Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
20 results
findom-xss preview
Archived

findom-xss

GitHubdwisiswant0/findom-xss

A fast DOM based XSS vulnerability scanner with simplicity.

dynamic-code-analysisinformation-gatheringpenetration-testing+3
872
3 years ago
restler-fuzzer preview

restler-fuzzer

GitHubmicrosoft/restler-fuzzer

RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and…

api-security-testingcloud-securityfuzzing+2
2.9k7 months ago
FUSE preview

FUSE

GitHubwsp-lab/fuse

A penetration testing tool for finding file upload bugs (NDSS 2020)

penetration-testingvulnerability-analysisweb-security
2565 years ago
nosqli preview

nosqli

GitHubcharlie-belmer/nosqli

NoSql Injection CLI tool, for finding vulnerable websites using MongoDB.

penetration-testingvulnerability-scannersweb-application-exploitation+1
4154 years ago
CVE-2023-27524 preview

CVE-2023-27524

GitHubsumaiyafathima-code/cve-2023-27524

Exploit tool for CVE-2023-27524, an authentication bypass vulnerability in Apache Superset. Enables unauthorized access to vulnerable instances for…

authentication-authorizationexploitationpenetration-testing+2
6 months ago
CVE-2023-27524 preview

CVE-2023-27524

GitHubkarthi-the-hacker/cve-2023-27524

Exploit tool for CVE-2023-27524, an authentication bypass vulnerability in Apache Superset. Enables unauthenticated access to Superset instances for…

authenticationexploitationpenetration-testing+2
12 years ago
pFuzz preview

pFuzz

GitHubredsection/pfuzz

Modular WAF bypass fuzzer with multi-threading, request manipulation, and payload encoding for red team web application testing.

fuzzingpenetration-testingred-teaming+2
1615 years ago
snuck preview

snuck

GitHubmauro-g/snuck

Automatic XSS filter bypass

fuzzingpenetration-testingwaf-bypass+2
9011 years ago
WAF_buster preview

WAF_buster

GitHubviperbluff/waf_buster

Disrupt WAF by abusing SSL/TLS Ciphers

cryptographypenetration-testingwaf-bypass+1
487 years ago
react2shell-scanner preview

react2shell-scanner

GitHuborwagodfather/react2shell-scanner

RSC/Next.js RCE (CVE-2025-55182 & CVE-2025-66478)

exploitationpenetration-testingwaf-bypass+3
189 months ago
tracy preview

tracy

GitHubnccgroup/tracy

A tool designed to assist with finding all sinks and sources of a web application and display these results in a digestible manner.

penetration-testingweb-security
5606 years ago
React2shell-CVE-2025-55182-checker preview

React2shell-CVE-2025-55182-checker

GitHuboways/react2shell-cve-2025-55182-checker

Passive CVE-2025-55182 detection tool for vulnerable React Server Components. Scans package.json, JavaScript bundles, HTTP headers, and API endpoints…

code-analysisdevsecopssupply-chain-security+3
29 months ago
dorkscout preview

dorkscout

GitHubr4ygm/dorkscout

Automated Google dork scanner that fetches exploit-db dork lists and scans targets or the entire internet for vulnerable applications, secret files,…

crawlerinformation-gatheringosint+2
2435 years ago
reconftw preview

reconftw

GitHubsix2dez/reconftw

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out…

cloud-securitydns-analysisdns-subdomain-enumeration+11
8.1k11 days ago
magicRecon preview

magicRecon

GitHubrobotshell/magicrecon

MagicRecon is a powerful shell script to maximize the recon and data collection process of an objective and finding common vulnerabilities, all this…

dns-analysisinformation-gatheringosint+7
1.1k2 years ago
XanXSS preview

XanXSS

GitHubekultek/xanxss

A simple XSS finding tool

fuzzingpayload-generationpenetration-testing+2
1107 years ago
zeroheight-account-verification-bypass-CVE-2025-65925 preview

zeroheight-account-verification-bypass-CVE-2025-65925

GitHubsneden/zeroheight-account-verification-bypass-cve-2025-65925

Independent security finding – Zeroheight account creation bypass via missing verification enforcement (patched June 2025)

authentication-authorizationexploitationmisconfiguration+3
28 months ago
Burp-SessionAuthTool preview
Archived

Burp-SessionAuthTool

GitHubthomaspatzke/burp-sessionauthtool

Burp plugin which supports in finding privilege escalation vulnerabilities

authentication-authorizationpenetration-testingprivilege-escalation+3
424 years ago
Previous12Next