Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

24 results

mobsfscan

mobsf/mobsfscan

mobsfscan is a static analysis tool that can find insecure code patterns in your Android and iOS source code. Supports Java, Kotlin, Swift, and…

android-securitycode-analysisios-security+3

791

11 days ago

wpair-app

zalexdev/wpair-app

WPair is a defensive security research tool that demonstrates the CVE-2025-36911 (eg WhisperPair) vulnerability in Google's Fast Pair protocol. This…

android-securitybluetooth-securityeducation+6

8508 months ago

AdbNet

0x1ca3/adbnet

A tool that allows you to search for vulnerable android devices across the world and exploit them.

android-securityexploitationinformation-gathering+4

4355 years ago

twiga

xtiankisutsa/twiga

A tool that enumerates Android devices for information useful in understanding its internals and for exploit development. It supports android 4.2 to…

android-securityexploit-frameworksinformation-gathering+1

558 years ago

mhf

stuxctf/mhf

Mobile Helper Framework (mhf) is a tool that automates the process of identifying the framework/technology used to create a mobile application.…

android-securityinformation-gatheringios-security+5

289 months ago

Sandroid_Dexray-Intercept

fkie-cad/sandroid_dexray-intercept

A Android malware analysis tool that creates comprehensive runtime profiles by hooking into application behavior across cryptography, file systems,…

android-securitycryptographydynamic-analysis-sandboxing+8

1024 days ago

frida-il2cpp-datacollector

gmh5225/frida-il2cpp-datacollector

Frida-based tool that ports Cheat Engine's MonoDataCollector to Android and iOS, enabling runtime Mono/IL2CPP data collection and memory inspection…

android-securitybinary-analysisdebuggers+5

133 years ago

apkSneeze

humoud/apksneeze

A tool that automates the mundane tasks of pentesting Android apps. It uses APKTool and Dex2Jar.

android-securityinformation-gatheringmobile-app-pentesting+2

116 years ago

morf

amrudesh1/morf

Mobile Reconnaissance Framework is a powerful, lightweight and platform-independent offensive mobile security tool designed to help hackers and…

android-securityios-securitymobile-security+4

872 months ago

kwetza

sensepost/kwetza

Python script to inject existing Android applications with a Meterpreter payload.

android-securityexploitationmobile-app-pentesting+3

6458 years ago

redexer

plum-umd/redexer

The Redexer binary instrumentation framework for Dalvik bytecode

android-securitybinary-analysisdynamic-analysis-sandboxing+4

1745 years ago

Janus-CVE-2017-13156

xyzasian/janus-cve-2017-13156

Java-based exploit tool for CVE-2017-13156 that bypasses Android APK signature verification by appending a DEX file to an existing APK, enabling code…

android-securitybinary-exploitationexploitation+2

158 years ago

droidlysis

cryptax/droidlysis

Automated pre-analysis tool for Android apps that disassembles samples, extracts properties via configurable pattern matching, and organizes output…

android-securityinformation-gatheringmalware-analysis+3

3121 month ago

androidqf

botherder/androidqf

Portable forensic acquisition tool for Android devices that collects relevant data via USB debugging to identify potential spyware or compromise…

android-securitydigital-forensicsforensics+2

3118 months ago

Archived

Obfuscapk

claudiugeorgiu/obfuscapk

An automatic obfuscation tool for Android apps that works in a black-box fashion, supports advanced obfuscation features and has a modular…

android-securitydynamic-analysis-sandboxingeducation+4

1.3k2 years ago

Archived

ApkAnalyser

sonyxperiadev/apkanalyser

Static analysis tool for Android APKs that inspects Dalvik bytecode, decodes XML resources, and detects potential issues. Supports binary…

android-securitybinary-analysiscode-analysis+3

1.0k3 years ago

opace6-cve-2026-64560

wangs-official/opace6-cve-2026-64560

Temporary root tool for OnePlus Ace 6 that exploits the CVE-2026-64560 Linux kernel POSIX CPU timer use-after-free to gain root until reboot, without…

android-securitybinary-exploitationexploitation+6

7 days ago

friman

thelicato/friman

Frida version management tool

android-securityios-securitymobile-security+3

175 months ago

Previous12 Next