1175 months ago

cdb

pownjs/cdb

Automate common Chrome Debug Protocol tasks to help debug web applications from the command-line and actively monitor and intercept HTTP requests and…

debuggersnetwork-mappingpenetration-testing+2

725 years ago

sish

antoniomika/sish

HTTP(S)/WS(S)/TCP Tunnels to localhost using only SSH.

general-purpose-utilitiesnetwork-securityutilities-frameworks+1

4.7k2 months ago

url-status-checker

black-scorp10/url-status-checker

Async Python CLI tool for bulk URL status checking with color-coded HTTP response categorization, IP tracking, and redirect following for web service…

general-purpose-utilitiesinformation-gatheringweb-security

521 year ago

send

fastify/send

Node.js library for streaming files as HTTP responses with support for partial content, conditional requests, and configurable caching headers.…

general-purpose-utilitiesutilities-frameworksweb-security

151 month ago

external_curl_AOSP10_r33_CVE-2021-22924

trinadh465/external_curl_aosp10_r33_cve-2021-22924

Command-line tool and library for transferring data using URL syntax, supporting various protocols including HTTP, FTP, and more.

general-purpose-utilitiesnetwork-securityscripting-automation+2

4 years ago

gowitness

sensepost/gowitness

🔍 gowitness - a golang, web screenshot utility using Chrome Headless

crawlerinformation-gatheringreconnaissance+1

4.5k3 days ago

graphql-cop

dolevf/graphql-cop

Lightweight Python utility for automated security auditing of GraphQL APIs. Detects misconfigurations, information leaks, and denial-of-service…

api-securityapi-security-testingdynamic-code-analysis+5

69310 months ago

urlgrab

iamstoxe/urlgrab

A golang utility to spider through a website searching for additional links.

crawlerinformation-gatheringreconnaissance+1

3456 years ago

nuclearpond

devsecopsdocs/nuclearpond

Nuclear Pond is a utility leveraging Nuclei to perform internet wide scans for the cost of a cup of coffee.

cloud-securitydevsecopsnetwork-security+2

1963 years ago

X-Recon

joshkar/x-recon

A utility for detecting webpage inputs and conducting XSS scans.

crawlerinformation-gatheringreconnaissance+4

1715 months ago

ParrotNG

ikkisoft/parrotng

Java-based tool to detect Adobe Flex SWF files vulnerable to CVE-2011-2461, usable as a command-line utility or Burp Suite passive scanner plugin.

exploitationpenetration-testingstatic-analysis+3

4811 years ago

chaos

r57-labs/chaos

Origin IP scanning utility developed with ChatGPT

information-gatheringnetwork-mappingpenetration-testing+2

713 years ago

Ivanti-Connect-Around-Scan

seajaysec/ivanti-connect-around-scan

Mitigation validation utility for the Ivanti Connect Around attack chain. Runs multiple checks. CVE-2023-46805, CVE-2024-21887.

exploitationinformation-gatheringpenetration-testing+3

122 years ago

nuclearpond-OFJAAAH

kingofbugbounty/nuclearpond-ofjaaah

Nuclear Pond is a utility leveraging Nuclei to perform internet wide scans for the cost of a cup of coffee.

cloud-securitydevsecopsvulnerability-scanners+1

102 years ago

Previous12 3 4 Next