Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools for decompiling, disassembling, and understanding malware internals and complex binaries.

Kitploit recommended

Top tools

10 selected

ghidra

nationalsecurityagency/ghidra

71.1k1 day ago

radare2

radareorg/radare2

24.5k0 days ago

cutter

rizinorg/cutter

19.4k1 month ago

rizin

rizinorg/rizin

4.1k3 months ago

x64dbg

x64dbg/x64dbg

49.1k2 days ago

ImHex

werwolv/imhex

54.4k23 days ago

angr

angr/angr

9.0k0 days ago

unicorn

unicorn-engine/unicorn

9.2k8 months ago

capstone

capstone-engine/capstone

8.9k7 days ago

#10

keystone

keystone-engine/keystone

2.7k3 months ago

Newest Relevance Most popular Recently updated

1827 results

CVE-2020-0041-Pixel-3a

vaginessa/cve-2020-0041-pixel-3a

Local privilege escalation exploit for Android Binder bug CVE-2020-0041 (Pixel 3a)

android-securityprivilege-escalationvulnerability-analysis+3

85 years ago

Salat-Stealer-Telegram-Proxy-Decoy-C2-Analysis

kaandemir993/salat-stealer-telegram-proxy-decoy-c2-analysis

"Reverse engineering analysis of Salat Stealer, a Go-based info-stealer that uses a Telegram proxy decoy, C2 communication, and encrypted memory…

reverse-engineeringforensicsinformation-gathering+6

53 months ago

CVE-2026-32202

virus-or-not/cve-2026-32202

Generates LNK files with crafted _IDCONTROLW structures to research Windows Shell spoofing vulnerabilities CVE-2026-21510 and CVE-2026-32202,…

vulnerability-analysisexploitationreverse-engineering+2

86 months ago

cve-2026-28912

jvidhan/cve-2026-28912

Reverse engineering notes and a working PoC for the macOS PackageKit symlink-following bug (CVE-2026-28912), with disassembly diff of the 26.6 fix.

privilege-escalationstatic-analysisvulnerability-analysis+5

21 month ago

ghidra-mtk-loader

nccgroup/ghidra-mtk-loader

Ghidra loader for the MediaTek md1img modem firmware image format

embedded-systems-securityiot-securityreverse-engineering+3

45 months ago

nanocore_extractor

jacobpimental/nanocore_extractor

Extracts nanocore sample from compile AutoIT script

dynamic-analysis-sandboxingreverse-engineeringforensics+2

67 years ago

cve-2026-1668-poc

wuyou6956-glitch/cve-2026-1668-poc

Proof-of-concept exploit for CVE-2026-1668 in TP-Link switch firmware, delivering a MIPS payload that yields a root shell on vulnerable devices.

embedded-systems-securityiot-securityvulnerability-analysis+6

6 months ago

PixelSmash

se1ims/pixelsmash

Proof-of-concept and lab harness for CVE-2026-8461, an out-of-bounds write in FFmpeg's MagicYUV decoder, with payload generator and Qt demo player.

memory-forensicsvulnerability-analysisexploitation+6

1 month ago

cve-2026-43687

jvidhan/cve-2026-43687

Reverse engineering notes and a self-contained PoC for the macOS NFS client access-cache race (CVE-2026-43687), with kext disassembly diff and dtrace…

memory-forensicsvulnerability-analysisexploitation+4

1 month ago

secbox

yv1ing/secbox

Conducting cybersecurity testing using the pi agent in a pre-built sandbox environment.

network-mappingvulnerability-analysismobile-app-pentesting+9

17 days ago

CVE-2019-11707-from-an-IonMonkey-type-confusion-to-SYSTEM-

g4sp4rcs/cve-2019-11707-from-an-ionmonkey-type-confusion-to-system-

Windows proof-of-concept exploit chain for CVE-2019-11707, a Firefox IonMonkey type confusion, combining browser RCE with sandbox escape to achieve…

privilege-escalationvulnerability-analysisexploitation+6

22 days ago

CVE-2026-0006-step-2

r3n3r0/cve-2026-0006-step-2

Research package demonstrating a leak-assisted ROP chain in Android media.swcodec via the CVE-2026-0006 APV decoder heap overflow, with payload…

android-securitymemory-forensicsexploitation+5

11 days ago

astaroth-deobfuscator

dodo-sec/astaroth-deobfuscator

IDA python script for deobfuscating Astaroth/Guildma injector DLL

static-analysisreverse-engineeringmalware-analysis+1

83 years ago

USB Spy

christophe.duvernois/usb-spy

Intercepts and analyzes USB Mass Storage traffic at the block and file level, emulates USB devices, and supports custom Python stubs for security…

vulnerability-analysisexploitationreverse-engineering+6

33 months ago

rizin-notebook

indalok/rizin-notebook

A notebook where to writes notes while using Rizin & Cutter!

reverse-engineeringscripting-automationdebuggers+3

76 months ago

Agent-Tesla-APC-Injection-Token-Manipulation-Registry-Persistence-Analysis

kaandemir993/agent-tesla-apc-injection-token-manipulation-registry-persistence-analysis

"Reverse engineering analysis of Agent Tesla, a .NET-based info-stealer that uses APC injection, token manipulation, and registry persistence.…

privilege-escalationpersistence-mechanismsreverse-engineering+4

32 months ago

vbox-lsilogic-sas-config

abraxas/vbox-lsilogic-sas-config

VirtualBox 7.2.20 - Critical - Local - Type confusion / arb R/W - SAS1068 CONFIG SCSI-SPI overlay