Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Categories

Static Analysis

Tools for examining malware binaries and code without executing them (e.g., disassemblers, unpackers).

Kitploit recommended

Top tools

10 selected
ghidra preview#1

ghidra

GitHubnationalsecurityagency/ghidra
71.1k16h 33m ago
capa preview#2

capa

GitHubmandiant/capa
6.1k5 days ago
yara-x preview#3

yara-x

GitHubvirustotal/yara-x
1.2k7h 47m ago
Detect-It-Easy preview#4

Detect-It-Easy

GitHubhorsicq/detect-it-easy
11.3k1 day ago
flare-floss preview#5

flare-floss

GitHubmandiant/flare-floss
4.1k4 days ago
radare2 preview#6

radare2

GitHubradareorg/radare2
24.5k5h 12m ago
rizin preview#7

rizin

GitHubrizinorg/rizin
4.0k0 days ago
LIEF preview#8

LIEF

GitHublief-project/lief
5.5k19h 51m ago
pefile preview#9

pefile

GitHuberocarrera/pefile
2.1k14 days ago
angr preview#10

angr

GitHubangr/angr
9.0k9h 38m ago
NewestRelevanceMost popularRecently updated
1242 results
ida_kernelcache preview

ida_kernelcache

GitHubcellebrite-labs/ida_kernelcache

An IDA Toolkit for analyzing iOS kernelcaches.

static-analysisios-securityvulnerability-analysis+5
1492 months ago
NinjaDroid preview

NinjaDroid

GitHubrovellipaolo/ninjadroid

Ninja Reverse Engineering on Android APK packages

android-securitystatic-analysisreverse-engineering+2
2875 months ago
trajan preview

trajan

GitHubpraetorian-inc/trajan

A multi-platform CI/CD vulnerability detection and attack automation tool for identifying security weaknesses in pipeline configurations.

static-analysisvulnerability-scannerscode-analysis+7
1768 days ago
blitzstrike preview

blitzstrike

GitHubshinthink/blitzstrike

MCP server packaging a three-tier penetration-testing methodology: attack-surface reconnaissance, source-to-sink static analysis, and live finding…

penetration-testing-frameworksreconnaissancestatic-analysis+8
5141 month ago
ghidra-evm preview

ghidra-evm

GitHubadelapie/ghidra-evm

Ghidra module for disassembling, decompiling, and analyzing Ethereum smart contract bytecode. Detects insecure instructions, extracts hidden methods,…

static-analysisvulnerability-analysisreverse-engineering+1
1495 years ago
PortexAnalyzerGUI preview

PortexAnalyzerGUI

GitHubstruppigel/portexanalyzergui

Graphical interface for PortEx, a Portable Executable and Malware Analysis Library

static-analysishash-analysisreverse-engineering+3
1495 days ago
opentaint preview

opentaint

GitHubseqra/opentaint

Formal inter-procedural taint analysis engine for application security. Tracks untrusted data across function boundaries, persistence layers, and…

static-analysisvulnerability-scannersvulnerability-analysis+7
12714h 44m ago
scan preview

scan

GitHubatomdrift-project/scan

0-day malware detection for binaries, source & scripts (that doesn't suck)

defensive-toolsstatic-analysisvulnerability-scanners+9
2224h 9m ago
idamcp preview

idamcp

GitHubidamcp/idamcp

MCP server integrating IDA Pro with AI agents, featuring a stateless gateway for multi-session management, a relational SQL query engine for binary…

static-analysisdynamic-analysis-sandboxingreverse-engineering+3
1257h 44m ago
malduck preview

malduck

GitHubcert-polska/malduck

🦆 Malduck is your ducky companion in malware analysis journeys

static-analysisdynamic-analysis-sandboxingreverse-engineering+3
3571 year ago
sass-king preview

sass-king

GitHubflorianmattana/sass-king

Reverse engineering NVIDIA SASS instruction dictionary, kernel audits and pattern recognition across GPU architectures.

embedded-systems-securitystatic-analysiscode-analysis+8
3175 months ago
Apkatshu preview

Apkatshu

GitHub0xpwny/apkatshu

Apkatshu is a Tool for extracting urls , emails , ip address , and interesting data from APK files

android-securitystatic-analysisinformation-gathering+1
2523 years ago
themida-unmutate preview

themida-unmutate

GitHubergrelet/themida-unmutate

Static deobfuscator for Themida, WinLicense and Code Virtualizer 3.x's mutation-based obfuscation.

static-analysisreverse-engineeringshellcode+3
3802 years ago
GAMBA preview

GAMBA

GitHubdenuvosoftwaresolutions/gamba

Simplification of General Mixed Boolean-Arithmetic Expressions: GAMBA

static-analysisreverse-engineeringmalware-analysis+2
2382 years ago
CustomProcessingUnit preview

CustomProcessingUnit

GitHubpietroborrello/customprocessingunit

The first analysis framework for CPU microcode

static-analysisdynamic-code-analysisexploitation+5
4113 years ago
hermes-decomp preview

hermes-decomp

GitHubsymbioticsec/hermes-decomp

A powerful decompiler that lets you reverse-engineer React Native mobile apps by converting their compiled Hermes bytecode (.hbc) files back into…

android-securitystatic-analysisios-security+8
13825 days ago
FindFunc preview

FindFunc

GitHubfelixber/findfunc

IDA Pro plugin for filtering functions by assembly patterns, byte sequences, string/name references, and size constraints, with rule-based search and…

static-analysiscode-analysisreverse-engineering+2
36211 months ago
apk-info preview

apk-info

GitHubdelvinru/apk-info

APK full-featured parser

android-securitystatic-analysisreverse-engineering+3
13318 days ago
Previous1…181920…69Next