Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools for decompiling, disassembling, and understanding malware internals and complex binaries.

Kitploit recommended

Top tools

10 selected

ghidra

nationalsecurityagency/ghidra

71.1k3 days ago

radare2

radareorg/radare2

24.5k3h 8m ago

cutter

rizinorg/cutter

19.4k12h 33m ago

rizin

rizinorg/rizin

4.1k3 months ago

x64dbg

x64dbg/x64dbg

49.1k4 days ago

ImHex

werwolv/imhex

54.4k25 days ago

angr

angr/angr

9.0k2h 58m ago

unicorn

unicorn-engine/unicorn

9.2k8 months ago

capstone

capstone-engine/capstone

8.9k2h 50m ago

#10

keystone

keystone-engine/keystone

2.7k3 months ago

Newest Relevance Most popular Recently updated

1835 results

CVE-2023-46012

dest-3/cve-2023-46012

LINKSYS AC1900 EA7500v3 IGD UPnP Stack Buffer Overflow Remote Code Execution Vulnerability

embedded-systems-securityiot-securityvulnerability-analysis+6

71 year ago

zipdefrag

nccgroup/zipdefrag

Presented at Recon Montreal 2018

embedded-systems-securitymemory-forensicsreverse-engineering+3

78 years ago

CVE-2026-23111

baba01hacker666/cve-2026-23111

Linux Kernel nf_tables Use-After-Free (CVE-2026-23111) — LPE PoC

privilege-escalationmemory-forensicsvulnerability-analysis+5

73 months ago

s26-m1q-ghostlock-selinux

xrzcc/s26-m1q-ghostlock-selinux

GhostLock CVE-2026-43499 research for Galaxy S26 (SM-S942U1/m1q): SELinux Permissive achieved, KASLR + tracefs port, uid=0 boundary documented

android-securityprivilege-escalationvulnerability-analysis+4

61 month ago

binviz

karankantaria/binviz

Binary visualiser and triage tool — entropy, byte-class and Hilbert surfaces, dot plots and control-flow graphs over one shared address-space model.

static-analysisreverse-engineeringforensics+4

92 months ago

avdroot

ejfkdev/avdroot

Root an Android Studio emulator by patching its ramdisk with Magisk — in pure Go.

android-securityprivilege-escalationweb-proxies-interception+6

91 month ago

GZDoom-Arbitrary-Code-Execution-via-ZScript-PoC

chainmanner/gzdoom-arbitrary-code-execution-via-zscript-poc

Proof of concept for CVE-2024-54756, a vulnerability I found in GZDoom's ZScript scripting engine.

memory-forensicsvulnerability-analysisexploitation+5

121 year ago

CVE-2016-2334

icewall/cve-2016-2334

Exploit for CVE-2016-2334: heap overflow in 7zip's HFS+ archive parser. Includes HFS+ file generator and WinDbg heap analysis scripts for debugging…

vulnerability-analysisexploitationreverse-engineering+3

108 years ago

win-def-clickfix

backdoorskid/win-def-clickfix

A scanner that estimates whether Microsoft Defender is likely to flag a command as ClickFix.

defensive-toolsstatic-analysisvulnerability-analysis+3

410 days ago

fatal_core_dump

axlan/fatal_core_dump

A core dump debugging murder mystery.

memory-forensicsexploitationreverse-engineering+5

128 months ago

Powshell-decode-payload

jas502n/powshell-decode-payload

forensics-decoding-powershell-payloads

reverse-engineeringshellcodeforensics+2

86 years ago

CVE-2026-2796-escape-wasm-by-using-wasm

sneakynachos/cve-2026-2796-escape-wasm-by-using-wasm

PoC exploit chain for CVE-2026-2796: SpiderMonkey WebAssembly sandbox escape (signature type confusion -> arbitrary R/W -> RCE)

vulnerability-analysisexploitationreverse-engineering+2

52 months ago

Awesome-MoAI-Security

jinxhy/awesome-moai-security

Curated reading list and taxonomy of attack and defense research for mobile on-device AI systems, covering adversarial, backdoor, model stealing, and…

android-securityios-securityreverse-engineering+9

22 months ago

house_of_apple_2

jazho76/house_of_apple_2

Interactive GDB walkthrough of the House of Apple 2 FSOP technique on glibc 2.43, with a reproducible sandbox covering vtable bypass, stack pivoting,…

memory-forensicsexploitationreverse-engineering+7

52 months ago