Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

226 results

wyze-bulb-color-pwned

nickdaria/wyze-bulb-color-pwned

No-open firmware exploit for the Wyze WLPA19CV2 color bulb

embedded-systems-securityexploitationfirmware-analysis+4

2 months ago

rcm-modchips

reswitched/rcm-modchips

Collection of "modchip" designs for launching payloads via the Tegra RCM bug (CVE-2018-6242)

embedded-systems-securityexploitationhardware-hacking+3

218 years ago

CVE-2026-40003

rva3/cve-2026-40003

Exploit for CVE-2026-40003, an arbitrary memory write vulnerability in ZXIC/Sanechips ZX297520V3 SoC BootROM, enabling code execution via USB…

binary-exploitationembedded-systems-securityexploitation+4

165 months ago

wch-ch56x-lib

hydrausb3/wch-ch56x-lib

Library for WCH CH56x-based boards with tested USB3/USB2/HSPI/SerDes drivers, logging and deferred interrupts

embedded-systems-securityfirmware-analysishardware-hacking+2

161 year ago

CVE-2024-42642

vl4dr/cve-2024-42642

Proof-of-concept exploits for three vulnerabilities in Crucial MX500 SSD firmware update mechanism, enabling buffer overflows and potential code…

binary-analysisembedded-systems-securityexploitation+5

142 years ago

lg-webos-kexec

ggfuchsi-oss/lg-webos-kexec

Boots a custom Linux kernel on rooted LG webOS TVs via kexec, with reverse-engineered SoC watchdog support, framebuffer payloads, and an initramfs…

embedded-systems-securityfirmware-analysishardware-hacking+2

92 months ago

iBSSloader

teutekeune/ibssloader

Research tooling to boot Linux on iPad mini 1 via checkm8, patched iBSS/iBEC, and custom bare-metal payloads, including device tree port, kernel…

embedded-systems-securityexploitationfirmware-analysis+3

72 months ago

ch55x_firmware_extractor

finngineering/ch55x_firmware_extractor

Firmware extractor for CH55x microprocessors

embedded-systems-securityexploitationfirmware-analysis+4

1210 months ago

Esp32-Blue-Ducky

tonixtoolkitofficial-afk/esp32-blue-ducky

ESP32 firmware that emulates a Bluetooth HID keyboard to auto-pair with Android phones and inject scripted keystrokes for authorized security testing.

bluetooth-securityembedded-systems-securityhardware-hacking+5

28 days ago

Vision-MSI-Thermal-Control

sunrayvision/vision-msi-thermal-control

MSI Modern 15H AI C1MGT-096IT Linux thermal management - Reverse engineered EC control with fan profiles and battery threshold

embedded-systems-securityfirmware-analysishardware-hacking+3

611 months ago

SymaX5SW-Rx-Tx

infobyte/symax5sw-rx-tx

Syma X5SW Telemetry and Transmissor

embedded-systems-securityhardware-hackingiot-security+3

47 years ago

Zhilly

sacriphanius/zhilly

🛡️ AI-powered portable cybersecurity & pentesting assistant built on ESP32-S3 (LilyGO T-Embed CC1101 & T-Watch S3). Features voice-controlled RF…

embedded-systems-securityhardware-hackingiot-security+6

13 months ago

tapo-c260-rce

l0lsec/tapo-c260-rce

PoC exploit chain for TP-Link Tapo C260 camera — CVE-2026-0651/0652/0653. Research by @spaceraccoon.

command-and-controlembedded-systems-securityexploitation+7

28 months ago

esp32-cve-2025-27840-power-trace-experiment

jasonw88/esp32-cve-2025-27840-power-trace-experiment

Firmware for getting a power trace of the behavior of the bluetooth module on the ESP32 when the ESP32 is sent the undocumented hci bluetooth…

bluetooth-securityembedded-systems-securityhardware-hacking+2

2 months ago

CVE-2025-45512

azhariramadhan/cve-2025-45512

Proof-of-concept exploit suite for U-Boot bootloader vulnerabilities, including insecure update mechanisms, hardcoded credentials, debugging…

embedded-systems-securityexploitationfirmware-analysis+5

21 year ago

CVE-2026-22013-Hardware-Wallet-USB-Descriptor-Buffer-Overflow

george0papasotiriou/cve-2026-22013-hardware-wallet-usb-descriptor-buffer-overflow

Stack buffer overflow PoC for a hardware wallet USB descriptor parser (CVE-2026-22013), showing return-address overwrite and code execution via…

binary-exploitationembedded-systems-securityexploitation+3

13 months ago

CVE-2021-4045

kaleth4/cve-2021-4045

Command injection exploit for TP-Link Tapo C200 camera (CVE-2021-4045) providing root shell access via UART and reverse-engineered uhttpd binary…

command-and-controlembedded-systems-securityexploitation+6

4 months ago

CVE-2023-48034

aprkr/cve-2023-48034

Weak encryption in Acer Wireless Keyboard SK-9662 allows attacker in physical proximity to both decrypt wireless keystrokes and inject wireless…

bluetooth-securitycryptographyembedded-systems-security+6

12 years ago

Previous 1…567…13 Next