Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
902 results
JADXecute preview

JADXecute

GitHublauriewired/jadxecute

JADX-gui scripting plugin for dynamic decompiler manipulation

android-securitycode-analysisdebuggers+6
7512 years ago
BogusMips preview

BogusMips

GitHubjankammerath/bogusmips

Forensic analytics for disassembly, reassembly, reverse engineering and auditing of Android apps

ai-assisted-reversingandroid-securitybinary-analysis+8
42 days ago
FlutterGuard preview

FlutterGuard

GitHubanasfik/flutterguard

Offline security audits for Flutter APKs on Android. Inspect permissions, SDKs, endpoints and potential secrets. No root, account, ads or analytics.

android-securitydefensive-toolsfingerprint-spoofing+7
302 days ago
CVE-2026-0073 preview

CVE-2026-0073

GitHub0xredash/cve-2026-0073

C++ proof-of-concept checker and exploit for CVE-2026-0073, an Android Wireless ADB authentication bypass allowing unauthenticated remote shell…

android-securityauthenticationexploitation+4
56 months ago
smsofdeath preview

smsofdeath

GitHubmarkblah/smsofdeath

Android PoC app that sends a malformed 8-byte WAP Push PDU over SMS to crash com.android.phone remotely, silently dropping calls on the target…

android-securityexploitationmobile-app-pentesting+3
35 days ago
JNISleuth-MCP preview

JNISleuth-MCP

GitHubnighthawkk/jnisleuth-mcp

Automated Android JNI RegisterNatives recovery, stripped ARM64 .so type reconstruction, OLLVM BR X8 deobfuscator, and universal LLM/MCP bridge for…

ai-assisted-reversingandroid-securitybinary-analysis+5
26 days ago
ArpCut preview

ArpCut

GitLabfengguan/arpcut

Rooted Android app that scans LAN devices and cuts or restores their network access via ARP spoofing, with OUI vendor lookup, whitelist, and…

android-securityinformation-gatheringmobile-security+5
6 days ago
Charles-Proxy-Mobile-Guide preview

Charles-Proxy-Mobile-Guide

GitHubthyrlian/charles-proxy-mobile-guide

Step-by-step guide to intercepting Android and iOS HTTP/HTTPS traffic with Charles Proxy, covering SSL proxying, CA certificate installation, and…

android-securityeducationios-security+6
1568 years ago
Telegram-0-Click-RCE-SECURITY-VULNERABILITY-ANALYSIS-REPORT preview

Telegram-0-Click-RCE-SECURITY-VULNERABILITY-ANALYSIS-REPORT

GitHubgameworkerkim/telegram-0-click-rce-security-vulnerability-analysis-report

I have submitted a report on the Telegram sticker vulnerability, SECURITY VULNERABILITY ANALYSIS REPORT Telegram 0-Click RCE vulnerability…

android-securityexploitationincident-response+4
27 months ago
CVE-2026-0073 preview

CVE-2026-0073

GitHubumarrehmansiddiqui/cve-2026-0073

Proof-of-concept exploit for an Android adbd Wireless Debugging TLS auth bypass, using an EC/RSA key type mismatch to obtain an unauthenticated…

android-securityauthenticationcryptography+5
18 days ago
mtk-imei-switcheroo preview

mtk-imei-switcheroo

GitHuballtechdev/mtk-imei-switcheroo

Read and write IMEI records and WiFi/Bluetooth addresses in MediaTek NVRAM files or partition images. Includes interactive ADB tools for rooted…

android-securityembedded-systems-securityfirmware-analysis+5
3119 days ago
CVE-2026-0073-Android-ADBD-bypass-POC preview

CVE-2026-0073-Android-ADBD-bypass-POC

GitHubxqi1337/cve-2026-0073-android-adbd-bypass-poc

CVE-2026-0073 — Android ADB daemon (adbd) TLS authentication bypass via EVP_PKEY_cmp type confusion. Gain unauthorized shell access over WiFi using…

android-securityauthenticationcryptography+4
6 months ago
SudoStamp preview

SudoStamp

GitLabritwick7/sudostamp

Approve sudo on a Linux workstation with a fingerprint on your Android phone. LAN only; the ECDSA key never leaves the phone's TEE and speaks the…

android-securityauthenticationauthentication-authorization+5
9 days ago
CVE-2026-0006-step-2 preview

CVE-2026-0006-step-2

GitHubr3n3r0/cve-2026-0006-step-2

Research package demonstrating a leak-assisted ROP chain in Android media.swcodec via the CVE-2026-0006 APV decoder heap overflow, with payload…

android-securitybinary-exploitationexploitation+5
14 days ago
nmmp preview

nmmp

GitHubmaoabc/nmmp

dex-vm used to protect the android classes.dex file

android-securitybinary-analysiscode-analysis+5
1.2k1 year ago
hermit preview

hermit

GitHubxv4l3x/hermit

Inspects, decompiles and structurally patches Hermes bytecode (HBC) from React Native apps, with a GDB-style REPL, CFG, decompiler and re-serializing…

android-securitybinary-analysiscode-analysis+7
720 days ago
seclab-taskflows preview

seclab-taskflows

GitHubgithubsecuritylab/seclab-taskflows

Example AI-agent taskflows and MCP servers for auditing source code, triaging issues, and detecting vulnerabilities across web, Android, and iOS…

ai-assisted-reversingai-securityandroid-security+8
8913 days ago
bromite preview

bromite

GitHubbromite/bromite

Android Chromium fork with built-in ad blocking, anti-fingerprinting mitigations, DNS-over-HTTPS, and hardened privacy and security defaults.

android-securityanti-botdefensive-tools+7
6.3k2 years ago
Previous12…51Next