Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
43 results
aotopsy preview

aotopsy

GitHubbronils/aotopsy

Static analyzer for Flutter/Dart AOT snapshots — recovers function names, class hierarchies, call graphs, and behavioral signals from libapp.so…

binary-analysismobile-app-pentestingmobile-security+2
19
9 days ago
ave263-chain preview

ave263-chain

GitHubyiyeshi0-hash/ave263-chain

iPad 8 iPadOS 26.3 AVE toolchain research (CVE-2026-64747 class)

binary-analysisexploitationios-security+2
18 days ago
CVE-2026-0049 preview

CVE-2026-0049

GitHubr3n3r0/cve-2026-0049

PoC and analysis of a zero-click DoS in Android's DNG SDK, with crafted DNG samples, an NDK crash harness, and UBSan/IntSan reproduction of the…

android-securitybinary-analysiseducation+4
28 days ago
trailmark preview

trailmark

GitHubtrailofbits/trailmark

Build and query a graph database representation of source code

binary-analysiscode-analysiseducation+3
4801 month ago
PoC-CVE-2025-69421 preview

PoC-CVE-2025-69421

GitHubkha-beleh/poc-cve-2025-69421

Minimal CVE-2025-69421 reproducer demonstrating a NULL pointer dereference in OpenSSL PKCS#12 processing via a malformed PFX file with absent…

binary-analysiscryptographyeducation+3
1 month ago
CVE-2026-36834 preview

CVE-2026-36834

GitHubkpatsakis/cve-2026-36834

Reproducible CVE-2026-36834 proof-of-concept demonstrating an out-of-bounds array read in LibRaw's Panasonic RW2 decoder, with mutation script and…

binary-analysiseducationfuzzing+3
2 months ago
servu-cve-2026-28318-poc preview

servu-cve-2026-28318-poc

GitHubeaea0001/servu-cve-2026-28318-poc

SolarWinds Serv-U CVE-2026-28318: unauthenticated Content-Encoding: deflate crash. Root-cause analysis (invalid free of an interior pointer -> heap…

binary-analysisexploitationmemory-forensics+2
12 months ago
windbg-mcp preview

windbg-mcp

GitHubgengstah/windbg-mcp

An MCP (Model Context Protocol) server that turns all pybag Windows debugger functions into native MCP tools. It lets MCP-compatible clients (Claude…

binary-analysisdebuggersdynamic-analysis-sandboxing+7
914 months ago
CVE-2026-3909 preview

CVE-2026-3909

GitHubjaf0rk/cve-2026-3909

Proof-of-concept exploit for CVE-2026-3909, a Chromium Skia out-of-bounds vulnerability, with patches and crash analysis for reliable triggering in…

binary-analysisexploitationfuzzing+2
24 months ago
CVE-2025-50420 preview

CVE-2025-50420

GitHublandw-hub/cve-2025-50420

Proof-of-concept exploit for CVE-2025-50420 demonstrating infinite recursion in Poppler's pdfseparate via crafted /Annots dictionaries, causing…

binary-analysisdebuggersexploitation+2
15 months ago
pyjadx preview

pyjadx

GitHubamruth-sn/pyjadx

Python bindings for JADX.

android-securitybinary-analysiscode-analysis+3
65 months ago
CVE-2026-20404-MediaTek-modem-remote-DoS-rogue-base-station-scenario- preview

CVE-2026-20404-MediaTek-modem-remote-DoS-rogue-base-station-scenario-

GitHubgeorge0papasotiriou/cve-2026-20404-mediatek-modem-remote-dos-rogue-base-station-scenario-

A MediaTek modem input validation issue can cause a system crash (remote DoS) when a UE connects to a rogue base station controlled by an attacker…

binary-analysisexploitationfuzzing+2
16 months ago
CVE-2025-14174-analysis preview

CVE-2025-14174-analysis

GitHubtypeconfused/cve-2025-14174-analysis

Analysis and PoC for CVE-2025-14174 - ANGLE Metal OOB write (iOS Safari, macOS Chrome)

binary-analysisexploitationhardware-security+4
38 months ago
CVE-2024-44083 preview

CVE-2024-44083

GitHubdynamicx64/cve-2024-44083

Proof-of-concept for CVE-2024-44083: IDA Pro ≤8.4 crash via excessive jump chains causing stack overflow. Includes technical analysis, reproduction…

binary-analysiseducationexploitation+3
18 months ago
CVE-2025-62454 preview

CVE-2025-62454

GitHub96613686/cve-2025-62454

Proof-of-concept for CVE-2025-62454 that triggers a Windows kernel crash (BSOD) in cldflt.sys via a crafted FSCTL request, causing a page fault in…

binary-analysisexploitationfuzzing+1
18 months ago
jadx-magic-strings preview

jadx-magic-strings

GitHub0rshemesh/jadx-magic-strings

JADX plugin that extracts method names, class references, and source file paths from string constants found in DEX files and decompiled Android code.

android-securitybinary-analysiscode-analysis+5
409 months ago
PoC_CVE-2025-11579 preview

PoC_CVE-2025-11579

GitHubshinigami-777/poc_cve-2025-11579

Proof-of-concept exploit for CVE-2025-11579, a denial-of-service vulnerability in rardecode that triggers an out-of-memory crash via a crafted RAR…

binary-analysisexploitationfuzzing+1
10 months ago
CVE-2025-46819 preview

CVE-2025-46819

GitHubdwisiswant0/cve-2025-46819

Proof-of-concept exploit for CVE-2025-46819, a Redis Lua long-string delimiter out-of-bounds read, demonstrating a crash via malformed input.

binary-analysisexploitationfuzzing+2
411 months ago
Previous123Next