Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

24 results

Root-My-Galaxy-Payloads

newazbenalam/root-my-galaxy-payloads

Device-specific CVE-2026-43499 root payloads and KernelSU artifacts for Samsung Galaxy models, with firmware profiles, exploit source, and a support…

android-securitybinary-exploitationexploitation+6

10 days ago

hazel-cve-2026-43499

dorlow/hazel-cve-2026-43499

Firmware-specific temporary root exploit for Toshiba/Amazon Fire TV (hazel) using CVE-2026-43499. Implements ARM32 futex-PI UAF, kernel address leak,…

android-securitybinary-exploitationembedded-systems-security+6

18 days ago

CVE-2026-41089

jelasin/cve-2026-41089

Pre-auth PoC for CVE-2026-41089 Netlogon CLDAP stack overflow via UDP/389, triggering LSASS crash/DC reboot. Includes exploit script, root-cause…

binary-exploitationexploitationnetwork-security+3

3 months ago

Archived

IonStack-S22-cve-2026-43499

camsshaft/ionstack-s22-cve-2026-43499

Android kernel exploit for Samsung Galaxy S22 that gains kernel-domain root via CVE-2026-43499, with SELinux permissive, device-specific kallsyms,…

android-securitybinary-exploitationexploitation+2

1 month ago

CVE-2026-43499-A36

fusiondrive/cve-2026-43499-a36

Standalone CVE-2026-43499 port for Galaxy A36 5G SM-A366W A366WVLS3AYG1 with KernelSU late-load

android-securitybinary-exploitationexploitation+4

11 month ago

PoC

mcw0/poc

Issues has been disabled for these PoC's, as they are simply PoC, Public Domain and unsupported.

binary-exploitationembedded-systems-securityexploitation+5

7823 years ago

CVE-2026-43499-S24U

fusiondrive/cve-2026-43499-s24u

CVE-2026-43499 research port for Galaxy S24 Ultra SM-S928U1 DZF2 (COMPLETED)

android-securitybinary-exploitationexploitation+5

41 month ago

CVE-2022-27666

ngtuonghung/cve-2022-27666

Heap buffer overflow exploit for CVE-2022-27666 in Linux kernel IPsec ESP6 implementation. Includes kernel build, debug setup with GDB stub, and…

binary-exploitationdebuggersexploitation+2

4 months ago

CVE-2007-2447

foudadev/cve-2007-2447

Educational exploit implementation for CVE-2007-2447 Samba 3.0.20-3.0.25rc username map script command execution vulnerability with Python SMB client…

binary-exploitationcommand-and-controleducation+6

2 years ago

CVE-2021-25461

bkojusner/cve-2021-25461

Proof of concept for CVE-2021-25461, a vulnerability in Android Unix domain sockets, demonstrating exploitation techniques and providing analysis for…

android-securitybinary-exploitationeducation+3

44 years ago

CVE-2022-46395

smiletablabo/cve-2022-46395

Exploit for CVE-2022-46395, an Arm Mali kernel driver vulnerability, achieving arbitrary kernel code execution to disable SELinux and gain root on…

android-securitybinary-exploitationexploitation+3

22 years ago

CVE-2022-20186

smiletablabo/cve-2022-20186

Exploit for CVE-2022-20186 in the Arm Mali kernel driver, achieving arbitrary kernel code execution to disable SELinux and gain root on Google Pixel…

android-securitybinary-exploitationexploitation+3

12 years ago

telnet_scan

ekomssavior/telnet_scan

scanner/exploiter CVE-2026-24061 & CVE-2026-32746

authenticationbinary-exploitationeducation+5

124 months ago

CVE-2026-41089

hnytgl/cve-2026-41089

CVE-2026-41089 是 Windows Netlogon 服务中一个关键的远程代码执行漏洞，单包即可崩溃 lsass.exe，导致域控制器在约 30-60 秒内重启。此期间该 DC 的所有域认证将失败。

binary-exploitationexploitationpenetration-testing+2

133 months ago

$CTT-Apple-Silicon-Refraction preview$

CTT-Apple-Silicon-Refraction

simoesctt/ctt-apple-silicon-refraction

webkit_refraction.js (The 33-Layer WebGL Payload) This JavaScript payload uses the \alpha constant to create a high-frequency "Memory Shiver." It…

binary-exploitationexploitationios-security+4

17 months ago

CVE-2026-43499_OPPO-MT6835

2932796375github/cve-2026-43499_oppo-mt6835

Proof-of-concept exploit chain for CVE-2026-43499 targeting OPPO MT6835 Android devices, with preload payload, build system, and analysis notes for…

android-securitybinary-exploitationeducation+4

41 month ago

CVE-2026-41089

0xabcd01/cve-2026-41089

CVE-2026-41089 PoC — Netlogon CLDAP stack buffer overflow (CVSS 9.8 CRITICAL)

binary-exploitationeducationexploitation+2

2313 months ago

CVE-2022-20186_CTXZ

bariskizilkaya/cve-2022-20186_ctxz

Exploit for CVE-2022-20186 in Arm Mali kernel driver, achieving arbitrary kernel code execution from untrusted app domain to disable SELinux and gain…

android-securitybinary-exploitationexploitation+3

33 years ago

Previous12 Next