Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

453 results

mp-flipper

ofabel/mp-flipper

Python support for Flipper Zero

embedded-systems-securityiot-securityscripting-automation+1

181

1 year ago

CVE-2025-34037

taxanehh/cve-2025-34037

Python port of the Linksys tmUnblock.cgi RCE exploit

command-and-controleducationembedded-systems-security+4

5 months ago

CVE-2022-28906-POC

finnvle/cve-2022-28906-poc

Python proof-of-concept for unauthenticated OS command injection in TOTOLINK N600R, exploiting the langType parameter to execute arbitrary commands…

command-and-controlexploitationhardware-iot-security+3

112 days ago

CVE-2024-54887-PoC

gumbraise/cve-2024-54887-poc

TypeScript PoC for CVE-2024-54887 (TP-Link TL-WR940N authenticated RCE)

exploitationhardware-iot-securityiot-security+4

3 months ago

XM_ONVIF_auth_bypass

kostasereksonas/xm_onvif_auth_bypass

Proof-of-concept code (Bash and Python) for CVE-2025-65856 where ONVIF implementation in in Xiongmai XM530 IP cameras allows for unauthenticated …

exploitationhardware-iot-securityiot-security+3

26 months ago

thingernet-graph

nccgroup/thingernet-graph

Python script to generate neo4j Cypher representation of a collection of IoT devices for visualisation and query.

embedded-systems-securityinformation-gatheringiot-security+3

79 years ago

Sweet-Pineapple-Builder

0xsamy/sweet-pineapple-builder

Build your own custom WiFi Pineapple Tetra firmware tailored to any based MIPS 24Kc architecture router. (WiFi Pineapple Tetra DIY)

embedded-systems-securityfirmware-analysishardware-security+4

394 years ago

Archived

CVE-2020-8958

qurbat/cve-2020-8958

Proof of concept for arbitrary OS command execution on Guangzhou/V-SOL 1GE ONU devices (CVE-2020-8958)

embedded-systems-securityexploitationhardware-iot-security+3

75 years ago

CVE-2026-0101-BLE-Address-Spoofing-via-Weak-Resolvable-Private-Address

george0papasotiriou/cve-2026-0101-ble-address-spoofing-via-weak-resolvable-private-address

Python PoC for CVE-2026-0101 demonstrating BLE address spoofing via replay of a captured Resolvable Private Address to impersonate a trusted…

adversarial-attackbluetooth-securityeducation+3

1 month ago

scapy

secdev/scapy

Python-based interactive packet manipulation library for forging, decoding, sending, capturing, and analyzing network packets across a wide range of…

bluetooth-securitycryptographydata-exfiltration+23

12.5k13h 48m ago

CVE-2022-45701

geniuszly/cve-2022-45701

it is script designed to exploit certain vulnerabilities in routers by sending payloads through SNMP (Simple Network Management Protocol). The script…

educationexploitationiot-security+6

52 years ago

CVE-2021-36260-hikvision

shubtheone/cve-2021-36260-hikvision

Python exploit for CVE-2021-36260 command injection in Hikvision web servers. Supports safe/unsafe vulnerability verification, remote command…

command-and-controlexploitationiot-security+3

7 months ago

HomePWN

telefonica/homepwn

HomePwn - Swiss Army Knife for Pentesting of IoT Devices

bluetooth-securityexploitationhardware-iot-security+5

9325 years ago

laf

ioactive/laf

This project intends to provide a series of tools to craft, parse, send, analyze and crack a set of LoRaWAN packets in order to audit or pentest the…

cryptographyexploitationfuzzing+5

1884 years ago

HikPwn

4n4nk3/hikpwn

HikPwn, a simple scanner for Hikvision devices with basic vulnerability scanning capabilities written in Python 3.8.

exploitationinformation-gatheringiot-security+2

1304 years ago

expliot

expliot_framework/expliot

EXPLIoT - Internet of Things Security Testing and Exploitation framework

exploitationexploit-frameworkshardware-iot-security+2

994 months ago

GPON-LOADER

choudai/gpon-loader

Exploit loader for Remote Code Execution w/ Payload on GPON Home Gateway devices (CVE-2018-10562) written in Python.

exploitationiot-securitypayload-generation+3

28 years ago

FOFA-API-Threaded-Searcher

jenderal92/fofa-api-threaded-searcher

Multi‑threaded Python tool to query FOFA API, extract custom fields (IP, port, cert, TLS, etc.), deduplicate results, and resume interrupted searches.

information-gatheringiot-securityosint+1

3 months ago

Previous12…26 Next