Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Firmware extraction, unpacking, emulation, vulnerability discovery, and binary analysis tools.

Kitploit recommended

Top tools

10 selected

binwalk

refirmlabs/binwalk

14.2k2 months ago

emba

e-m-b-a/emba

3.6k1 day ago

FACT_core

fkie-cad/fact_core

1.5k7 days ago

FirmAE

pr0v3rbs/firmae

8944 months ago

firmadyne

firmadyne/firmadyne

2.1k2 years ago

embark

e-m-b-a/embark

3962 months ago

fwhunt-scan

binarly-io/fwhunt-scan

2431 year ago

ghidra

nationalsecurityagency/ghidra

71.1k1 day ago

radare2

radareorg/radare2

24.5k5h 18m ago

#10

angr

angr/angr

9.0k15h 21m ago

Newest Relevance Most popular Recently updated

473 results

CVE-2026-73673

ozcanpng/cve-2026-73673

Non-destructive PoC and technical write-up for CVE-2026-73673, an unauthenticated firmware-update flaw in Netis NC63 router, with reproduction and…

authentication-authorizationembedded-systems-securityiot-security+3

32 months ago

reyee_decrypt

ejfkdev/reyee_decrypt

Decrypt Ruijie ReyeeOS firmware (v1/v2) and encrypted config backups; recover plaintext passwords

embedded-systems-securitypassword-crackingencryption-decryption-tools+7

31 month ago

Device-Reversing

innotecsystem/device-reversing

Este repo contiene write-ups de reversing de dispositivos.

reverse-engineeringhardware-securityhardware-iot-security+3

56 years ago

d_link_880_bug

badnack/d_link_880_bug

CVE-2017-14948 for D-Link 880 Firmware

embedded-systems-securityiot-securityvulnerability-analysis+4

37 years ago

ShiningAppMask-ReverseEngineering

adrihd/shiningappmask-reverseengineering

Reverse Engineering of the Shining App Mask

embedded-systems-securitybluetooth-securityiot-security+5

69 months ago

HPE-Aruba-AOS8-Vulnerabilities

jm00nj/hpe-aruba-aos8-vulnerabilities

ArubaOS 8.13.2.0 pre-auth attack surface research. XXE+SSRF, ICMP reflection, buffer over-read, hardcoded credentials — all submitted to HPE…

vulnerability-analysisexploitationnetwork-security+3

44 months ago

IvantiInitrdDecryptor

watchtowrlabs/ivantiinitrddecryptor

A tool for decrypting Ivanti device initrd images by reverse-engineering the kernel's bzImage to locate and use the embedded AES key.

embedded-systems-securityreverse-engineeringcryptography+1

42 years ago

Linksys-WRT54GL-Exploitation

umbertodellamonica/linksys-wrt54gl-exploitation

From Solder to Shell: Full Hardware Exploitation of the Linksys WRT54GL Router (CVE-2022-43973)

embedded-systems-securityiot-securityvulnerability-analysis+9

25 months ago

cve-2021-21735-zte-zxhn-h168n-admin-compromise

minanagehsalalma/cve-2021-21735-zte-zxhn-h168n-admin-compromise

CVE-2021-21735 write-up: ZTE ZXHN H168N V3.5 wizard-page information leak, firmware routing flaw, and the path from exposed PPPoE/WLAN data to full…

embedded-systems-securityvulnerability-analysisexploitation+3

35 months ago

CVE-2026-95675

d6fault/cve-2026-95675

Python PoC exploiting CVE-2026-95675, an unauthenticated root command injection in D-Link DAP-1360 RevB firmware via a hardcoded auth-bypass and the…

embedded-systems-securityiot-securityvulnerability-analysis+6

128 days ago

CVE-2019-17147_Practice_Material

drmnsamoliu/cve-2019-17147_practice_material

This repo contains dumped flash partitions with firmware version vulnerable to CVE-2019-17147, and some useful binaries to downgrade and debug your…

embedded-systems-securityvulnerability-analysisexploitation+6

44 years ago

Tenda-F3-V4

4d000/tenda-f3-v4

Python script to exploit CVE-2020-35391 on Tenda F3 V3/V4 routers, enabling unauthorized download of configuration, flash, and syslog files.

embedded-systems-securitypassword-crackingvulnerability-analysis+4

31 year ago

CVE-2021-3972

killvxk/cve-2021-3972

Proof-of-concept exploit for CVE-2021-3972, demonstrating UEFI firmware variable manipulation to disable Secure Boot and change legacy boot settings.

vulnerability-analysisexploitationhardware-security+2

44 years ago

CVE-2024-22894

jaarden/cve-2024-22894

Proof-of-concept exploit for CVE-2024-22894, demonstrating 3DES-encrypted root password extraction from Alpha Innotec/Novelan heatpump firmware,…

embedded-systems-securitypassword-crackingiot-security+6

32 years ago

cve-2023-31070

bugprove/cve-2023-31070

CVE-2023-31070 Broadcom BCM47xx SDK slab-out-of-bounds write PoC

embedded-systems-securityvulnerability-analysisexploitation+2

43 years ago

UEFI-Security-Research-Howyar-SysReturn-NetCopy

themalwareguardian/uefi-security-research-howyar-sysreturn-netcopy

Post CVE-2024-7344 analysis of Howyar SysReturn NetCopy - reverse engineering notes, vulnerable binaries, vendor correspondence, and proof-of-concept…