Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools for decompiling, disassembling, and understanding malware internals and complex binaries.

Kitploit recommended

Top tools

10 selected

ghidra

nationalsecurityagency/ghidra

71.1k3h 32m ago

radare2

radareorg/radare2

24.5k8h 9m ago

cutter

rizinorg/cutter

19.4k17h 34m ago

rizin

rizinorg/rizin

4.1k3 days ago

x64dbg

x64dbg/x64dbg

49.1k5 days ago

ImHex

werwolv/imhex

54.4k25 days ago

angr

angr/angr

9.0k7h 59m ago

unicorn

unicorn-engine/unicorn

9.2k8 months ago

capstone

capstone-engine/capstone

8.9k7h 51m ago

#10

keystone

keystone-engine/keystone

2.7k3 months ago

Newest Relevance Most popular Recently updated

1835 results

Veridiff

veridiff/veridiff

Dynamic branch-divergence finder for native code -- traces two Frida executions and finds the exact instruction where they diverge.

dynamic-analysis-sandboxingcode-analysisdynamic-code-analysis+7

81 month ago

spidump

wrongbaud/spidump

Tool for reconstructing SPI flash images via logic analyzer captures

embedded-systems-securityiot-securityreverse-engineering+7

91 month ago

ratbag-toolbox

libratbag/ratbag-toolbox

Random reverse engineering knowledge and tools

packet-sniffing-analysisreverse-engineeringhardware-security+3

147 years ago

CVE-2025-15467

guiimoraes/cve-2025-15467

Command Execution PoC for OpenSSL Stack buffer overflow CVE-2025-15467

vulnerability-analysisexploitationreverse-engineering+5

158 months ago

Xjar_tips

jas502n/xjar_tips

获取加密程序的参数

static-analysisencryption-decryption-toolsreverse-engineering+2

135 years ago

jbl-wave-buds2-firmware-research

c8dhjp4tyv-bit/jbl-wave-buds2-firmware-research

Reverse-engineering notes and Python tooling for JBL Wave Buds 2 (BES1306) firmware: OTA container format, flash layout, BLE/GATT protocol, and…

embedded-systems-securitybluetooth-securityiot-security+7

815 days ago

CyberMeowfiaNS

xingchenrs/cybermeowfians

The next stage of CyberMeowfil (CVE-2026-43499 and 43074),Possibly biased toward vivo devices?

android-securityvulnerability-analysisreverse-engineering+4

92 months ago

365cam-stream

inartin/365cam-stream

Local streaming tool for cheap WiFi cameras that bypasses cloud services and phone apps. Discovers cameras on your network, authenticates via PPPP…

iot-securityreverse-engineeringnetwork-security+3

167 months ago

Arlo

synacktiv/arlo

Arlo file format helper

embedded-systems-securitystatic-analysisiot-security+5

192 years ago

high-pcode

evm-sec/high-pcode

Output high level Pcode (PcodeAST) in Ghidra

static-analysiscode-analysisreverse-engineering+2

173 years ago

spd_flasher

leochen-coremind/spd_flasher

CVE-2022-38694 Hardened Exploit - RP2350 USB Host Auto Flasher for Unisoc devices

embedded-systems-securityexploitationreverse-engineering+3

32 months ago

CVE-2025-54110-Kernel-EoP-PoC

canomer/cve-2025-54110-kernel-eop-poc

Project Date : Oct 2025 / PoC implementation for CVE-2025-54110 a Kernel-Level Integer Overflow Vulnerability in the Windows `NtQueryDirectoryObject`…

vulnerability-analysisexploitationreverse-engineering+3

115 months ago

EAC

gmh5225/eac

Compiles EAC and EOC anti-cheat SDKs, reversing research, and code resources to study how game anti-cheat systems integrate and operate.

reverse-engineeringmalware-analysisbinary-analysis+2

122 years ago

cve-2026-43499-honor

knowlily/cve-2026-43499-honor

CVE-2026-43499 (GhostLock) rt_mutex stack-UAF privilege escalation research on Honor BVL-AN16 (Magic6 Pro, SM8650, kernel 6.1.128). Includes analysis…

android-securityprivilege-escalationvulnerability-analysis+4

817 days ago