Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

40 results

BootStomp

ucsb-seclab/bootstomp

BootStomp: a bootloader vulnerability finder

android-securitybinary-analysisexploitation+3

417

7 years ago

cheese

zhuowei/cheese

CVE-2025-21479 proof-of-concept, I think

android-securitybinary-exploitationembedded-systems-security+7

2741 year ago

Glass

azw413/glass

Glass - a fast and free IDA Pro alternative

android-securitybinary-analysisdebuggers+7

19511 days ago

androidReverse

ultrasina/androidreverse

Android reverse engineering entirely on-device. Radare2 binary analysis, 8 Java decompilers, Flutter & Unity il2cpp support.

android-securitybinary-analysiseducation+5

1099 days ago

android_kernel_modules_and_devicetree_oneplus_sm8550

oneplusoss/android_kernel_modules_and_devicetree_oneplus_sm8550

Low-level kernel modules and device tree source for the OnePlus 11 (sm8550), enabling hardware bring-up, driver analysis, and embedded system…

android-securityembedded-systems-securityfirmware-analysis+2

4511 months ago

pwnage24mtk

kasnria001/pwnage24mtk

Cert exploit for MTK devices.There is a logic flaw in MTK cert verification process.Similar to CVE-2023-20696.

android-securitybinary-exploitationembedded-systems-security+5

261 month ago

GhostLock-Galaxy

wxxsfxyzm/ghostlock-galaxy

Root your Galaxy using CVE-2026-43499

android-securitybinary-analysisexploitation+6

1923 days ago

Android-Projector-C2-Malware

kavan00/android-projector-c2-malware

Breakdown of a c2-network of chinese beamers - SilentSDK-Analysis

android-securitycommand-and-controldigital-forensics+9

184 months ago

world_conqueror_4_ru

e-gleba/world_conqueror_4_ru

Translated strings for World Conqueror 4 (RU)

android-securitybinary-analysiscryptography+8

715 days ago

test_avb_key

nccgroup/test_avb_key

Python utility to check if Android verified boot images (vbmeta) are signed with publicly known test keys, identifying misconfigurations in release…

android-securitycryptographyfirmware-analysis+3

91 year ago

CVE-2019-5700

oscardagrach/cve-2019-5700

CVE-2019-5700

android-securitybinary-exploitationembedded-systems-security+5

116 years ago

F9360-CVE43499

e-r-butch/f9360-cve43499

SM-F9360 (Galaxy Z Fold4, q4q) locked-bootloader KernelSU root — CVE-2026-43499 temp root → LD_PRELOAD DEFEX bypass → no-LTO clang-12 kernelsu.ko.…

android-securitybinary-exploitationeducation+5

421 days ago

CVE-2026-43499-ZFOLD4

fusiondrive/cve-2026-43499-zfold4

CVE-2026-43499 research port for Galaxy Z Fold4 SM-F936W F936WVLU1AVGA (in progress)

android-securitybinary-exploitationexploitation+4

18 days ago

CVE-2024-56426

xcracker000/cve-2024-56426

CVE-2024-56426 Exynos9830 Bootrom Exploit - SM-G985F

android-securitybinary-exploitationembedded-systems-security+7

318 days ago

CVE-2026-43499_HW-CLT-AL01

zychen027/cve-2026-43499_hw-clt-al01

Generates per-device kernel offsets from boot.img and compiles a preload library to exploit CVE-2026-43499 Android arm64 local privilege escalation.

android-securitybinary-exploitationexploitation+4

14 days ago

spd_dump-macos

xun404/spd_dump-macos

UNISOC BootROM/FDL flasher for macOS: patched spd_dump with CVE-2022-38694 exec_addr2, protocol reference, partition rules, backup verification…

android-securityembedded-systems-securityexploitation+3

15 days ago

SpringPeace

virtualesp/springpeace

(Hopefully) A tool to root for (most) Android devices through CVE-2026-43499

android-securitybinary-analysisexploitation+4

1 month ago

CVE-2023-33768

purseclab/cve-2023-33768

DoS against Belkin smart plugs via crafted firmware injection

android-securityexploitationfirmware-analysis+4

13 years ago

Previous 123 Next