Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

91 results

cachegrab

nccgroup/cachegrab

a tool designed to help perform and visualize trace-driven cache attacks against software in the secure world of TrustZone-enabled ARMv8 cores

binary-analysisembedded-systems-securityexploitation+3

7 years ago

HardeningMeter

ofriouzan/hardeningmeter

HardeningMeter is an open-source Python tool carefully designed to comprehensively assess the security hardening of binaries and systems.

binary-analysisconfiguration-auditingdefensive-tools+3

661 year ago

sgxray

baiduxlab/sgxray

Automated reasoning tool based on the SMACK verifier that detects SGX enclave bugs from trusted boundary violations, including invalid pointer…

binary-analysisfuzzinghardware-security+2

435 years ago

CECster

nccgroup/cecster

A GUI-based tool to perform security testing against the HDMI CEC (Consumer Electronics Control) and HEC (HDMI Ethernet Channel) protocols

embedded-systems-securityfuzzinghardware-security+3

3112 years ago

signy

golioth/signy

Asymmetric cryptography library for generating signed URLs on embedded devices, enabling time-limited resource access using PSA Crypto API with…

authentication-authorizationcryptographyembedded-systems-security+3

705 months ago

crestron_getsudopwd

axcheron/crestron_getsudopwd

Tool to exploit CVE-2018-13341 and recover hidden account password on Crestron devices

embedded-systems-securityexploitationhardware-security+4

266 years ago

intel-me-research

jatinkapilaq1/intel-me-research

Talk to your Intel Management Engine directly — zero-dependency Python tool. Finds memory leaks, partition manifest, live MKHI probing. First public…

binary-analysisembedded-systems-securityfirmware-analysis+4

141 month ago

apxutil

finngineering/apxutil

A tool to manipulate Schneider Electric PLC archive files

binary-analysisembedded-systems-securityexploitation+5

117 months ago

cve-2024-21980-poc

freax13/cve-2024-21980-poc

Exploit for CVE-2024-21980 targeting AMD SEV firmware to decrypt arbitrary memory of decommissioned SEV-SNP guests via a command buffer enforcement…

binary-exploitationencryption-decryption-toolsexploitation+3

82 years ago

cve-2024-21978-poc

freax13/cve-2024-21978-poc

Exploit for AMD SEV-SNP firmware vulnerability CVE-2024-21978, enabling decryption of arbitrary guest memory via memory corruption of context pages.

binary-exploitationencryption-decryption-toolsexploitation+4

91 year ago

whisperpair-poc-tool

aalex954/whisperpair-poc-tool

A security research tool that identifies and demonstrates the CVE-2025-36911: Fast Pair Pairing Mode Bypass vulnerability

bluetooth-securityexploitationhardware-security+6

87 months ago

gpasskey

renich/gpasskey

Centralized, TPM 2.0 hardware-backed cryptographic identity enclave and multi-protocol bridge for Linux (FIDO2/CTAP2 WebAuthn Passkeys, OpenSSH…

authenticationcryptographyencryption-decryption-tools+2

2 days ago

cve-2023-31355-poc

freax13/cve-2023-31355-poc

Exploit for AMD SEV-SNP firmware vulnerability (CVE-2023-31355) that decrypts arbitrary memory of decommissioned guests by corrupting the UMC key…

binary-exploitationencryption-decryption-toolsexploitation+4

82 years ago

CVE-2024-54085

mr-zapi/cve-2024-54085

Just poc for CVE 2024-54085

authentication-authorizationembedded-systems-securityexploitation+5

21 year ago

hsm

devnw/zig/hsm

Zig Hardware Security Module library for PIV, CAC, and YubiKey tokens via PC/SC. Supports certificates, PIN management, signing, and decryption.

authenticationcryptographyencryption-decryption-tools+1

5 days ago

secretive

maxgoedjen/secretive

Protect your SSH keys with your Mac's Secure Enclave

authenticationencryption-decryption-toolshardware-security+2

8.9k8 days ago

OpenSC

opensc/opensc

Open source smart card tools and middleware. PKCS#11/MiniDriver

authenticationcryptographyencryption-decryption-tools+2

3.1k1 day ago

ChameleonUltra

rfidresearchgroup/chameleonultra

The new generation chameleon based on NRF52840 makes the performance of card emulation more stable. And gave the chameleon the ability to read,…

cryptographyembedded-systems-securityhardware-hacking+4

3.0k5 days ago

Previous 1 2 345 6 Next