Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools for decompiling, disassembling, and understanding malware internals and complex binaries.

Kitploit recommended

Top tools

10 selected

ghidra

nationalsecurityagency/ghidra

71.1k16h 47m ago

radare2

radareorg/radare2

24.5k6h 26m ago

cutter

rizinorg/cutter

19.4k20h 38m ago

rizin

rizinorg/rizin

4.1k14h 25m ago

x64dbg

x64dbg/x64dbg

49.1k6 days ago

ImHex

werwolv/imhex

54.4k27 days ago

angr

angr/angr

9.0k10h 49m ago

unicorn

unicorn-engine/unicorn

9.2k8 months ago

capstone

capstone-engine/capstone

8.9k1 day ago

#10

keystone

keystone-engine/keystone

2.7k3 months ago

Newest Relevance Most popular Recently updated

1846 results

CVE-2023-33381-MitraStar-GPT-2741GNAC

duality084/cve-2023-33381-mitrastar-gpt-2741gnac

Proof-of-concept exploit for OS command injection (CVE-2023-33381) in MitraStar GPT-2741GNAC routers. Demonstrates bypass of restricted shell via…

embedded-systems-securityiot-securityvulnerability-analysis+4

133 years ago

GlacierCTF2023_writeups

losfuzzys/glacierctf2023_writeups

Curated CTF writeup collection for GlacierCTF 2023 covering pwn, rev, web, crypto, and smart contract challenges with solutions and educational…

reverse-engineeringweb-securitycryptography+4

162 years ago

Tourmaline

v-pun215/tourmaline

Reverse engineering notes, deobfuscated source, IOCs, and YARA rules for the Tourmaline ClickFix Python RAT, covering its DNS tunnel and blockchain…

ioc-managementreverse-engineeringmalware-analysis+7

121 month ago

interactive-binary-structures

proteqtum/interactive-binary-structures

Interactive documentation and visual reference for binary formats and system memory layouts.

static-analysisreverse-engineeringforensics+3

133 months ago

reverse-engineering-browser

sunghoojung/reverse-engineering-browser

Local-first macOS research browser built on a custom Brave build that captures network traffic, fingerprints, scripts, and runtime evidence for…

packet-sniffing-analysisdynamic-analysis-sandboxingweb-proxies-interception+9

61 day ago

CVE-2018-8941

secforce/cve-2018-8941

D-Link DSL-3782 Code Execution (Proof of Concept)

embedded-systems-securityvulnerability-analysisexploitation+6

98 years ago

CVE-2020-15368-AsrDrv103-research

egorrsp/cve-2020-15368-asrdrv103-research

Reverse engineering research of ASRock AsrDrv103.sys (CVE-2020-15368), covering its driver interface, encrypted request protocol, and privileged…

vulnerability-analysisreverse-engineeringmalware-analysis+4

71 month ago

world_conqueror_4_ru

e-gleba/world_conqueror_4_ru

Translated strings for World Conqueror 4 (RU)

android-securityencryption-decryption-toolsreverse-engineering+8

71 month ago

Icedid-file-decryptor

embee-research/icedid-file-decryptor

Static Decryptor for IcedID Malware

reverse-engineeringmalware-analysiscryptography+2

184 years ago

friman

thelicato/friman

Frida version management tool

android-securityios-securityreverse-engineering+3

1612 days ago

winmagic_sd

patois/winmagic_sd

Technical Write-Up on and PoC Exploit for CVE-2020-11519 and CVE-2020-11520

privilege-escalationvulnerability-analysisexploitation+4

124 years ago

qvm-tool

neurosaki987/qvm-tool

Static analysis and structure recovery toolkit for ACE .qvm0-protected PE images

static-analysisdynamic-analysis-sandboxingvulnerability-analysis+5

527 days ago

cve-2025-21479_iqooneo8

qingizi7/cve-2025-21479_iqooneo8

Local root exploit for CVE-2025-21479 (Adreno KGSL) on iQOO Neo8 (SM8475) - physical memory r/w, disables SELinux, spawns root shell

android-securityprivilege-escalationexploit-frameworks+6

61 month ago

Prineo_RE

exifdev/prineo_re

Reverse engineering of the engine powering the PriPara games on arcade.

embedded-systems-securityreverse-engineeringcryptography+3

51 month ago

mySCADA-myPRO-7-Hardcoded-FTP-Username-and-Password

emreovunc/myscada-mypro-7-hardcoded-ftp-username-and-password

CVE-2018-11311 | mySCADA myPRO 7 Hardcoded FTP Username and Password Vulnerability

embedded-systems-securitypassword-attacksvulnerability-analysis+4

128 years ago

CVE-2026-28609-matroska-pcm-oob

devrodt2/cve-2026-28609-matroska-pcm-oob

Proof-of-concept and instrumented reproduction harness for CVE-2026-28609, an out-of-bounds write in Android's MatroskaExtractor reachable via a…

android-securitymemory-forensicsvulnerability-analysis+5

81 month ago

CVE-2024-42642

vl4dr/cve-2024-42642

Proof-of-concept exploits for three vulnerabilities in Crucial MX500 SSD firmware update mechanism, enabling buffer overflows and potential code…

embedded-systems-securityvulnerability-analysisexploitation+5

142 years ago

toy-wasm-symbexp

synacktiv/toy-wasm-symbexp

A toy symbolic execution engine, supporting the blog article ...

reverse-engineeringctfbinary-analysis+1

185 years ago

Previous 1…697071…100 Next