Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

50 results

android_kernel_xiaomi_sm8150

loukious/android_kernel_xiaomi_sm8150

Nethunter kernel for the POCO X3 Pro (vayu) based on crDroid's kernel.

android-securitymobile-securitynetwork-security+4

3 days ago

FolkPatch

lyravoid/folkpatch

Root access to the kernel can be achieved simply by patching the Boot partition for reflashing. This solution is based on a non-parallel extended…

android-securitymobile-securitypayload-development+3

1.3k3 days ago

apkstudio

vaibhavpandeyvpz/apkstudio

Open-source, cross platform Qt6 based IDE for reverse-engineering Android application packages. It features a friendly IDE-like layout including code…

android-securitybinary-analysisdebuggers+5

4.6k5 days ago

elegant-bouncer

msuiche/elegant-bouncer

ELEGANTBOUNCER is a detection tool for file-based mobile exploits.

binary-analysisdigital-forensicsios-security+4

1775 days ago

QCSuper

p1sec/qcsuper

QCSuper is a tool communicating with Qualcomm-based phones and modems, allowing to capture raw 2G/3G/4G radio frames, among other things.

embedded-systems-securitymemory-forensicsmobile-forensics+4

1.6k13 days ago

attack-stix-data

mitre-attack/attack-stix-data

STIX 2.1 collections of the MITRE ATT&CK knowledge base, providing adversary tactics and techniques for enterprise, mobile, and ICS threat…

curated-resourcesioc-managementmobile-security+4

70920 days ago

security-study-plan

jassics/security-study-plan

Complete Practical Study Plan to become a successful cybersecurity engineer based on roles like Pentest, AppSec, Cloud Security, DevSecOps and so…

api-securitycloud-securitycryptography+8

5.0k23 days ago

permhash

google/permhash

Framework for hashing declared permissions in Chromium extensions and APKs, enabling clustering, hunting, and pivoting across potentially malicious…

android-securitydigital-forensicshash-analysis+3

4526 days ago

mtk_bp

nccgroup/mtk_bp

Tools for analyzing and reverse engineering MediaTek baseband firmware, including file extraction, symbol parsing, and Ghidra integration for modem…

binary-analysisembedded-systems-securityfirmware-analysis+4

7626 days ago

vivo-root-build

sgswzglwlx/vivo-root-build

Builds a root exploit for vivo/iQOO devices targeting CVE-2026-43499, leveraging kernel techniques like KASLR bypass and CFI manipulation to achieve…

android-securitybinary-exploitationexploitation+5

1 month ago

APKHunt

cyber-buddy/apkhunt

Static code analysis tool for Android apps based on OWASP MASVS, detecting security vulnerabilities in APK files with low false-positive rates and…

android-securitycode-analysismobile-security+3

9751 month ago

cromite

uazo/cromite

Hardened Chromium/Bromite fork for Android, Windows and Linux with built-in ad blocking, anti-fingerprinting mitigations and privacy-focused patches.

android-securityanti-botfingerprint-spoofing+4

8.5k1 month ago

meizu21-ghostlock-root

ymh001/meizu21-ghostlock-root

MEIZU 21 locked-bootloader runtime root via CVE-2026-43499 and KernelSU late-load

android-securityexploitationmobile-app-pentesting+4

21 month ago

WireTapper

h9zdev/wiretapper

Passive wireless OSINT platform that detects and maps Wi-Fi, Bluetooth, CCTV, IoT devices, and cell towers using radio signal intelligence for…

bluetooth-securitydns-subdomain-enumerationembedded-systems-security+9

1.9k1 month ago

ghostlock-x200-root

xiaohj233/ghostlock-x200-root

GhostLock-X200 v1.0 - temporary root toolchain for vivo X200 (PD2415 / b57 kernel) based on CVE-2026-43499. For authorized security research only.

android-securitybinary-exploitationexploitation+5

12 months ago

ghostlock-h8q

slapah/ghostlock-h8q

GhostLock CVE-2026-43499 port for Galaxy Z Fold 8 (h8q)

android-securitybinary-exploitationexploitation+4

112 months ago

ghostlock-cve-2026-43499-4.19-k40

yijiacloud/ghostlock-cve-2026-43499-4.19-k40

CVE-2026-43499 (GhostLock) rtmutex remove_waiter() UAF local-root PoC adapted for Qualcomm Android 4.19 kernels (Redmi K40 / Snapdragon 870 class),…

android-securitybinary-exploitationexploitation+4

12 months ago

samsung-exynos-sms-stack-overflow-cve-2025-54328-critical-zero-click-baseband-rce

hunt-benito/samsung-exynos-sms-stack-overflow-cve-2025-54328-critical-zero-click-baseband-rce

Conceptual PoC for CVE-2025-54328, a critical zero-click stack buffer overflow in Samsung Exynos baseband firmware's SMS RP-DATA parser, enabling…

binary-exploitationeducationembedded-systems-security+5

14 months ago

Previous12 3 Next