Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools focused on testing, reversing, and securing iOS applications and the iOS operating system.

Kitploit recommended

Top tools

10 selected

frida

frida/frida

21.4k1 day ago

objection

sensepost/objection

9.3k1 month ago

Mobile-Security-Framework-MobSF

mobsf/mobile-security-framework-mobsf

21.6k9 days ago

ipsw

blacktop/ipsw

3.8k8h 37m ago

r2frida

nowsecure/r2frida

1.4k5 days ago

frida-ios-dump

alonemonkey/frida-ios-dump

4.0k1 day ago

ssl-kill-switch2

nabla-c0d3/ssl-kill-switch2

3.3k5 years ago

RMS-Runtime-Mobile-Security

m0bilesecurity/rms-runtime-mobile-security

3.1k3 months ago

mastg

owasp/mastg

13.1k22 days ago

#10

iblessing

soulghost/iblessing

6844 years ago

Newest Relevance Most popular Recently updated

334 results

ios-malicious-bithunter

alipay/ios-malicious-bithunter

iOS Malicious Bit Hunter is a malicious plug-in detection engine for iOS applications. It can analyze the head of the macho file of the injected…

static-analysisdynamic-analysis-sandboxingios-security+3

885 years ago

exr-imageio-poc

billy-ellis/exr-imageio-poc

PoC for CVE-2026-28990, an ImageIO bug patched in iOS/macOS 26.5

ios-securitymemory-forensicsvulnerability-analysis+3

454 months ago

CVE-2023-41992

whw0x455/cve-2023-41992

Proof-of-concept for CVE-2023-41992, a macOS kernel vulnerability, demonstrating exploitation techniques and providing a patch analysis.

ios-securitymemory-forensicsvulnerability-analysis+2

551 year ago

machscope

sadopc/machscope

All-in-one macOS binary analysis: Mach-O parsing, ARM64 disassembly, code signatures, and debugging.

static-analysisios-securitycode-analysis+8

1008 months ago

CVE-2026-20687-AppleJPEGDriver-UAF

0xjohnnydev/cve-2026-20687-applejpegdriver-uaf

CVE-2026-20687: AppleJPEGDriver startDecoder Timeout UAF — iOS/macOS kernel vulnerability leading to deferred panic (A19 Pro, iOS 26.3 RC)

ios-securityvulnerability-analysisexploitation+2

281 month ago

mas-website

owasp/mas-website

The OWASP Mobile Application Security Project website is the central hub for industry-leading standards, guides, and resources—helping developers and…

android-securityios-securityvulnerability-analysis+4

121 month ago

desc_race_A15

markie-dev/desc_race_a15

CVE-2021-30955 iOS 15.1.1 POC for 6GB RAM devices (A14-A15)

ios-securityvulnerability-analysisexploitation+2

484 years ago

PPLorer

cellebrite-labs/pplorer

IDA plugin that resolves PPL calls to the actual underlying PPL function.

static-analysisios-securityreverse-engineering+2

553 years ago

mas-crackmes

owasp/mas-crackmes

The MAS Crackmes aka. UnCrackable Apps, a collection of mobile reverse engineering challenges part of the OWASP MAS project.

android-securityios-securityexploitation+6

334 years ago

brokentooth

omerporze/brokentooth

POC for CVE-2018-4327

bluetooth-securityios-securityvulnerability-analysis+5

428 years ago

Glass-Cage-iOS18-CVE-2025-24085-CVE-2025-24201

jgoyd/glass-cage-ios18-cve-2025-24085-cve-2025-24201

Glass Cage is a zero-click PNG-based RCE chain in iOS 18.2.1, bypassing LockDown mode protection by exploiting ImageIO (CVE-2025-43300), then…

privilege-escalationexploit-frameworksios-security+8

409 months ago

mhf

stuxctf/mhf

Mobile Helper Framework (mhf) is a tool that automates the process of identifying the framework/technology used to create a mobile application.…

android-securitystatic-analysisios-security+5

2810 months ago

CVE-2025-24203-iOS-Exploit-With-Error-Logging

geosn0w/cve-2025-24203-ios-exploit-with-error-logging

Slightly improved exploit of the CVE-2025-24203 iOS vulnerability by Ian Beer of Google Project Zero

privilege-escalationexploit-frameworksios-security+4

411 year ago

slides

chichou/slides

Mirror my talk materials

ios-securityvulnerability-analysisexploitation+5

471 year ago

NoHomeBar

straight-tamago/nohomebar

CVE-2022-46689

privilege-escalationios-securityvulnerability-analysis+2

723 years ago

gsscred-race

bazad/gsscred-race

CVE-2018-4331: Exploit for a race condition in the GSSCred system service on iOS 11.2.