Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

159 results

CVE-2023-33668

lodi-g/cve-2023-33668

Technical analysis and proof-of-concept bypass for CVE-2023-33668 in DigiExam proctoring software, demonstrating weak VM detection and native module…

binary-analysiseducationexploitation+3

3 years ago

Embarcadero-Workaround

helpsystems/embarcadero-workaround

This is a workaround for CVE-2014-0993 and CVE-2014-0994 that patches on memory without the need to recompile your vulnerable software. This is not…

binary-analysisdefensive-toolsexploitation+3

111 years ago

CVE-2025-65320

yonathanpy/cve-2025-65320

CVE-2025-65320 proof-of-concept demonstrating cleartext license key extraction from process memory via debugger attachment, enabling software…

binary-analysisdebuggersexploitation+3

27 months ago

CVE-2026-9789

ugvxb/cve-2026-9789

A critical local privilege escalation vulnerability has been discovered in Acer NitroSense software (PSAdminAgent.exe). The vulnerability allows any…

binary-analysiseducationexploitation+3

4 months ago

Archived

flare-qdb

mandiant/flare-qdb

Command-line and Python debugger for instrumenting and modifying native software behavior on Windows and Linux.

binary-analysisdebuggersdynamic-analysis-sandboxing+3

1643 years ago

FalconEye

rajiv2790/falconeye

Kernel-mode Windows driver for real-time detection of process injection techniques, including shellcode, DLL, and reflective injection, with syscall…

binary-analysisdefensive-toolsintrusion-detection+1

3095 years ago

pwndbg

pwndbg/pwndbg

Exploit Development and Reverse Engineering with GDB & LLDB Made Easy

ai-assisted-reversingbinary-analysisbinary-exploitation+12

11.1k4h 49m ago

lighthouse

gaasedelen/lighthouse

A Coverage Explorer for Reverse Engineers

binary-analysiscode-analysisdebuggers+6

2.6k2 years ago

avcleaner

scrt/avcleaner

C/C++ source obfuscator for antivirus bypass

binary-analysispayload-generation

1.1k4 years ago

patching

gaasedelen/patching

An Interactive Binary Patching Plugin for IDA Pro

binary-analysisbinary-exploitationdebuggers+8

1.3k1 year ago

lava

panda-re/lava

LAVA: Large-scale Automated Vulnerability Addition

binary-analysiseducationfuzzing+2

4181 day ago

pyghidra-mcp

clearbluejar/pyghidra-mcp

Python Command-Line Ghidra MCP

ai-assisted-reversingbinary-analysiscode-analysis+7

45011 days ago

idenLib

secrary/idenlib

idenLib - Library Function Identification [This project is not maintained anymore]

binary-analysisdebuggersmalware-analysis+2

3957 years ago

SAFE

gadiluna/safe

SAFE: Self-Attentive Function Embeddings for binary similarity

binary-analysismachine-learningpapers-research+1

1763 years ago

Fault-Injection-Finder

geeoon/fault-injection-finder

Automatically find and execute fault injection attacks

binary-analysisembedded-systems-securityexploitation+5

1410 days ago

Philips-PM-5139-5138A-5136-Firmware-Project

doctormord/philips-pm-5139-5138a-5136-firmware-project

Firmware reverse engineering of the Philips PM5139 / PM5138A / PM5136 function generators: 8051 emulators used as measuring instruments, 35 sections…

binary-analysisdynamic-analysis-sandboxingeducation+6

41 month ago

CVE-2026-8069

s1eezer/cve-2026-8069

Technical write-up and proof-of-concept for CVE-2026-8069, a local privilege escalation in Acer NitroSense and PredatorSense services, exploiting a…

binary-analysisexploitationexploit-frameworks+3

1 month ago

CVE-2023-42829

jamesd4/cve-2023-42829

Analysis of a logic vulnerability in the macOS SSH client leading to client passphrase exposure to a local attacker

authenticationbinary-analysiseducation+2

21 year ago

Previous 123…9 Next