Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

41 results

arduino-pico

earlephilhower/arduino-pico

Raspberry Pi Pico Arduino core, for all RP2040 and RP2350 boards

bluetooth-securityeducationembedded-systems-security+5

2.9k

4h 37m ago

proxmark3

rfidresearchgroup/proxmark3

Hardware tool for RFID analysis, emulation, and penetration testing. Supports 125kHz, 13.56MHz protocols (MIFARE, iClass, ISO14443/15693) with key…

bluetooth-securitycryptographyembedded-systems-security+11

6.2k16h 21m ago

librepods

librepods-org/librepods

AirPods liberated from Apple's ecosystem.

android-securitybluetooth-securityembedded-systems-security+3

30.4k4 days ago

wifisting

phantom-brigade1/wifisting

GTK4 and CLI wireless security toolkit with 57 standalone modules for Wi-Fi, Bluetooth, 802.15.4, SDR/RF, NFC and router-side or network MITM testing…

bluetooth-securityhardware-iot-securityiot-security+8

17 days ago

pyFlipper

wh00hw/pyflipper

Flipper Zero Python CLI Wrapper

bluetooth-securityhardware-hackinghardware-iot-security+6

4463 months ago

Whisper_Bully

ymsniper/whisper_bully

Three-stage Bluetooth BDADDR extraction, DoS & hijack on Fast Pair devices; unpatched primitives outside CVE-2025-36911 scope (no Ubertooth needed)

bluetooth-securityexploitationinformation-gathering+4

393 months ago

Chimera

cipher-attack/chimera

Payload injector and HID emulator for Android like Hak5 and rubber ducky

android-securitybluetooth-securitycommand-and-control+4

284 months ago

esperto-wiimote

esperto-input/esperto-wiimote

Advanced Wiimote remapping software

bluetooth-securitygeneral-purpose-utilitieshardware-hacking+2

104 months ago

-BuL

hegaz0y/-bul

EDSEC_BKIF is a keystroke injection tool for Android, Linux, and iOS. With the help of CVE-2023-45866, it grants users unprecedented control over…

bluetooth-securityexploitationexploit-frameworks+3

14 months ago

oxasploits

oxasploits/oxasploits

A number of exploits and tools I've written for CVEs accredited to Marshall Whittaker/oxagast

binary-exploitationbluetooth-securityexploitation+6

4 months ago

BlueSpy

tarlogicsecurity/bluespy

PoC to record audio from a Bluetooth device

bluetooth-securityexploitationhardware-iot-security+3

1.6k5 months ago

om-research

alkersan/om-research

Documenting Osmo Mobile BLE protocol

bluetooth-securityeducationhardware-iot-security+3

238 months ago

CVE-2025-13834-A-Bluetooth-RFCOMM-Out-of-Bounds-Read-Vulnerability-in-Modern-Wireless-Devices

sastraadiwiguna-purpleeliteteaming/cve-2025-13834-a-bluetooth-rfcomm-out-of-bounds-read-vulnerability-in-modern-wireless-devices

CVE-2025-13834 Technical Summary Vulnerability Type: Memory Disclosure / Out-of-Bounds (OOB) Read (CWE-125). CVSS Score: 7.5–8.1 (High/Critical). …

binary-exploitationbluetooth-securityexploitation+8

19 months ago

CVE-2025-15474

nsm-barii/cve-2025-15474

A denial-of-service vulnerability in the AuntyFey BLE smart padlock allows unauthenticated connection floods to lock out legitimate users. …

bluetooth-securityeducationexploitation+4

49 months ago

Archived

urh

jopohl/urh

Universal Radio Hacker: Investigate Wireless Protocols Like A Boss

bluetooth-securityfuzzinghardware-iot-security+6

12.6k10 months ago

witchcraft

cosmic-zip/witchcraft

WITCHCRAFT is a cyberdeck toolkit built for runners who dive deep into the mesh. It’s your all-in-one rig for data-ghosting, ICE-breaking, and…

bluetooth-securityforensicsnetwork-mapping+8

521 year ago

CVE-2023-45866_WIP

v3ilsm1th/cve-2023-45866_wip

Simulates a Bluetooth keyboard to exploit CVE-2023-45866, injecting keystrokes via DuckyScript on vulnerable Android, iOS, macOS, and Linux devices…

bluetooth-securityexploitationhardware-iot-security+4

1 year ago

RustyInjector

xg3nesis/rustyinjector

Rust implementation of Marc Newlin's keystroke injection proof of concept (CVE-2023-45866).

bluetooth-securityeducationexploitation+2

11 year ago

Previous12 3 Next