Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

469 results

nyawit

xsanflip/nyawit

Converts DuckyScript and Bash Bunny payloads into optimized Flipper Zero BadUSB injection scripts with keyboard layout selection, AV obfuscation, and…

hardware-hackinghardware-iot-securityids-ips-evasion+4

9 months ago

carminat-tomtom-live-re

andronedev/carminat-tomtom-live-re

Reverse engineering du NavCore 9.884 embarqué Renault (codename beaumont)

binary-analysisdynamic-analysis-sandboxingembedded-systems-security+5

16 months ago

DANGDUT

xsanflip/dangdut

Passive wireless intrusion detection system for ESP32-S3 and Flipper Zero that detects Wi-Fi deauthentication and disassociation attacks in real…

defensive-toolsembedded-systems-securityhardware-hacking+6

31 month ago

synology-nas-cli

aa22396584/synology-nas-cli

nas: a zero-dependency Python CLI + MCP server for Synology DSM 7. One-command audit and fix for the C3RB3R / .L0CK3D ransomware campaign; hand it to…

ai-securityauthenticationconfiguration-auditing+9

3 days ago

ZTE-MF904Q-Reverse-Engineering

faicalom/zte-mf904q-reverse-engineering

Open research documentation and source review for ZTE MF904Q bootloader, firmware extraction, and reverse engineering.

android-securitybinary-analysisembedded-systems-security+5

5 days ago

esp8266-injection-example

pulkin/esp8266-injection-example

Example project to demonstrate packet injection / sniffer capabilities of ESP8266 IC.

embedded-systems-securityexploitationhardware-hacking+6

3686 years ago

esp32-sniffer

ets-polito/esp32-sniffer

ESP32 firmware that sniffs PROBE REQUEST packets sent by smartphones searching for Wi-Fi connection to extract different types of information

embedded-systems-securityhardware-iot-securityinformation-gathering+5

3282 years ago

edk2-security

lukr54/edk2-security

EDK2 BrotliCustomDecompressLib security findings — coordinated disclosure

binary-exploitationembedded-systems-securityexploitation+5

7 days ago

xmir-patcher

openwrt-xiaomi/xmir-patcher

Patches Xiaomi router firmware images to enable SSH access and install custom firmware, with automated Windows and Linux/macOS launcher scripts.

embedded-systems-securityexploitationfirmware-analysis+4

3.7k6 days ago

samsung_tizen_tv_root

commit-regrets/samsung_tizen_tv_root

Research toolkit that roots a Samsung Tizen 9 TV via a Chromium WasmGC RCE and V4L2 physmap arbitrary physical memory access, with persistent on-boot…

binary-exploitationembedded-systems-securityexploitation+8

156 days ago

WonderLanternZ7

tylermcm/wonderlanternz7

Experimental Nikon Z7 camera firmware research lab: source patcher, QEMU emulation harness, and validation tooling for building and testing modified…

binary-analysisdynamic-analysis-sandboxingembedded-systems-security+5

17 days ago

flipperzero

zarcolio/flipperzero

This repo contains my own Ducky/BadUSB scripts, related PowerShell scripts and other Flipper Zero related stuff.

data-exfiltrationeducationhardware-hacking+7

5111 year ago

p2pwn

thebadinteger/p2pwn

Dahua cameras security scanner via P2P

exploitationhardware-iot-securityinformation-gathering+6

567 days ago

mtk-imei-switcheroo

alltechdev/mtk-imei-switcheroo

Read and write IMEI records and WiFi/Bluetooth addresses in MediaTek NVRAM files or partition images. Includes interactive ADB tools for rooted…

android-securityembedded-systems-securityfirmware-analysis+5

3119 days ago

Esp32-Blue-Ducky

tonixtoolkitofficial-afk/esp32-blue-ducky

ESP32 firmware that emulates a Bluetooth HID keyboard to auto-pair with Android phones and inject scripted keystrokes for authorized security testing.

bluetooth-securityembedded-systems-securityhardware-hacking+5

28 days ago

Robotics-Security-Testing-Guide

owasp/robotics-security-testing-guide

OWASP guide defining a standardized penetration testing methodology for humanoid, industrial, and autonomous robots, covering ROS/ROS2, DDS, CAN bus,…

ai-securitycurated-resourceseducation+7

14 days ago

mali-pagecache-root

c4psu13/mali-pagecache-root

TCL 50C721 (RTD1319 / Mali-G31) root toolkit — autonomous CVE-2022-22706 exploit chain

android-securitybinary-exploitationembedded-systems-security+7

46 days ago

MarauderBox

rianhanft/marauderbox

A fork of the marauder firmware with Nyan box capabilities

bluetooth-securityembedded-systems-securityfirmware-analysis+5

26 days ago

Previous12…27 Next