Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

12 results

lamda

firerpa/lamda

Android Full-Stack Device Control Platform: WebRTC/H.264 remote desktop, UI/OCR/image-matching automation, one-click MITM, built-in Frida,…

android-securitydynamic-analysis-sandboxingeducation+8

8.2k

8 days ago

wsb-detect

lloydlabs/wsb-detect

C library for detecting Windows Sandbox (WSB) using multiple fingerprinting techniques including process, registry, device, and network checks,…

dynamic-analysis-sandboxingmalware-analysispayload-development+1

3743 years ago

lfi

lfi-project/lfi

In-process native code sandboxing system using compiler-based fault isolation. Supports Arm64, x86-64, and RISC-V with minimal overhead for…

binary-analysiscode-analysisdynamic-analysis-sandboxing+4

1166 months ago

FrisbeeLite

nccgroup/frisbeelite

GUI-based USB device fuzzer for automated black-box testing of USB protocol implementations, identifying vulnerabilities through malformed descriptor…

dynamic-analysis-sandboxingembedded-systems-securityfuzzing+2

658 years ago

GDA-android-reversing-Tool

charles2gan/gda-android-reversing-tool

Native C++ Dalvik bytecode decompiler for APK/DEX/ODEX/OAT/JAR/AAR/CLASS files. Performs malicious behavior detection, privacy leak scanning,…

android-securityctfdynamic-analysis-sandboxing+9

4.8k4 months ago

binder-trace

foundryzero/binder-trace

Android Binder IPC interceptor and parser with Wireshark-style TUI. Uses Frida on rooted devices to trace, filter, and reverse-engineer Binder…

android-securitybinary-analysisdynamic-analysis-sandboxing+3

76811 months ago

AndroTickler

ernw/androtickler

Penetration testing and auditing toolkit for Android apps.

android-securitydynamic-analysis-sandboxinginformation-gathering+4

2541 year ago

usbsnoop

yeet-src/usbsnoop

Live, system-wide USB transfer sniffer in eBPF — decodes USB traffic inline (control SETUP, SCSI, HID) from two universal URB hooks. No usbmon, no…

debuggersdynamic-analysis-sandboxingembedded-systems-security+7

8614 days ago

magisk-renef

vichhka-git/magisk-renef

Magisk module that auto-packages renef_server (dynamic instrumentation for Android)

android-securitybinary-analysisdynamic-analysis-sandboxing+3

333 months ago

CVE-2020-6514

hasan-khalil/cve-2020-6514

Exploit for CVE-2020-6514 targeting WebRTC SCTP memory corruption in Android applications. Uses Frida to hook native functions and alter SCTP packets…

android-securitybinary-exploitationdynamic-analysis-sandboxing+4

26 years ago

toothpicker

seemoo-lab/toothpicker

Coverage-guided in-process fuzzer for iOS Bluetooth daemon (bluetoothd) using FRIDA, with over-the-air fuzzing for MagicPairing protocol and crash…

bluetooth-securitydynamic-analysis-sandboxingfuzzing+3

2454 years ago

REW-sploit

rew-sploit/rew-sploit

Emulate and Dissect MSF and *other* attacks

bluetooth-securitydebuggersdefensive-tools+6

1442 years ago