Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

299 results

hal

emsec/hal

HAL – The Hardware Analyzer

binary-analysiseducationembedded-systems-security+6

8142h 19m ago

uofw

uofw/uofw

The unofficial Official FirmWare, a complete latest PSP firmware reverse engineering project

binary-analysiseducationembedded-systems-security+3

43129 days ago

IoTGoat

owasp/iotgoat

Deliberately insecure OpenWrt-based firmware for hands-on IoT security training. Features vulnerability challenges mapped to the OWASP IoT Top 10 for…

educationembedded-systems-securityfirmware-analysis+8

9161 year ago

baochip-1x

baochip/baochip-1x

Open-source silicon RTL and simulation tools for the Baochip 1x SoC, featuring a VexRiscv CPU, Verilator-based verification, and documentation for…

educationembedded-systems-securityfirmware-analysis+3

4581 month ago

awesome-reverse-engineering-and-malware-analysis

zx41r/awesome-reverse-engineering-and-malware-analysis

A verified map of reverse engineering and malware analysis. Disassemblers, unpacking, exploit dev, fuzzing, DFIR, and the deep-cut writeups other…

binary-analysisbinary-exploitationctf+8

8212 days ago

QuestStack

starseed12345/queststack

Unlock the Meta Quest 1 bootloader and gain root access using GhostLock + CVE-2021-1931.

android-securitybinary-exploitationembedded-systems-security+5

62 months ago

SmmExploit

tandasat/smmexploit

The report and the exploit of CVE-2021-26943, the kernel-to-SMM local privilege escalation vulnerability in ASUS UX360CA BIOS version 303.

binary-exploitationeducationexploitation+5

1485 years ago

kunglao-agent

amd2g2zz/kunglao-agent

The reverse-engineering expert agent: plans its own analysis path, derives every fact from raw evidence, and converges under mechanical verification…

ai-assisted-reversingandroid-securitybinary-analysis+8

5613 days ago

blackbox-fuzzing

otsmr/blackbox-fuzzing

Fuzzing IoT Devices Using the Router TL-WR902AC as Example

binary-analysiseducationexploitation+6

13211 months ago

attesor

inokinoki/attesor

AI-powered reverse-engineering of Rosetta (2 for Linux). Disclaimer: due to the user agreement, I will not touch the code. All is done by AI, so…

ai-assisted-reversingbinary-analysiseducation+3

722 months ago

android_kernel_modules_and_devicetree_oneplus_sm8550

oneplusoss/android_kernel_modules_and_devicetree_oneplus_sm8550

Low-level kernel modules and device tree source for the OnePlus 11 (sm8550), enabling hardware bring-up, driver analysis, and embedded system…

android-securityembedded-systems-securityfirmware-analysis+2

451 year ago

vulns-2026-fatfs-chance

runzeroinc/vulns-2026-fatfs-chance

Documented security vulnerabilities in the FatFs embedded filesystem library with CVE details, fuzzing harness, exploit disk-image generator, and…

binary-analysiseducationembedded-systems-security+8

413 months ago

CVE-2022-22063

msm8916-mainline/cve-2022-22063

Security issue in the hypervisor firmware of some older Qualcomm chipsets

binary-exploitationeducationembedded-systems-security+6

473 years ago

internet-of-vulnerable-things

otsmr/internet-of-vulnerable-things

The results of my small term paper on the topic of the Internet of Vulnerable Things and the exploit for CVE-2022-48194.

educationembedded-systems-securityexploitation+6

193 years ago

Prineo_RE

exifdev/prineo_re

Reverse engineering of the engine powering the PriPara games on arcade.

binary-analysiscryptographyeducation+3

51 month ago

dubiousdisk

wack0/dubiousdisk

The Porygon-Z that's super effective against Secure Boot! (CVE-2022-30203, CVE-2023-21560, CVE-2023-28269, CVE-2023-28249, and more...)

binary-exploitationctfeducation+4

102 years ago

CVE-2023-0861-POC

seifallahhomrani1/cve-2023-0861-poc

Analyzing and Reproducing the Command Injection Vulnerability (CVE-2023-0861) in NetModule Routers

educationembedded-systems-securityexploitation+5

83 years ago

LogoFail-PoC

d0rb/logofail-poc

This is a hypothetical demonstration of the process involved in exploiting LogoFail, it theoretically includes the necessary steps.

binary-exploitationeducationexploitation+5

82 years ago

Previous 123…17 Next