Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

22 results

BlueToolkit

sgxgsx/bluetoolkit

Modular Bluetooth Classic (BR/EDR) vulnerability testing framework with reconnaissance, exploit modules for 43 public attacks/CVEs, and structured…

bluetooth-securitycurated-resourcesexploitation+5

727

5 months ago

UniPwn

bin4ry/unipwn

BLE exploit framework for Unitree robots: command injection via hardcoded AES keys enables remote takeover, payload injection, and wormable…

bluetooth-securityexploitationexploit-frameworks+4

40810 months ago

NetMRI-2014-3418

depthsecurity/netmri-2014-3418

Metasploit module exploiting InfoBlox Network Automation CVE-2014-3418 command injection to create a sudo user and deliver a reverse Meterpreter…

exploitationexploit-frameworkspenetration-testing+2

912 years ago

NoCameraSound

straight-tamago/nocamerasound

iOS exploit tool that silences camera shutter sound on vulnerable devices (iOS 14-16.1.2) using MacDirtyCow vulnerability. Installed via TrollStore…

exploitationexploit-frameworksios-security+2

1301 year ago

oxasploits

oxasploits/oxasploits

A number of exploits and tools I've written for CVEs accredited to Marshall Whittaker/oxagast

binary-exploitationbluetooth-securityexploitation+6

2 months ago

CVE-2025-13834-A-Bluetooth-RFCOMM-Out-of-Bounds-Read-Vulnerability-in-Modern-Wireless-Devices

sastraadiwiguna-purpleeliteteaming/cve-2025-13834-a-bluetooth-rfcomm-out-of-bounds-read-vulnerability-in-modern-wireless-devices

Bluetooth RFCOMM memory disclosure exploit framework for CVE-2025-13834, enabling unauthenticated OOB read of kernel/heap memory from 2.8 billion…

binary-exploitationbluetooth-securityexploitation+8

17 months ago

iOS-Attack-Chain-CVE-2025-31200-CVE-2025-31201

jgoyd/ios-attack-chain-cve-2025-31200-cve-2025-31201

Zero-click iOS exploit chain leveraging CoreAudio heap corruption (CVE-2025-31200) and kernel escalation via AppleBCMWLAN (CVE-2025-31201), with…

binary-exploitationbluetooth-securityexploitation+8

2023 months ago

Glass-Cage-iOS18-CVE-2025-24085-CVE-2025-24201

jgoyd/glass-cage-ios18-cve-2025-24085-cve-2025-24201

Zero-click PNG-based exploit chain for iOS 18.2.1 chaining ImageIO, WebKit, and Core Media vulnerabilities to achieve sandbox escape, kernel-level…

exploitationexploit-frameworksios-security+8

417 months ago

CVE-2026-43499-RMX5200

sorrow404null/cve-2026-43499-rmx5200

Android 16 local privilege escalation exploit for realme RMX5200 using LD_PRELOAD-based preload.so chain to achieve temporary root access via…

android-securitybinary-exploitationexploitation+6

61 month ago

CVE-2025-27840-WIP

ladyg00se/cve-2025-27840-wip

Proof-of-concept exploit for CVE-2025-27840, a medium-severity vulnerability in ESP32 Bluetooth chips enabling unauthorized memory access via…

bluetooth-securityembedded-systems-securityexploitation+4

1 year ago

CVE-2013-1081

steponequit/cve-2013-1081

Exploit script for Novell ZENworks Mobile Management LFI vulnerability (CVE-2013-1081) with credential harvesting and remote code execution via…

exploitationexploit-frameworkspayload-development+3

213 years ago

routersploit

threat9/routersploit

Exploitation Framework for Embedded Devices

bluetooth-securityembedded-systems-securityexploitation+7

13.2k3 months ago

lamda

firerpa/lamda

Android Full-Stack Device Control Platform: WebRTC/H.264 remote desktop, UI/OCR/image-matching automation, one-click MITM, built-in Frida,…

android-securitydynamic-analysis-sandboxingeducation+8

8.2k8 days ago

Blue-Borne

cracksoft900/blue-borne

PoC exploits and testing framework for BlueBorne Bluetooth vulnerabilities, including Android RCE (CVE-2017-0781), Linux RCE (CVE-2017-1000251), and…

bluetooth-securityexploitationexploit-frameworks+3

105 years ago

Android-Privilege-Escalation-Remote-Access-Vulnerability-CVE-2015-1805

ireshchaminda1/android-privilege-escalation-remote-access-vulnerability-cve-2015-1805

AndroRAT is a capability that can be used to inject a root exploit as a silent installation to perform a malicious task on the device. This AndroRAT…

android-securityexploitationexploit-frameworks+5

53 years ago

KNOXout

viralsecuritygroup/knoxout

Proof-of-concept exploit for CVE-2016-6584 that bypasses Samsung KNOX protections and roots Samsung Galaxy S6 devices via a kernel write-what-where…

android-securityexploitationexploit-frameworks+4

919 years ago

-BuL

hegaz0y/-bul

EDSEC_BKIF is a keystroke injection tool for Android, Linux, and iOS. With the help of CVE-2023-45866, it grants users unprecedented control over…

bluetooth-securityexploitationexploit-frameworks+3

12 months ago

ADB-Toolkit

ashwin990/adb-toolkit

Bash script for Android device penetration testing via ADB, featuring 28 options and a Metasploit section for payload generation, remote control, and…

android-securityexploit-frameworksinformation-gathering+3

2.0k3 years ago

Previous12 Next