Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

112 results

CVE-2021-43530-UXSS-On-QRcode-Reader-

hfh86/cve-2021-43530-uxss-on-qrcode-reader-

Proof-of-concept for CVE-2021-43530, a Universal XSS vulnerability in Firefox for Android caused by improper URL sanitization when processing QR code…

android-securityexploitationmobile-security+2

5 months ago

ZygoteExploitDemo

gitamans/zygoteexploitdemo

Educational demonstration of CVE-2024-31317 Zygote Injection Vulnerability on Android

android-securitybinary-exploitationeducation+7

28 months ago

CVE-2026-27280

r3n3r0/cve-2026-27280

In-depth analysis and proof-of-concept for CVE-2026-27280, an out-of-bounds write in Adobe DNG SDK's dng_render_task::ProcessArea, reachable via…

android-securitybinary-exploitationexploitation+5

12 months ago

CVE-2026-43655-AppleM2ScalerCSCDriver-UAF

somisomair/cve-2026-43655-applem2scalercscdriver-uaf

Public disclosure for CVE-2026-43655 AppleM2ScalerCSCDriver use-after-free

binary-exploitationexploitationhardware-security+4

4 months ago

android_kernel_oneplus_avicii

kimocoder/android_kernel_oneplus_avicii

OnePlus Nord (avicii) NeverSettle Kernel Source

android-securitymobile-securitynetwork-security+2

211 months ago

DroneCamera

mretallack/dronecamera

Drone HASAKEE FPV video app for Android

educationembedded-systems-securityfirmware-analysis+5

7 months ago

CVE-2024-0044-EXP

kai2er/cve-2024-0044-exp

利用CVE-2024-0044 在Android12、13 没有root'下进行数据备份用法./CVE-2024-0044-EXP.sh <package_name>

android-securitydata-exfiltrationexploitation+3

2 years ago

CVE-2017-13286

umvfx1bvaw50/cve-2017-13286

CVE-2017-13286 Poc(can not use)

android-securitybinary-exploitationcode-analysis+3

3 years ago

nextcloud_android

shanika04/nextcloud_android

SQLi CVE-2019-5454

android-securitymobile-securitypenetration-testing+2

5 years ago

CVE-2022-32898

ox1111/cve-2022-32898

Technical analysis and exploit demonstration of CVE-2022-32898, a kernel memory corruption vulnerability in Apple Neural Engine driver, with detailed…

binary-exploitationexploitationhardware-security+4

2 years ago

Archived

InstagramOSINT

sc1341/instagramosint

An Instagram Open Source Intelligence Tool - Archive

information-gatheringmobile-securityosint+3

1.6k2 years ago

awesome-reverse-engineering

morluto/awesome-reverse-engineering

Curated reverse-engineering tools and learning resources for binaries, apps, firmware, formats, and protocols.

binary-analysiscurated-resourcesdebuggers+8

1.6k5 days ago

Archived

Shellshock-Vulnerability-Scan

indiandragon/shellshock-vulnerability-scan

Android app to scan for bash Vulnerability - CVE-2014-6271 also known as Shellshock

android-securitymobile-securitypenetration-testing+2

115 years ago

marrow

utabk/marrow

Desktop GUI for the REA reverse engineering MCP: code browser with listing, decompiler and function graph, plus 229 analysis tools and an AI agent in…

ai-assisted-reversingai-securitybinary-analysis+6

319h 18m ago

igoat

owasp/igoat

OWASP iGoat - A Learning Tool for iOS App Pentesting and Security by Swaroop Yermalkar

authenticationcryptographydata-exfiltration+9

4613 years ago

Solitude

nccgroup/solitude

Solitude is a privacy analysis tool that enables anyone to conduct their own privacy investigations. Whether a curious novice or a more advanced…

data-exfiltrationinformation-gatheringmobile-security+4

3765 years ago

cve-2016-1764

moloch--/cve-2016-1764

Extraction of iMessage Data via XSS

data-exfiltrationexploitationinformation-gathering+4

5110 years ago

CVE-2025-24104

ifpdz/cve-2025-24104

Technical writeup of CVE-2025-24104: an iOS sandbox escape via symlink validation bypass in backup restoration, enabling arbitrary file reads outside…

binary-exploitationdata-exfiltrationexploitation+4

511 year ago

Previous 1 2 3 4 567 Next