Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools for testing and securing Internet of Things (IoT) devices, protocols, and platforms.

Kitploit recommended

Top tools

10 selected

binwalk

refirmlabs/binwalk

14.2k2 months ago

emba

e-m-b-a/emba

3.6k22h 8m ago

FACT_core

fkie-cad/fact_core

1.5k4 days ago

FirmAE

pr0v3rbs/firmae

8944 months ago

firmadyne

firmadyne/firmadyne

2.1k2 years ago

IoTGoat

owasp/iotgoat

9161 year ago

metasploit-framework

rapid7/metasploit-framework

38.8k14h 37m ago

routersploit

threat9/routersploit

13.2k5 months ago

#10

bettercap

bettercap/bettercap

19.8k3 days ago

#11

nmap

nmap/nmap

13.3k2 days ago

Newest Relevance Most popular Recently updated

792 results

Bluetooth-Attacks-CVE-2025-27840

demining/bluetooth-attacks-cve-2025-27840

Bitcoin Cryptanalysis: CVE-2025-27840 Vulnerability in ESP32 Microcontrollers Puts Billions of IoT Devices at Risk via Wi-Fi & Bluetooth

embedded-systems-securitybluetooth-securityiot-security+7

121 year ago

CVE-2022-39073

v0lp3/cve-2022-39073

Proof of concept for the command injection vulnerability affecting the ZTE MF286R router, including an RCE exploit.

iot-securityvulnerability-analysisexploitation+3

113 years ago

365cam-stream

inartin/365cam-stream

Local streaming tool for cheap WiFi cameras that bypasses cloud services and phone apps. Discovers cameras on your network, authenticates via PPPP…

iot-securityreverse-engineeringnetwork-security+3

166 months ago

DVR_Sploit

x3rx3ssec/dvr_sploit

Simple python3 script to automate CVE-2018-9995

iot-securitypassword-attacksvulnerability-analysis+3

112 years ago

ezviz_lan_rce

infobyte/ezviz_lan_rce

PoC exploits and Docker build environment for CVE-2023-34551 and CVE-2023-34552 targeting EZVIZ IP cameras, with DEF CON 31 Hardware Hacking Village…

embedded-systems-securityexploit-frameworksiot-security+6

143 years ago

CVE-2020-10558

nullze/cve-2020-10558

Tesla Hack All Vehicles DoS Infotainment Touchscreen Interface CVE-2020-10558

embedded-systems-securityiot-securityvulnerability-analysis+4

158 months ago

routers-exploit

elbertavares/routers-exploit

Proof-of-concept exploits for TP-Link routers, including remote command execution and authentication bypass vulnerabilities.

iot-securityvulnerability-analysisexploitation+4

116 years ago

CVE-2023-33381-MitraStar-GPT-2741GNAC

duality084/cve-2023-33381-mitrastar-gpt-2741gnac

Proof-of-concept exploit for OS command injection (CVE-2023-33381) in MitraStar GPT-2741GNAC routers. Demonstrates bypass of restricted shell via…

embedded-systems-securityiot-securityvulnerability-analysis+4

133 years ago

CVE-2026-39047

j4ck3lsyn-gen2/cve-2026-39047

Epson Printer RAW Protocol Exploit Framework

embedded-systems-securityexploit-frameworksiot-security+9

63 months ago

CVE-2026-53921-PoC-Exploit

tc4dy/cve-2026-53921-poc-exploit

CVE-2026-53921 – odhcpd Stack Overflow (CVSS 9.8) 🛡️ Vuln detailed and comprehensive Write-Up and Verifier & Multi-exploit for OpenWrt DHCPv6 RCE.…

embedded-systems-securityreconnaissanceexploit-frameworks+8

618 days ago

CVE-2025-2620-poc

otsmane-ahmed/cve-2025-2620-poc

Proof-of-concept exploit for CVE-2025-2620, a critical stack-based buffer overflow in D-Link DAP-1620 routers enabling unauthenticated remote code…

embedded-systems-securityiot-securityvulnerability-analysis+8

161 year ago

sunsetscan

nocoderrandom/sunsetscan

Local-network security auditing with EOL, CVE, device identity, and HTML reports

reconnaissancevulnerability-scannersiot-security+4

31 month ago

callstranger-detector

corelight/callstranger-detector

Zeek plugin detecting CallStranger (CVE-2020-12695) exploitation via UPnP SUBSCRIBE/NOTIFY analysis, identifying DDoS amplification, data…

iot-securityvulnerability-analysisdata-exfiltration+3

64 years ago

aimp

fabriziosalmi/aimp

A serverless networking protocol designed for resilient state synchronization between autonomous agents in fragmented, low-bandwidth networks

embedded-systems-securityiot-securitynetwork-security+6

524 days ago

ghostlock-cve-2026-43499

gitchw/ghostlock-cve-2026-43499

CVE-2026-43499 (GhostLock) — Linux kernel futex PI rt_mutex UAF ARM32 privilege escalation research targeting Huawei Watch 4 Pro (kernel 5.4.210)

embedded-systems-securityprivilege-escalationiot-security+5

61 month ago

st

bahaabdelwahed/st

IoT protocol threat detection tool that scans devices for vulnerabilities, searches CVEs/PoCs, analyzes firmware, and monitors MQTT/UPnP traffic to…

vulnerability-scannersiot-securitynetwork-security+1

132 years ago

D-Link-CVE-2021-27342-exploit

mavlevin/d-link-cve-2021-27342-exploit

Exploit for CVE-2021-27342 vulnerability (telnet authentication brute-force protection bypass)

embedded-systems-securityiot-securityvulnerability-analysis+3

155 years ago

HG532d-RCE-Exploit

wilfred-wulbou/hg532d-rce-exploit

A Remote Code Execution (RCE) exploit for Huawei HG532d based on CVE-2017-17215 vulnerability. Modded from original PoC code from exploit-db.com

exploit-frameworksiot-securityvulnerability-analysis+3

95 years ago

Previous 1…151617…44 Next