Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
25 results
XSStrike preview

XSStrike

GitHubs0md3v/xsstrike

Advanced XSS detection suite with context-aware payload generation, multi-threaded crawling, WAF evasion, and DOM scanning for automated web security…

crawlerdynamic-code-analysisfuzzing+8
15.1k
1 year ago
akto preview

akto

GitHubakto-api-security/akto

Open-source API security platform for continuous API discovery, vulnerability testing, and runtime threat detection. Integrates with CI/CD pipelines…

api-securityapi-security-testingdevsecops+2
1.5k1h 24m ago
wpscan preview

wpscan

GitHubwpscanteam/wpscan

WordPress security scanner that detects vulnerabilities, enumerates plugins/themes/users, and checks for weak passwords. Integrates with the WPScan…

crawlerdynamic-code-analysisinformation-gathering+7
9.7k5 days ago
WhatWeb preview

WhatWeb

GitHuburbanadventurer/whatweb

Web technology identification scanner with 1800+ plugins for detecting CMS, servers, JS libraries, and embedded devices. Supports stealthy to…

crawlerdynamic-code-analysisinformation-gathering+9
6.8k4 months ago
nikto preview

nikto

GitHubsullo/nikto

Perl-based web server scanner that performs comprehensive vulnerability checks, CGI scanning, and server fingerprinting with customizable plugins and…

crawlerdynamic-code-analysisinformation-gathering+6
10.7k10 days ago
wafw00f preview

wafw00f

GitHubenablesecurity/wafw00f

Automated Web Application Firewall fingerprinting tool that identifies and detects over 200 WAF products by analyzing HTTP responses to normal and…

crawlerdynamic-code-analysisinformation-gathering+6
6.5k4 months ago
Nightingale preview

Nightingale

GitHubrajanagori/nightingale

Multi-architecture Docker toolkit for penetration testing with preconfigured tools for web, network, mobile, API, OSINT, and forensics. Features…

container-securityeducationforensics+7
3131 month ago
MasterHttpRelayVPN-RUST preview

MasterHttpRelayVPN-RUST

GitHubtherealaleph/masterhttprelayvpn-rust

Free DPI bypass tool using a Google Apps Script relay with TLS SNI concealment. Provides HTTP and SOCKS5 proxy, cross-platform desktop UI, and no…

dns-analysisweb-security
3.6k2 months ago
tracehound preview
Archived

tracehound

GitHubtracehound/tracehound

Operational security controls with forensic guarantees

api-securitydefensive-toolsforensics+5
23 days ago
TInjA preview

TInjA

GitHubhackmanit/tinja

CLI tool for automated detection of server-side and client-side template injection vulnerabilities across 44 template engines in 8 programming…

dynamic-code-analysisfuzzingpenetration-testing+3
4234 months ago
jaeles preview

jaeles

GitHubjaeles-project/jaeles

The Swiss Army knife for automated Web Application Testing

dynamic-code-analysispenetration-testingvulnerability-scanners+2
2.4k2 months ago
http-garden preview

http-garden

GitHubnarfindustries/http-garden

Differential testing framework for HTTP implementations

dynamic-code-analysisfuzzingvulnerability-analysis+1
9422 months ago
BurpSentinel preview

BurpSentinel

GitHubdobin/burpsentinel

GUI Burp Plugin to ease discovering of security holes in web applications

dynamic-code-analysispenetration-testingvulnerability-analysis+3
1539 years ago
CVE-2026-46592 preview

CVE-2026-46592

GitHuboscerd/cve-2026-46592

Reproducer for CVE-2026-46592 demonstrating SOAP operation redirection via operationName header injection in Apache Camel camel-cxf, enabling…

api-security-testingeducationexploitation+3
1 month ago
28458 preview

28458

GitHubraka200juta/28458

Python exploit script for CVE-2020-28458, a prototype pollution vulnerability in DataTables. It sends crafted payloads to target URLs, supports proxy…

dynamic-code-analysisexploitationpenetration-testing+2
18 months ago
findom-xss preview
Archived

findom-xss

GitHubdwisiswant0/findom-xss

A fast DOM based XSS vulnerability scanner with simplicity.

dynamic-code-analysisinformation-gatheringpenetration-testing+3
8663 years ago
CVE-2026-56848 preview

CVE-2026-56848

GitHubopen-flaw/cve-2026-56848

Exploit PoC for CVE-2026-56848, a Node.js HTTP/2 heap-use-after-free that allows remote unauthenticated DoS. Includes raw-socket trigger, ASan build…

dynamic-code-analysisexploitationnetwork-security+2
6 days ago
beelzebub preview

beelzebub

GitHubbeelzebub-labs/beelzebub

A secure low code deception runtime framework, leveraging AI for System Virtualization.

ai-securityapi-securitycontainer-security+7
2.2k1 day ago
Previous12Next