Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

242 results

CVE-2026-22017-Firmware-Update-via-BLE-Without-Authentication

george0papasotiriou/cve-2026-22017-firmware-update-via-ble-without-authentication

Simulated BLE peripheral exposing an unauthenticated GATT firmware-update characteristic; demonstrates critical CVE-2026-22017 device-takeover…

bluetooth-securityembedded-systems-securityexploitation+4

1 month ago

CVE-2026-0101-BLE-Address-Spoofing-via-Weak-Resolvable-Private-Address

george0papasotiriou/cve-2026-0101-ble-address-spoofing-via-weak-resolvable-private-address

Python PoC for CVE-2026-0101 demonstrating BLE address spoofing via replay of a captured Resolvable Private Address to impersonate a trusted…

adversarial-attackbluetooth-securityeducation+3

1 month ago

bandexploit

coleshelly/bandexploit

M1 Band Smart Watch Bluetooth Low Energy Exploit python script (CVE-2018-11631)

bluetooth-securityexploitationhardware-iot-security+3

26 years ago

Linux-Heap-Based-Type-Confusion-in-L2CAP

naren-jayram/linux-heap-based-type-confusion-in-l2cap

CVE-2020-12351

binary-exploitationbluetooth-securityembedded-systems-security+3

25 years ago

BlueDucky

sergeb250/blueducky

BlueDucky exploits a Bluetooth vulnerability, specifically CVE-2023-45866, which allows an attacker to inject keystrokes into a target device. The…

bluetooth-securityexploitationpayload-generation+3

21 year ago

buds-audit

spiritualmachines/buds-audit

No-dongle, no-root Bluetooth security assessment tool for wireless earbuds affected by the Airoha SDK vulnerability chain (CVE-2025-20700/20701/20702)

bluetooth-securityembedded-systems-securityexploitation+8

12 months ago

system_bt_AOSP_10_r33_CVE-2021-0316

satheesh575555/system_bt_aosp_10_r33_cve-2021-0316

Patched Bluetooth stack for Android 10 (AOSP r33) fixing buffer overflow vulnerability CVE-2021-0316.

android-securitybluetooth-securityembedded-systems-security+1

14 years ago

Upgraded_BlueBourne-CVE-2017-0785-

mastercode112/upgraded_bluebourne-cve-2017-0785-

upgraded of BlueBourne CVE-2017-0785 to python3

bluetooth-securityexploitationpenetration-testing+2

12 years ago

packages_apps_Bluetooth_AOSP10_r33_CVE-2021-0329

shaikusaf/packages_apps_bluetooth_aosp10_r33_cve-2021-0329

Android Bluetooth package with modifications addressing CVE-2021-0329, a critical remote code execution vulnerability in Bluetooth. Provides patched…

android-securitybluetooth-securityexploitation+2

14 years ago

CVE-2020-11539

the-girl-who-lived/cve-2020-11539

Improper Access Control in Tata Sonata Smartband

bluetooth-securityexploitationhardware-iot-security+3

16 years ago

sploit-bX

carlosdelrosario7/sploit-bx

Bash que instala los sploit CVE-2017-0781 y CVE-2017-0785 y lo necesario para su usos.

bluetooth-securityexploitationpenetration-testing+2

14 years ago

cabir_analysis

spiralbl0ck/cabir_analysis

cabin partial analysis

binary-analysisbluetooth-securityeducation+6

13 years ago

BlueborneDetection

mjancek/bluebornedetection

Simple detection tool for Blueborne vulnerability found on Android devices --- CVE-2017-0781.

android-securitybluetooth-securityexploitation+2

15 years ago

CVE-2025-13834-A-Bluetooth-RFCOMM-Out-of-Bounds-Read-Vulnerability-in-Modern-Wireless-Devices

sastraadiwiguna-purpleeliteteaming/cve-2025-13834-a-bluetooth-rfcomm-out-of-bounds-read-vulnerability-in-modern-wireless-devices

CVE-2025-13834 Technical Summary Vulnerability Type: Memory Disclosure / Out-of-Bounds (OOB) Read (CWE-125). CVSS Score: 7.5–8.1 (High/Critical). …

binary-exploitationbluetooth-securityexploitation+8

18 months ago

CVE-2026-51376

barghest-ngo/cve-2026-51376

Proof-of-concept exploit for BLE cache poisoning in Bitchat 1.15.0, demonstrating a man-in-the-middle attack that poisons the Bluetooth Low Energy…

bluetooth-securityexploitationvulnerability-analysis+1

16 months ago

JXL_Infotainment_CVE-2025-63895

thorat-shubham/jxl_infotainment_cve-2025-63895

Proof-of-concept for CVE-2025-63895: Bluetooth Classic LMP buffer overflow exploitation in JXL 9-inch Android car infotainment systems, enabling…

bluetooth-securityembedded-systems-securityexploitation+3

9 months ago

Agatsa-EasyTouch-Plus---CVE-2025-56019

yashodhanvivek/agatsa-easytouch-plus---cve-2025-56019

This report is for CVE-2025-56019 reserved for Easytouch+product for BLE authentication vulnerability assigned to Discoverer Yashodhan Vivek Mandke.…

authenticationbluetooth-securityembedded-systems-security+3

11 months ago

CVE-2023-21739

gmh5225/cve-2023-21739

Windows Bluetooth Driver Elevation of Privilege Vulnerability. CVE project by @Sn0wAlice

bluetooth-securityexploitationprivilege-escalation+1

13 years ago

Previous 1…111213 14 Next