Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

295 results

scan4all

ghosttroops/scan4all

Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port…

password-crackingreconnaissancevulnerability-scanners+9

6.2k

2 years ago

nikto

sullo/nikto

Nikto web server scanner

vulnerability-scannersweb-vulnerability-scannersinformation-gathering+2

10.6k6 days ago

xray

chaitin/xray

一款长亭自研的完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档

vulnerability-scannersweb-vulnerability-scannersweb-security+1

11.7k2 years ago

nuclei

projectdiscovery/nuclei

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling…

vulnerability-scannersweb-vulnerability-scannersapi-security-testing+8

30.4k1 day ago

Archived

fuzzing-templates

projectdiscovery/fuzzing-templates

Community curated list of nuclei templates for finding "unknown" security vulnerabilities.

web-vulnerability-scannersvulnerability-analysisweb-security+4

1072 years ago

Archived

ssllabs.rb

shopify/ssllabs.rb

vulnerability-scannersweb-vulnerability-scannersweb-security+2

379 years ago

Archived

SPIPScan

paulsec/spipscan

SPIP (CMS) Scanner for penetration testing purpose written in Python

reconnaissancevulnerability-scannersweb-vulnerability-scanners+3

7311 years ago

Archived

arachni-ui-web

arachni/arachni-ui-web

Arachni's Web User Interface.

vulnerability-scannersweb-vulnerability-scannersinformation-gathering+2

2334 years ago

Archived

riskscanner

fit2cloud/riskscanner

RiskScanner 是开源的多云安全合规扫描平台，基于 Cloud Custodian 和 Nuclei 引擎，实现对主流公(私)有云资源的安全合规扫描和漏洞扫描。

cloud-infrastructure-securityvulnerability-scannersweb-vulnerability-scanners+3

1.2k3 years ago

Archived

legion

abacus-group-rto/legion

Legion is an open source, easy-to-use, super-extensible and semi-automated network penetration testing tool that aids in discovery, reconnaissance…

reconnaissancevulnerability-scannersweb-vulnerability-scanners+8

1.1k1 year ago

Archived

request_smuggler

sh1yo/request_smuggler

Http request smuggling vulnerability scanner

vulnerability-scannersweb-vulnerability-scannersweb-application-exploitation+3

2284 years ago

Archived

pathprober

xchopath/pathprober

Probe and discover HTTP pathname using brute-force methodology and filtered by specific word or 2 words at once

reconnaissancevulnerability-scannersweb-vulnerability-scanners+3

485 years ago

Archived

kenzer

arpsyndicate/kenzer

automated web assets enumeration & scanning [DEPRECATED]

osintreconnaissancevulnerability-scanners+8

2883 years ago

Archived

findom-xss

dwisiswant0/findom-xss

A fast DOM based XSS vulnerability scanner with simplicity.

web-vulnerability-scannersvulnerability-analysisdynamic-code-analysis+3

8633 years ago

Archived

XSpear

hahwul/xspear

🔱 Powerfull XSS Scanning and Parameter analysis tool&gem

reconnaissancestatic-analysisvulnerability-scanners+8

1.4k5 months ago

Archived

h2buster

00xc/h2buster

A threaded, recursive, web directory brute-force scanner over HTTP/2.

reconnaissancevulnerability-scannersweb-vulnerability-scanners+3

376 years ago

Archived

Bashter

zerobyte-id/bashter

Web Vulnerability Scanner using Shell Script

web-vulnerability-scannersvulnerability-analysisweb-security+3

594 years ago

Archived

sqliv

the-robot/sqliv

massive SQL injection vulnerability scanner

reconnaissancevulnerability-scannersweb-vulnerability-scanners+2

1.2k8 years ago

Previous 1…151617 Next