Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

646 results

CVE-2017-13208-Scanner

idanshechter/cve-2017-13208-scanner

Python script using r2pipe to detect CVE-2017-13208 in Android libnetutils.so by checking for missing dhcp_size validation via static binary analysis.

android-securitybinary-analysisexploitation+3

5 years ago

CVE-2022-20186

smiletablabo/cve-2022-20186

Exploit for CVE-2022-20186 in the Arm Mali kernel driver, achieving arbitrary kernel code execution to disable SELinux and gain root on Google Pixel…

android-securitybinary-exploitationexploitation+3

12 years ago

PoCForCVE-2015-1528

kanpol/pocforcve-2015-1528

Proof-of-concept exploit for CVE-2015-1528 demonstrating privilege escalation on Android 5.0 via binder call fuzzing, with staged code injection into…

android-securitybinary-exploitationexploitation+3

111 years ago

frameworks_base_AOSP10_r33_CVE-2022-20138

trinadh465/frameworks_base_aosp10_r33_cve-2022-20138

Android framework patch for CVE-2022-20138, addressing a privilege escalation vulnerability in AOSP 10.

android-securitybinary-exploitationexploitation+2

13 years ago

frameworks_base_AOSP10_r33_CVE-2023-20911

trinadh465/frameworks_base_aosp10_r33_cve-2023-20911

Android framework patch for CVE-2023-20911, addressing a security vulnerability in AOSP 10.

android-securitybinary-exploitationexploitation+2

12 years ago

BUGS_OOM_NULL_PTR_DEREF

spiralbl0ck/bugs_oom_null_ptr_deref

BUGS ON ANDROID NULL PTR DEREF, OOM JUST FOR LULZ

android-securitybinary-exploitationeducation+1

12 years ago

BlueborneDetection

mjancek/bluebornedetection

Simple detection tool for Blueborne vulnerability found on Android devices --- CVE-2017-0781.

android-securitybluetooth-securityexploitation+2

15 years ago

CVE-2020-0041

koharin/cve-2020-0041

Exploit for CVE-2020-0041, an Android kernel privilege escalation vulnerability in the Binder driver, enabling local root access.

android-securitybinary-exploitationexploitation+2

14 years ago

frameworks_base_AOSP10_r33_CVE-2022-20142

satheesh575555/frameworks_base_aosp10_r33_cve-2022-20142

Android framework base repository for AOSP 10 r33, containing the fix for CVE-2022-20142, a privilege escalation vulnerability in the Android…

android-securitybinary-exploitationexploitation+2

14 years ago

frameworks_base_AOSP_10_r33_CVE-2022-20338

trinadh465/frameworks_base_aosp_10_r33_cve-2022-20338

Android framework patch for CVE-2022-20338, addressing a vulnerability in AOSP 10. Provides source-level fix for mobile security.

android-securitybinary-exploitationexploitation+2

12 years ago

ROOT-ZTE-X1001

sloden1977-lang/root-zte-x1001

Magisk root guide for ZTE Blade X1001 (Android 15, Unisoc UMS9230) using CVE-2022-38694 exploit. Contributions and screenshots welcome.

android-securityeducationexploitation+2

2 months ago

framework_base_CVE-2023-21285_NoPatch

uthrasri/framework_base_cve-2023-21285_nopatch

Android framework vulnerability analysis and exploitation demonstration for CVE-2023-21285, providing a no-patch test case for security researchers.

android-securitybinary-analysisexploitation+2

12 years ago

Bluetooth-Crash-CVE-2017-0785

ravss/bluetooth-crash-cve-2017-0785

Exploit script for CVE-2017-0785 that crashes the Bluetooth module on Android 4.0+ devices by sending crafted SDP search requests, causing…

android-securitybluetooth-securityexploitation+3

18 years ago

frameworks_minikin_AOSP10_r33-CVE-2022-20473

trinadh465/frameworks_minikin_aosp10_r33-cve-2022-20473

Repository dedicated to CVE-2022-20473, a vulnerability in Android's Minikin library, providing patched source code for AOSP 10.

android-securitybinary-exploitationcode-analysis+2

13 years ago

frameworks_opt_net_wifi_CVE-2021-0390

uthrasri/frameworks_opt_net_wifi_cve-2021-0390

Android Wi-Fi framework patch for CVE-2021-0390, addressing a remote code execution vulnerability in the Wi-Fi subsystem.

android-securityexploitationvulnerability-analysis+2

12 years ago

phonepe-sensitive-data-exposure-cve-2025-5154

honestcorrupt/phonepe-sensitive-data-exposure-cve-2025-5154

CVE-2025-5154: Proof-of-concept for unencrypted local storage of authentication tokens, PII, and KYC data in the PhonePe Android app, enabling…

android-securityauthenticationdata-exfiltration+6

11 year ago

cve

xsleaksiki/cve

An exploit for CVE-2015-1538-1 - Google Stagefright ‘stsc’ MP4 Atom Integer Overflow Remote Code Execution

android-securitybinary-exploitationexploitation+3

7 months ago

YAASA

mohammadnassiri/yaasa

Yet Another APK Static Analyzer

android-securitymalware-analysisstatic-analysis+1

18 years ago

Previous 1…222324…36 Next