Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Cross-platform tools and methodologies for comprehensive security testing of mobile applications.

Kitploit recommended

Top tools

10 selected

Mobile-Security-Framework-MobSF

mobsf/mobile-security-framework-mobsf

21.6k8 days ago

frida

frida/frida

21.4k18h 37m ago

objection

sensepost/objection

9.3k1 month ago

jadx

skylot/jadx

50.0k6 days ago

Apktool

ibotpeaches/apktool

25.3k4 days ago

mastg

owasp/mastg

13.1k21 days ago

androguard

androguard/androguard

6.2k9 days ago

quark-engine

ev-flow/quark-engine

1.7k4 days ago

APKiD

rednaga/apkid

2.6k1 day ago

#10

RMS-Runtime-Mobile-Security

m0bilesecurity/rms-runtime-mobile-security

3.1k3 months ago

Newest Relevance Most popular Recently updated

175 results

zygote-injection-toolkit

anonymous941/zygote-injection-toolkit

A command-line utility to exploit Android Zygote injection (CVE-2024-31317)

android-securityprivilege-escalationexploitation+5

6010 months ago

android_autorooter

scs-labrat/android_autorooter

Exfiltrate sensitive user data from apps on Android 12 and 13 using CVE-2024-0044 vulnerability remotely

android-securityexploit-frameworkspayload-generation+5

762 years ago

FireStorePwn

takito1812/firestorepwn

fsp - Firestore Database Vulnerability Scanner Using APKs

android-securityvulnerability-scannersmobile-app-pentesting+2

655 years ago

android-hardware-attestation-demo

quarkslab/android-hardware-attestation-demo

An Android HW Attestation demo

android-securityauthentication-authorizationmobile-app-pentesting+3

572 months ago

frida-ssl-bypass

danieldev23/frida-ssl-bypass

Frida toolkit that bypasses SSL/TLS certificate pinning on Android apps, hooking Java TrustManager, OkHttp, Conscrypt, and native OpenSSL/BoringSSL…

android-securitydynamic-analysis-sandboxingweb-proxies-interception+6

321 month ago

aotopsy

bronils/aotopsy

Static analyzer for Flutter/Dart AOT snapshots — recovers function names, class hierarchies, call graphs, and behavioral signals from libapp.so…

static-analysismobile-app-pentestingreverse-engineering+2

391 month ago

CVE-2024-23700

canyie/cve-2024-23700

PoC for CVE-2024-23700, Android slient privilege escalation allow to read/write contacts, SMS, calendar, call log and voicemail, make outgoing calls…

android-securityprivilege-escalationvulnerability-analysis+5

718 months ago

op13-cve-2026-64560

a23bc/op13-cve-2026-64560

Device-specific Android kernel exploit for CVE-2026-64560 on OnePlus 13 builds, providing temporary root via ADB shell with verified payloads and…

android-securityprivilege-escalationvulnerability-analysis+8

1324 days ago

mhf

stuxctf/mhf

Mobile Helper Framework (mhf) is a tool that automates the process of identifying the framework/technology used to create a mobile application.…

android-securitystatic-analysisios-security+5

2810 months ago

OrganizerTransaction

michalbednarski/organizertransaction

PoC for CVE-2021-39749, allowing starting arbitrary Activity on Android 12L Beta

android-securityvulnerability-analysisexploitation+2

374 years ago

Android-Imgui-Template

traitimtrongvag/android-imgui-template

A complete Android ImGui menu template project.

android-securityexploitationmobile-app-pentesting+4

172 months ago

JURIG

reverserid/jurig

a fully autonomous AI agent for reverse engineering

android-securitystatic-analysisdynamic-analysis-sandboxing+9

2210 days ago

Damn-Vulnerable-Android-Components

zinja-coder/damn-vulnerable-android-components

An intentionally vulnerable Android Application to demonstrate various vulnerabilities that airses in Android Components.

android-securityprivilege-escalationvulnerability-analysis+7

471 year ago

ghostlock-s26

1ndevelopment/ghostlock-s26

GhostLock (CVE-2026-43499) app for the Galaxy S26 series

android-securityprivilege-escalationpersistence-mechanisms+5

1225 days ago

ipa-scope

xcodeon1/ipa-scope

Static analysis tool for iOS applications that extracts links, API keys, subdomains, binary info, linked libraries, and strings to aid mobile…

static-analysisios-securitymobile-app-pentesting+3

243 years ago

slythestx

stuxctf/slythestx

Mobile app security auditing tool focused on automating SAST analysis, identifying underlying technologies (React Native, Flutter, Xamarin, native),…

android-securitystatic-analysisdynamic-analysis-sandboxing+6

161 month ago

opace6-cve-2026-64560

qingle009/opace6-cve-2026-64560

OnePlus Ace 6 temporary root tool (CVE-2026-64560) - device-verified port with corrected bootidParent address