Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

108 results

cve-2026-28576

aayushbankar/cve-2026-28576

PoC and red team app for CVE-2026-28576, a zero-permission SQL injection in the Android Contacts Provider enabling full contacts database…

android-securitydata-exfiltrationexploitation+6

3 days ago

iOS26.6-CVE-2026-64788

amorcool/ios26.6-cve-2026-64788

CVE-2026-64788 PoC — IOGPUFamily Use-After-Free (iOS 26.6 / 23G71)

binary-exploitationexploitationexploit-frameworks+3

122 days ago

iOS26.6-CVE-2026-65343

amorcool/ios26.6-cve-2026-65343

CVE-2026-65343 PoC — AppleKeyStore OOB read → KASLR defeat (iOS 26.6 / 23G71)

binary-exploitationexploitationexploit-frameworks+4

21 days ago

desc_race

b1n4r1b01/desc_race

iOS 15.1 kernel exploit POC for CVE-2021-30955

binary-exploitationexploitationexploit-frameworks+3

2694 years ago

frameworks_base_Aosp10_r33_CVE-2021-0595

pazhanivel07/frameworks_base_aosp10_r33_cve-2021-0595

Android framework patch for CVE-2021-0595, addressing a security vulnerability in the Android operating system.

android-securitymobile-securityvulnerability-analysis

4 years ago

frameworks_base_AOSP10_r33_CVE-2021-0705

trinadh465/frameworks_base_aosp10_r33_cve-2021-0705

Android framework patch for CVE-2021-0705, addressing a privilege escalation vulnerability in the Android operating system.

android-securityexploitationmobile-security+1

4 years ago

frameworks_av_AOSP10_r33_CVE-2021-0509

trinadh465/frameworks_av_aosp10_r33_cve-2021-0509

Android media framework vulnerability fix for CVE-2021-0509, addressing a use-after-free in audio flinger to prevent local privilege escalation.

android-securitybinary-analysisexploitation+2

4 years ago

CVE-2025-48595-Exploit

xiaobailovesstirring/cve-2025-48595-exploit

CVE-2025-48595 Android Framework Integer Overflow PoC - 优化版

android-securitybinary-exploitationexploitation+2

1 month ago

themis

cossacklabs/themis

Easy to use cryptographic framework for data protection: secure messaging with forward secrecy and secure data storage. Has unified APIs across 14…

authenticationcryptographydatabase-security+4

2.0k2 years ago

ipsw

blacktop/ipsw

iOS/macOS Research Swiss Army Knife

ai-assisted-reversingbinary-analysisdebuggers+9

3.7k13h 24m ago

internalblue

seemoo-lab/internalblue

Bluetooth experimentation framework for Broadcom and Cypress chips.

bluetooth-securityembedded-systems-securityfirmware-analysis+6

7902 years ago

permhash

google/permhash

Framework for hashing declared permissions in Chromium extensions and APKs, enabling clustering, hunting, and pivoting across potentially malicious…

android-securitydigital-forensicshash-analysis+3

459 months ago

mt6985-CVE-2026-43499

233laoliu/mt6985-cve-2026-43499

CVE-2026-43499 exploit adapter for MT6985 MediaTek Dimensity 9300 (vivo PD2241)

binary-exploitationexploitationexploit-frameworks+5

21 month ago

NoCameraSound

straight-tamago/nocamerasound

CVE-2022-46689

exploitationexploit-frameworksios-security+2

1301 year ago

sandy

donctl/sandy

Release of the sandy framework.

android-securitycryptographyencryption-decryption-tools+5

3911 years ago

Smartphone-Pentest-Framework

georgiaw/smartphone-pentest-framework

Repository for the Smartphone Pentest Framework (SPF)

android-securityeducationexploit-frameworks+3

4589 years ago

GeckoDroid

blacksnufkin/geckodroid

Android client for Adaptix C2 framework enabling remote agent management, interactive command shells, listener control, payload generation, and…

android-securitycommand-and-controlmobile-security+4

396 months ago

UnjailMe

mtjailed/unjailme

A sandbox escape based on the proof-of-concept (CVE-2018-4087) by Rani Idan (Zimperium)

binary-exploitationexploitationexploit-frameworks+7

828 years ago

Previous12 3 4 5 6 Next