Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

85 results

CVE-2026-22017-Firmware-Update-via-BLE-Without-Authentication

george0papasotiriou/cve-2026-22017-firmware-update-via-ble-without-authentication

Simulated BLE peripheral exposing an unauthenticated GATT firmware-update characteristic; demonstrates critical CVE-2026-22017 device-takeover…

bluetooth-securityembedded-systems-securityexploitation+4

3 months ago

CVE-2018-9995-DVR-Credentials-Extractor

f7p-h4nn1b4l/cve-2018-9995-dvr-credentials-extractor

This project demonstrates the publicly disclosed CVE-2018-9995 vulnerability found in multiple embedded DVR devices.

authenticationembedded-systems-securityexploitation+5

13 months ago

CVE-2025-63821

xernary/cve-2025-63821

Proof-of-concept of vulnerability found in Totolink A720R router

embedded-systems-securityexploitationfirmware-analysis+3

4 months ago

CVE-2021-4045

234329a423853/cve-2021-4045

CVE-2021-4045 CVE-2021-4045 is a Command Injection vulnerability that allows Remote Code Execution in the TP-Link Tapo c200 IP camera. It affects all…

embedded-systems-securityexploitationfirmware-analysis+3

110 months ago

CVE-2026-36438

kensh1k/cve-2026-36438

Documentation of CVE-2026-36438: a vulnerability in Intelbras VIP 1230 B/D G4 devices allowing remote attackers to obtain administrator account…

authenticationembedded-systems-securityinformation-gathering+3

5 months ago

CVE-2018-12633-TPLink-Auth-Bypass

wiliam227user/cve-2018-12633-tplink-auth-bypass

A technical case study and exploitation analysis of the Authentication Bypass vulnerability in TP-Link TL-WR840N firmware (CVE-2018-12633).

data-exfiltrationeducationembedded-systems-security+8

110 months ago

CVE-2021-3310

piffd0s/cve-2021-3310

Western Digital MyCloud PR4100 Link Resolution Information Disclosure Vulnerability

embedded-systems-securityexploitationinformation-gathering+2

15 years ago

CVE-2025-63296

t4e-3/cve-2025-63296

KERUI K259 5MP Wi-Fi (Tuya Smart Security Camera) contains a code execution vulnerability

binary-exploitationcommand-and-controldata-exfiltration+8

11 months ago

CVE-2025-60854

k0n9-log/cve-2025-60854

D-link AX1500 Vulnerability

binary-analysiscommand-and-controlembedded-systems-security+7

10 months ago

CVE-2023-36143

robintrigon/cve-2023-36143

Maxprint Maxlink 1200G v3.4.11E has an OS command injection vulnerability in the "Diagnostic tool" functionality of the device.

embedded-systems-securityexploitationiot-security+2

3 years ago

CVE-2020-25748

jet-pentest/cve-2020-25748

Documentation of CVE-2020-25748: Cleartext transmission vulnerability in Rubetek IP cameras allowing MITM interception and modification of video…

embedded-systems-securityexploitationhardware-security+3

16 years ago

Archived

CVE-2020-27368

swzhouu/cve-2020-27368

TOTOLINK-A702R-V1.0.0-B20161227.1023 Directory Indexing Vulnerability

embedded-systems-securityinformation-gatheringiot-security+3

13 years ago

Archived

CVE-2022-48311

swzhouu/cve-2022-48311

HP Deskjet 2540 series printer Firmware Version CEP1FN1418BR and Product Model Number A9U23B HTTP configuration page Cross Site Scripting (XSS)…

embedded-systems-securityexploitationhardware-security+3

13 years ago

advisories

0xdea/advisories

A collection of my public security advisories.

cloud-securitycurated-resourceseducation+5

2811 months ago

CVE-2026-39047

j4ck3lsyn-gen2/cve-2026-39047

Epson Printer RAW Protocol Exploit Framework

binary-exploitationembedded-systems-securityexploitation+9

64 months ago

ghostlock-cve-2026-43499

gitchw/ghostlock-cve-2026-43499

CVE-2026-43499 (GhostLock) — Linux kernel futex PI rt_mutex UAF ARM32 privilege escalation research targeting Huawei Watch 4 Pro (kernel 5.4.210)

binary-exploitationembedded-systems-securityexploitation+5

61 month ago

CVE-2025-65817

istaarkk/cve-2025-65817

Here is the CVE-2025-65817

embedded-systems-securityexploitationhardware-iot-security+3

910 months ago

routeros-CVE-2018-14847-bytheway

babyshen/routeros-cve-2018-14847-bytheway

By the Way is an exploit that enables a root shell on Mikrotik devices running RouterOS versions:

embedded-systems-securityexploitationiot-security+3

43 years ago

Previous 1 2 345 Next