Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

589 results

basconf

owasp/basconf

Boston Application Security Conference

curated-resourceseducationweb-security

21 month ago

Damn-Vulnerable-ML-Model

owasp/damn-vulnerable-ml-model

Intentionally vulnerable machine learning model for hands-on security training. Explore common ML vulnerabilities, adversarial attacks, and defensive…

adversarial-attackai-securityeducation+3

25 months ago

lbmap

wireghoul/lbmap

Advanced HTTP fingerprinting PoC

information-gatheringpenetration-testingreconnaissance+2

459 years ago

TCASVS

owasp/tcasvs

OWASP Thick Client Application Security Verification Standard

code-analysisconfiguration-auditingcryptography+5

323 months ago

Top10

owasp/top10

Official OWASP Top 10 Document Repository

curated-resourceseducationlearning-paths-courses+3

6.2k3 days ago

SILENTCHAIN

silentchainai/silentchain

AI-powered vulnerability scanner extension for Burp Suite with multi-provider support (Ollama, OpenAI, Claude, Gemini)

ai-securityapi-security-testingcode-analysis+8

4642 months ago

WebGoat.NET

jerryhoff/webgoat.net

OWASP WebGoat.NET

ctfeducationlabs-practice+3

25812 years ago

dvcsharp-api

appsecco/dvcsharp-api

Damn Vulnerable C# Application (API)

api-security-testingeducationlabs-practice+3

863 years ago

GraphQLGrapper

m19o/graphqlgrapper

Burp Suite extension to extract and collect GraphQL API endpoints from HTTP request history for security testing and reconnaissance.

api-security-testinginformation-gatheringpenetration-testing+3

211 year ago

zap-api-rust

zaproxy/zap-api-rust

Rust client library for the OWASP ZAP API, enabling programmatic access to web application security scanning, vulnerability detection, and proxy…

api-securitypenetration-testingvulnerability-scanners+3

153 years ago

CredMaster

knavesec/credmaster

Refactored & improved CredKing password spraying tool, uses FireProx APIs to rotate IP addresses, stay anonymous, and beat throttling

api-security-testingauthenticationcloud-security+9

1.3k1 year ago

flareprox

mrturvey/flareprox

Use Cloudflare to create HTTP pass-through proxies for unique IP rotation, similar to fireprox

api-security-testinginformation-gatheringpenetration-testing+5

79510 months ago

slinger

emo-crab/slinger

An HTTP client specifically developed for security researchers

api-security-testingpenetration-testingvulnerability-analysis+2

291 month ago

chaos-client

projectdiscovery/chaos-client

Go client to communicate with Chaos DB API.

api-security-testingdns-subdomain-enumerationinformation-gathering+2

88520 days ago

OWASPBugBounty

owasp/owaspbugbounty

This is a container of web applications that work with OWASP Bug Bounty for Projects

ctfeducationlabs-practice+3

341 year ago

OWASPWebGoatPHP

owasp/owaspwebgoatphp

A deliberately vulnerable web application for learning web application security.

ctfeducationlabs-practice+3

1611 year ago

packman

owasp/packman

A documentation and tracking project with the goal of making package management systems more secure.

authenticationconfiguration-auditingcurated-resources+3

525 years ago

PSCF

owasp/pscf

OWASP framework providing structured security capabilities for software products, derived from regulatory and industry standards analysis to guide…

curated-resourcesdevsecopseducation+2

290 years ago

Previous 1…111213…33 Next