Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

212 results

doggie

infobyte/doggie

Welcome to the Doggie and EvilDoggie repository by Faraday Security! Doggie is a modular DIY CAN Bus to serial adapter (USB, BLE, UART) using the…

embedded-systems-securityexploitationhardware-hacking+2

10 months ago

IoT-Pentest-devices-and-purpose

iotsrg/iot-pentest-devices-and-purpose

Curated guide to IoT penetration testing hardware and software tools for 2025, covering Bluetooth, Zigbee, Z-Wave, WiFi, RFID, automotive, and…

bluetooth-securitycurated-resourceseducation+8

731 year ago

sonos

blasty/sonos

Exploit and tooling for Amlogic-based Sonos devices: dumps OTP/eFUSE via an EL3 exploit, extracts LUKS decryption keys, and fetches/decrypts OTA…

embedded-systems-securityencryption-decryption-toolsexploitation+5

643 years ago

MK4001MTD-USB-Bridge

will127534/mk4001mtd-usb-bridge

RP2040 firmware that bridges a Toshiba MK4001MTD 0.85" SDIO microdrive as a USB mass storage device, implementing the full SDIO-ATA protocol stack…

data-recoveryembedded-systems-securityfirmware-analysis+4

442 months ago

Chimera

cipher-attack/chimera

Payload injector and HID emulator for Android like Hak5 and rubber ducky

android-securitybluetooth-securitycommand-and-control+4

243 months ago

HydraLINCAN

smillier/hydralincan

Hydrabus Shield for LIN and CAN Buses

embedded-systems-securityhardware-hacking

363 years ago

Fault-Injection-Finder

geeoon/fault-injection-finder

Automatically find and execute fault injection attacks

binary-analysisembedded-systems-securityexploitation+5

1419 days ago

IoT-Vulnerability-Research-Public

badchemical/iot-vulnerability-research-public

Independent IoT security research, vulnerability disclosures, and PoCs focusing on firmware analysis, hardware interfaces, and cryptographic flaws.

cryptographyeducationembedded-systems-security+8

1713 days ago

SparkAltBatteryBoard

fahreddinaykut/sparkaltbatteryboard

Reverse-engineered I2C/SMBus battery interface board for DJI Spark, replacing OEM smart battery with standard 3S LiPo. Includes protocol analysis,…

educationembedded-systems-securityfirmware-analysis+3

172 months ago

CVE-2020-8004

wuxx/cve-2020-8004

Exploit tool for CVE-2020-8004 targeting STM32F1 microcontrollers, enabling firmware extraction via OpenOCD and Python scripts to bypass readout…

embedded-systems-securityexploitationfirmware-analysis+3

256 years ago

doppelganger_assistant

tweathers-sec/doppelganger_assistant

Card calculator and Proxmark3 Plugin for writing and/or simulating every card type that Doppelgänger Community, Pro, Stealth, and MFAS support.

embedded-systems-securityencryption-decryption-toolshardware-hacking+5

349 months ago

CVE-2017-16778-Intercom-DTMF-Injection

breaktoprotect/cve-2017-16778-intercom-dtmf-injection

A coordinated disclosure and security advisory on Fermax Intercom DTML Injection vulneraiblity. Special thanks to Fermax International for prompt…

embedded-systems-securityexploitationhardware-hacking+6

226 years ago

ThrottleStopPoC

fxrstor/throttlestoppoc

CVE-2025-7771: Arbitrary physical memory and I/O port read/write via ThrottleStop driver

binary-exploitationexploitationhardware-hacking+4

181 year ago

nrf24-injection

xswxm/nrf24-injection

A tool set for sniffing devices and launching attacks with Crazyradio

exploitationhardware-hackingpenetration-testing+1

188 years ago

wch-ch56x-lib

hydrausb3/wch-ch56x-lib

Library for WCH CH56x-based boards with tested USB3/USB2/HSPI/SerDes drivers, logging and deferred interrupts

embedded-systems-securityfirmware-analysishardware-hacking+2

171 year ago

CVE-2024-42642

vl4dr/cve-2024-42642

Proof-of-concept exploits for three vulnerabilities in Crucial MX500 SSD firmware update mechanism, enabling buffer overflows and potential code…

binary-analysisembedded-systems-securityexploitation+5

142 years ago

lg-webos-kexec

ggfuchsi-oss/lg-webos-kexec

Boots a custom Linux kernel on rooted LG webOS TVs via kexec, with reverse-engineered SoC watchdog support, framebuffer payloads, and an initramfs…

embedded-systems-securityfirmware-analysishardware-hacking+2

71 month ago

pwnKit

drapl0n/pwnkit

USB Rubber Ducky payload that exploits CVE-2021-4034 to escalate privileges and spawn a root shell on Unix-like systems in under 10 seconds.

exploitationhardware-hackingpayload-development+3

114 years ago

Previous 1…345…12 Next