Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

236 results

SigFlip

med0x2e/sigflip

SigFlip is a tool for patching authenticode signed PE files (exe, dll, sys ..etc) without invalidating or breaking the existing signature.

binary-analysiscode-analysisdefensive-tools+5

1.3k

2 years ago

smack

smackers/smack

Modular software verification toolchain that translates LLVM IR into Boogie intermediate verification language for bounded and experimental unbounded…

binary-analysiscode-analysisdynamic-code-analysis+1

4481 month ago

cave_miner

antonin-deniau/cave_miner

Search for code cave in all binaries

binary-analysiscode-analysisexploitation+1

2864 days ago

nano-analyzer

weareaisle/nano-analyzer

A minimal LLM-powered zero-day vulnerability scanner by AISLE.

ai-securitybinary-analysiscode-analysis+5

3114 months ago

ropfuscator

ropfuscator/ropfuscator

ROPfuscator is a fine-grained code obfuscation framework for C/C++ programs using ROP (return-oriented programming).

binary-analysiscode-analysisdefensive-tools+2

4452 years ago

ruzzy

trailofbits/ruzzy

A coverage-guided fuzzer for pure Ruby code and Ruby C extensions

binary-analysiscode-analysisdynamic-analysis-sandboxing+3

1211 month ago

gosentry

trailofbits/gosentry

Security-oriented Go toolchain, focused on state-of-the-art fuzzing capabilities.

binary-analysiscode-analysisdevsecops+5

11710 days ago

xyntia

binsec/xyntia

Xyntia, the black-box deobfuscator

binary-analysiscode-analysisdynamic-code-analysis+1

968 months ago

CVE-2022-45451

alfarom256/cve-2022-45451

PoC for Acronis Arbitrary File Read - CVE-2022-45451

binary-analysiscode-analysisexploitation+2

183 years ago

CVE-2025-27237

hackinglz/cve-2025-27237

CVE 2025 27237 Zabbix LPE proof of concept.

binary-analysiscode-analysisexploitation+3

206 months ago

CVE-2022-3653

spiralbl0ck/cve-2022-3653

CVE-2022-3653 just the c++ component in Vulkan for later study

binary-analysiscode-analysisexploitation+3

75 months ago

unzip_poc

bytehackr/unzip_poc

CVE-2022-0529 & CVE-2022-0530

binary-analysiscode-analysisexploitation+2

34 years ago

CVE-2019-19203

manhndd/cve-2019-19203

Heap-buffer-overflow in Oniguruma (function gb18030_mbc_enc_len)

binary-analysiscode-analysisexploitation+2

36 years ago

Trend_Micro_POC

gguaiker/trend_micro_poc

CVE-2018-3608 Trend_Micro_CVE

binary-analysiscode-analysisexploitation+2

28 years ago

parquet-avro-rce

micrictor/parquet-avro-rce

PoC: CVE-2025-30065 incomplete fix bypass in Apache Parquet Java 1.15.1

binary-analysiscode-analysisexploitation+2

4 months ago

NuReaper

daanixpl/nureaper

Nuget scanner

binary-analysiscode-analysisdevsecops+6

2 months ago

libtheora-CVE-2024-56431-PoC

uniontech-software/libtheora-cve-2024-56431-poc

binary-analysiscode-analysisexploitation+2

11 year ago

CVE-2013-3900

sabecomoeh/cve-2013-3900

Proof-of-concept exploit for CVE-2013-3900, a WinVerifyTrust signature validation vulnerability enabling arbitrary code execution via crafted…

binary-analysiscode-analysisexploitation+1

1 year ago

Previous 1…678…14 Next