Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
427 results
BlueSpy preview

BlueSpy

GitHubtarlogicsecurity/bluespy

PoC to record audio from a Bluetooth device

bluetooth-securityexploitationhardware-iot-security+3
1.6k
4 months ago
CVE-2022-30114 preview

CVE-2022-30114

GitHubstr0ng4le/cve-2022-30114

Proof-of-concept exploit for CVE-2022-30114, a heap-based buffer overflow in Fastweb FastGate routers. Sends a crafted HTTP Authorization header to…

binary-exploitationexploitationiot-security+3
3 years ago
scan-for-webcams preview

scan-for-webcams

GitHubjettchent/scan-for-webcams

scan for webcams on the internet

information-gatheringiot-securityosint+2
2722 years ago
urgent11-detector preview

urgent11-detector

GitHubarmissecurity/urgent11-detector

URGENT/11 detection tool by Armis

embedded-systems-securityinformation-gatheringiot-security+5
646 years ago
Dorset_SmartLock_Vulnerability preview

Dorset_SmartLock_Vulnerability

GitHubabhijithaj/dorset_smartlock_vulnerability

This repository is for Dorset_SmartLock_vulnerability. CVE-2025-25650 is suggested by MITRE which is yet to confirm.

embedded-systems-securityexploitationhardware-security+3
1 year ago
CVE-2022-28906-POC preview

CVE-2022-28906-POC

GitHubfinnvle/cve-2022-28906-poc

Python proof-of-concept for unauthenticated OS command injection in TOTOLINK N600R, exploiting the langType parameter to execute arbitrary commands…

command-and-controlexploitationhardware-iot-security+3
121 days ago
eWeLink-QR-Code preview

eWeLink-QR-Code

GitHubsalgio/ewelink-qr-code

This repo describes a vulnerability affecting the QR code based pairing process of the eWeLink IoT devices (CVE-2020-12702).

cryptographyexploitationhardware-iot-security+3
15 years ago
apparatus preview
Archived

apparatus

GitHubor3stis/apparatus

A graphical security analysis tool for IoT networks

iot-securitynetwork-securityvulnerability-analysis
1997 years ago
HikPasswordHelper preview

HikPasswordHelper

GitHubbp2008/hikpasswordhelper

A tool which exploits a backdoor in Hikvision camera firmwares circa 2014-2016 to help the owner change a forgotten password.

embedded-systems-securityexploitationhardware-security+2
2686 years ago
Xiaomi-C200-Firmware-Analysis preview

Xiaomi-C200-Firmware-Analysis

GitHubh3xdum/xiaomi-c200-firmware-analysis

From UART to Root: Breaking Into the Xiaomi C200 via U-Boot

data-recoveryembedded-systems-securityexploitation+6
119 months ago
CVE-2026-2222-MQTT-Broker-CONNECT-Packet-Heap-Overflow preview

CVE-2026-2222-MQTT-Broker-CONNECT-Packet-Heap-Overflow

GitHubgeorge0papasotiriou/cve-2026-2222-mqtt-broker-connect-packet-heap-overflow

Demonstrates CVE-2026-2222 heap overflow in MQTT CONNECT packet handling with a simulated vulnerable broker and proof-of-concept exploit code for…

binary-exploitationeducationexploitation+2
1 month ago
sonos preview

sonos

GitHubblasty/sonos

Exploit and tooling for Amlogic-based Sonos devices: dumps OTP/eFUSE via an EL3 exploit, extracts LUKS decryption keys, and fetches/decrypts OTA…

embedded-systems-securityencryption-decryption-toolsexploitation+5
643 years ago
CVE-2025-45512 preview

CVE-2025-45512

GitHubazhariramadhan/cve-2025-45512

Proof-of-concept exploit suite for U-Boot bootloader vulnerabilities, including insecure update mechanisms, hardcoded credentials, debugging…

embedded-systems-securityexploitationfirmware-analysis+5
21 year ago
CVE-2026-12485 preview

CVE-2026-12485

GitHub0xblackash/cve-2026-12485

CVE-2026-12485

binary-exploitationeducationembedded-systems-security+4
12 months ago
CVE-2025-69821-Beat-XP-Vega-Smartwatch-Security-Assessment preview

CVE-2025-69821-Beat-XP-Vega-Smartwatch-Security-Assessment

GitHubcipherx1802/cve-2025-69821-beat-xp-vega-smartwatch-security-assessment

A security assessment of the Beat XP VEGA Smartwatch (Firmware RB303ATV006229) focused on Bluetooth Low Energy (BLE) connectivity revealed a design…

bluetooth-securityembedded-systems-securityexploitation+6
5 months ago
CVE-2021-4045 preview

CVE-2021-4045

GitHub234329a423853/cve-2021-4045

CVE-2021-4045 CVE-2021-4045 is a Command Injection vulnerability that allows Remote Code Execution in the TP-Link Tapo c200 IP camera. It affects all…

embedded-systems-securityexploitationfirmware-analysis+3
19 months ago
RTSPbrute preview

RTSPbrute

GitLabwoolf/rtspbrute

Tool for RTSP that brute-forces routes and credentials, makes screenshots!

information-gatheringiot-securitypassword-attacks+1
275 years ago
CVE-2018-9995-ModifiedByGwolfs preview

CVE-2018-9995-ModifiedByGwolfs

GitHubtateydq/cve-2018-9995-modifiedbygwolfs

Exploit for CVE-2018-9995 to retrieve DVR credentials via directory traversal, with two methods for educational use.

educationexploitationiot-security+3
7 years ago
Previous1234…24Next