Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

15 results

moria

nmatt0/moria

IoT firmware identification and extraction

binary-analysisdigital-forensicsembedded-systems-security+7

3882 days ago

firmware-analysis-toolkit

attify/firmware-analysis-toolkit

Firmware security research platform combining binary analysis, taint tracing, and emulation across IoT, edge AI, mobile devices, and robotics.

binary-analysiseducationembedded-systems-security+4

1.6k10 days ago

CVE-2026-56718

hellkkid/cve-2026-56718

AJCloud AJY IPC Firmware Path Traversal via jdbhttpd

embedded-systems-securityexploitationiot-security+3

1 month ago

PrecIR

furrtek/precir

Open-source hardware and software toolkit for reverse-engineering and communicating with infrared-based electronic shelf labels. Includes custom…

embedded-systems-securityfirmware-analysishardware-hacking+5

4587 months ago

EvilCrowRF_Custom_Firmware_CC1101_FlipperZero

h-rat/evilcrowrf_custom_firmware_cc1101_flipperzero

This firmware is an alternative to the EvilCrowRF default firmware. Module: CC1101 - Compatible Flipper Zero file.

embedded-systems-securityhardware-hackinghardware-iot-security+5

6042 years ago

Archived

trommel

certcc/trommel

TROMMEL: Sift Through Embedded Device Files to Identify Potential Vulnerable Indicators

embedded-systems-securityfirmware-analysishardware-security+6

2136 years ago

mud-visualizer

iot-onboarding/mud-visualizer

mud-visualizer is a tool to visualize MUD files

configuration-auditingiot-securitynetwork-security

104 years ago

Hikvision-CVE-2017-7921-decryptor

lastvocher/hikvision-cve-2017-7921-decryptor

Decrypts Hikvision IP camera configuration files extracted via CVE-2017-7921 authentication bypass, recovering user credentials from weakly encrypted…

encryption-decryption-toolsexploitationiot-security+3

0 years ago

hikvision_CVE-2017-7921_auth_bypass_config_decryptor

p4tq/hikvision_cve-2017-7921_auth_bypass_config_decryptor

Decrypts Hikvision IP camera configuration files extracted via CVE-2017-7921 authentication bypass, revealing user credentials and device settings.

encryption-decryption-toolsexploitationinformation-gathering+3

4 years ago

CVE-2025-41656

wallyschag/cve-2025-41656

This repository includes the code and files needed to test and execute a PoC for CVE-2025-41656

educationexploitationiot-security+3

211 months ago

zyxel-cve-2021-35036-super-admin-password-leak

minanagehsalalma/zyxel-cve-2021-35036-super-admin-password-leak

Zyxel super-admin credential exposure write-up across CPE/ONT/LTE/5G firmware, with an adapted VMG8825-B50B genpass lab.

educationembedded-systems-securityexploitation+5

34 months ago

CVE-2024-1303---Badgermeter-moni-tool-Path-Traversal

guillermogm4/cve-2024-1303---badgermeter-moni-tool-path-traversal

Proof-of-concept exploit for CVE-2024-1303, a path traversal vulnerability in Badger Meter's moni:tool that allows authenticated attackers to…

exploitationinformation-gatheringiot-security+3

2 years ago

CVE-2021-3310

piffd0s/cve-2021-3310

Western Digital MyCloud PR4100 Link Resolution Information Disclosure Vulnerability

embedded-systems-securityexploitationinformation-gathering+2

15 years ago

Quiksand-CVE-2023-24012

safelock-d2e/quiksand-cve-2023-24012

Proof-of-concept demonstrating a permission bypass in ROS 2 SROS2 security framework, allowing unauthorized topic subscription via modified…

embedded-systems-securityexploitationiot-security+3

27 months ago

CVE-2017-7921-EXP

inj3ction/cve-2017-7921-exp

Exploit for CVE-2017-7921 targeting Hikvision devices with improper authentication. Retrieves user lists, camera snapshots, and configuration files…

exploitationinformation-gatheringiot-security+3

3 years ago