Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

122 results

FlutterGuard

anasfik/flutterguard

Offline security audits for Flutter APKs on Android. Inspect permissions, SDKs, endpoints and potential secrets. No root, account, ads or analytics.

android-securitydefensive-toolsfingerprint-spoofing+7

1 day ago

harlogger

doronz88/harlogger

Simple utility for sniffing decrypted HTTP/HTTPS traffic on a macOS/iOS device (either jailbroken or not)

information-gatheringios-securitymobile-app-pentesting+5

1861 month ago

hackdroid

thehackingsage/hackdroid

Curated catalog of 364 Android pentesting and security APKs organized by category, covering forensics, MITM, sniffing, OSINT, wireless, and privacy…

android-securitycurated-resourcesforensics+8

1.1k2 years ago

AndroRAT

karma9874/androrat

A Simple android remote administration tool using sockets. It uses java on the client side and python on the server side

android-securitycommand-and-controldata-exfiltration+7

5.2k2 years ago

hexvero

maximilianfeix/hexvero

Know what changed inside your Electron release: diff two builds for IPC, preload, windows, fuses and hosts, with file:line. CLI, CI gate, MCP server.

ai-securityandroid-securitybinary-analysis+9

91 day ago

secbox

yv1ing/secbox

Conducting cybersecurity testing using the pi agent in a pre-built sandbox environment.

binary-exploitationctfdebuggers+9

19 days ago

JURIG

reverserid/jurig

a fully autonomous AI agent for reverse engineering

ai-assisted-reversingai-securityandroid-security+9

2422 days ago

jshookmcp

vmoranv/jshookmcp

A search-first, profile-aware reverse-engineering workspace for AI agents — 735 tools across 36 domains in one MCP server.

ai-securitybinary-analysisdebuggers+9

2.1k18h 9m ago

Vanadium

grapheneos/vanadium

Privacy and security hardened Chromium build providing the WebView and default browser for GrapheneOS, with OS-level hardening and compatibility…

android-securitydefensive-toolsgeneral-purpose-utilities+4

2.3k3 days ago

ABrake27

vvirei333/abrake27

iOS 27 kernelcache RE: SEP dispatch map, AMFI diff, Ghidra workflow

binary-analysiseducationexploitation+8

826 days ago

Gu3ssWeak

b4sith-sec/gu3ssweak

Deliberately vulnerable Android app for mobile security research and bug bounty practice - OWASP Mobile Top 10

android-securityctfeducation+7

121 month ago

ghostlock-app

ariyanpegu/ghostlock-app

GhostLock One-Tap Execution App (CVE-2026-43499)

android-securitybinary-analysisbinary-exploitation+8

1 month ago

Lenovo-TB365FC-GhostLock-CVE-2026-43499

wonjj6768/lenovo-tb365fc-ghostlock-cve-2026-43499

GhostLock (CVE-2026-43499) root + KernelSU LKM for the Lenovo TB365FC (ZUXOS / Android 16, kernel 5.15.170)

android-securitybinary-exploitationexploitation+6

11 month ago

DFRoot

a2333c/dfroot

Android root tool for Samsung Galaxy S25 Ultra (SM-S938B) that chains DirtyFrag CVE-2026-43284 and CVE-2026-43499 to gain root automatically at boot…

android-securityexploitationmobile-app-pentesting+7

91 month ago

PAGASUS-PRO

thakur2309/pagasus-pro

Python ADB-based Android device management and security audit toolkit with an interactive menu for root detection, permission dumps, debuggable app…

android-securitydata-exfiltrationeducation+8

5492 months ago

op13-cve-2026-64560

a23bc/op13-cve-2026-64560

Device-specific Android kernel exploit for CVE-2026-64560 on OnePlus 13 builds, providing temporary root via ADB shell with verified payloads and…

android-securitybinary-exploitationexploitation+8

151 month ago

opace6-cve-2026-64560

wangs-official/opace6-cve-2026-64560

Temporary root tool for OnePlus Ace 6 that exploits the CVE-2026-64560 Linux kernel POSIX CPU timer use-after-free to gain root until reboot, without…

android-securitybinary-exploitationexploitation+6

71 month ago

CVE-2025-21479-FX5P

diyiqiuye/cve-2025-21479-fx5p

Temporary root for OPPO Find X5 Pro (PFEM00) via CVE-2025-21479 + KernelSU LKM late-load (cloud-buildable)

android-securitybinary-exploitationexploitation+6

31 month ago

Previous12 3 4 5 6 7 Next