Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

216 results

CVE-2026-14960-CVE-2026-14961

fzrsllasher/cve-2026-14960-cve-2026-14961

Technical advisory detailing two privilege escalation vulnerabilities (CVE-2026-14960, CVE-2026-14961) in the Pegatron TdeIo64 driver, enabling…

binary-exploitationexploitationhardware-security+2

1 month ago

cve-2015-1187-dir820l-firmware-reverse-engineering

christopher-leese/cve-2015-1187-dir820l-firmware-reverse-engineering

Static firmware reverse engineering of CVE-2015-1187: unauthenticated command injection in D-Link DIR-820L. MIPS root filesystem extraction with…

embedded-systems-securityexploitationfirmware-analysis+5

1 month ago

IOFireWireFamily-overflow

bazad/iofirewirefamily-overflow

CVE-2016-7608: Buffer overflow in IOFireWireFamily.

binary-exploitationexploitationfuzzing+2

29 years ago

CVE-2025-63602

d7ead/cve-2025-63602

Disclosure for CVE-2025-63602, including a PoC for use of an insecure driver in Awesome Miner 11.2.4 leading to arbitrary kernel read/write to MSRs,…

binary-exploitationexploitationhardware-security+2

39 months ago

Scalar-Venom-Attack

demining/scalar-venom-attack

Exploit and research repository analyzing CVE-2025-60013, a critical HSM initialization vulnerability enabling Bitcoin private key recovery via…

binary-exploitationcryptographydigital-forensics+8

39 months ago

samsung-exynos-sms-stack-overflow-cve-2025-54328-critical-zero-click-baseband-rce

hunt-benito/samsung-exynos-sms-stack-overflow-cve-2025-54328-critical-zero-click-baseband-rce

Conceptual PoC for CVE-2025-54328, a critical zero-click stack buffer overflow in Samsung Exynos baseband firmware's SMS RP-DATA parser, enabling…

binary-exploitationeducationembedded-systems-security+5

12 months ago

CVE-2026-56111

christbowel/cve-2026-56111

Proof-of-concept exploit for CVE-2026-56111, an out-of-bounds write in the M421 G-code handler of Marlin Firmware, demonstrating constrained memory…

binary-exploitationembedded-systems-securityexploitation+3

12 months ago

CVE-2024-31964

d-raco/cve-2024-31964

Proof-of-concept exploit for CVE-2024-31964, a temporary authentication bypass in Mitel 6900w Series SIP phones allowing unauthenticated POST…

authenticationexploitationhardware-security+4

21 year ago

CVE-2022-32932

ox1111/cve-2022-32932

Technical analysis and proof-of-concept for CVE-2022-32932, a double fetch vulnerability in Apple's ANE kernel driver leading to out-of-bounds write…

binary-exploitationexploitationhardware-security+3

22 years ago

cve-2018-9995

mesutozsoycom/cve-2018-9995

exploit camera with vuln cve-2018-9995 ( Novo, CeNova, QSee, Pulnix, XVR 5 in 1 (title: "XVR Login"), Securus, - Security. Never Compromise !! - …

exploitationhardware-securityiot-security+2

18 years ago

CVE-2021-3438

crackercat/cve-2021-3438

A potential buffer overflow in the software drivers for certain HP LaserJet products and Samsung product printers could lead to an escalation of…

binary-exploitationexploitationhardware-security+2

13 years ago

CVE-2024-29404_Razer

mansk1es/cve-2024-29404_razer

Proof-of-concept exploit for CVE-2024-29404, demonstrating elevation of privilege in Razer Synapse 3 via arbitrary file/folder removal during Chroma…

exploitationhardware-securityprivilege-escalation+1

11 year ago

CVE-2023-34924

chrisl0tus/cve-2023-34924

Proof-of-concept exploit for a buffer overflow vulnerability in H3C Magic B1STW router's SetAPInfoById function, causing web service crash and…

binary-exploitationembedded-systems-securityexploitation+3

13 years ago

CVE-2023-40289

s-hamann/cve-2023-40289

Exploit for CVE-2023-40289, a command injection vulnerability in several Baseband Management Controllers (BMC) by with firmware by ATEN

command-and-controlembedded-systems-securityexploitation+3

111 months ago

PcanExploit

bertoldvdb/pcanexploit

CVE-2024-44610: Authenticated remote root exploit in Peak PCAN-Ethernet CAN-(FD) gateways

command-and-controlembedded-systems-securityexploitation+3

11 year ago

CVE-2023-48034

aprkr/cve-2023-48034

Weak encryption in Acer Wireless Keyboard SK-9662 allows attacker in physical proximity to both decrypt wireless keystrokes and inject wireless…

bluetooth-securitycryptographyembedded-systems-security+6

12 years ago

cve-2025-2082-POV

shirabo/cve-2025-2082-pov

Proof-of-Concept for CVE-2025-2082, demonstrating function pointer overwrite via signed-to-unsigned integer conversion bug in Tesla VCSEC, leading to…

binary-exploitationembedded-systems-securityexploitation+4

11 year ago

cve-2023-31346-poc

freax13/cve-2023-31346-poc

Proof-of-concept demonstrating memory leaks in AMD SEV-SNP firmware guest message headers and CPUID request, enabling extraction of sensitive guest…

binary-exploitationexploitationfirmware-analysis+3

13 years ago

Previous 1…345…12 Next