Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

162 results

metasploit_in_termux

gushmazuko/metasploit_in_termux

Install and run Metasploit Framework 6 on Android via Termux with automated setup, payload generation (msfvenom), and full msfconsole access for…

android-securityexploit-frameworksmobile-security+2

2.1k

1 year ago

uc_browser_poc_CVE-2022-1364

interruptlabs/uc_browser_poc_cve-2022-1364

Proof of concept for CVE-2022-1364 against Alibaba's UC Browser

exploitationmobile-securitypayload-development+3

1411 months ago

Evil-Droid

m4sc3r4n0/evil-droid

Framework to create, generate, and embed APK payloads for Android penetration testing, leveraging Metasploit for exploitation and Apktool for…

android-securityeducationexploit-frameworks+4

1.1k8 years ago

Androspy

cyb0r9/androspy

Automated Android backdoor generator with crypter, IP poisoning, and Metasploit payload integration for penetration testing and red team operations.

android-securityexploit-frameworkspayload-development+3

2687 years ago

CVE-2013-1081

steponequit/cve-2013-1081

Novell ZENworks Mobile Management - LFI RCE

exploitationexploit-frameworkspayload-development+3

213 years ago

CVE-2013-4710-WebView-RCE-Vulnerability

snip3r69/cve-2013-4710-webview-rce-vulnerability

Android 3.0 through 4.1.x on Disney Mobile, eAccess, KDDI, NTT DOCOMO, SoftBank, and other devices does not properly implement the WebView class,…

android-securityexploitationmobile-security+3

14 years ago

Archived

Rootsmart-v2.0

nicchongwb/rootsmart-v2.0

Android Ransomware Development - AES256 encryption + CVE-2019-2215 (reverse root shell) + Data Exfiltration

android-securitycommand-and-controldata-exfiltration+8

14 years ago

Rootsmart-v2.0

crackercat/rootsmart-v2.0

Android Ransomware Development - AES256 encryption + CVE-2019-2215 (reverse root shell) + Data Exfiltration

android-securitycommand-and-controldata-exfiltration+8

24 years ago

APatch

bmax121/apatch

The patching of Android kernel and Android system

android-securitymobile-securitypayload-development+4

8.0k8 days ago

KernelPatch

bmax121/kernelpatch

Patching and hooking the Linux kernel with only a stripped Linux kernel image.

android-securitybinary-analysisbinary-exploitation+7

1.6k3 days ago

Root-My-Galaxy

busung-dev/root-my-galaxy

KSU installer for supported Samsung Galaxy firmware with CVE-2026-43499

android-securityexploitationmobile-security+3

1.4k1 month ago

FolkPatch

lyravoid/folkpatch

Root access to the kernel can be achieved simply by patching the Boot partition for reflashing. This solution is based on a non-parallel extended…

android-securitymobile-securitypayload-development+3

1.2k3 days ago

LSPromise

lsposed/lspromise

Android complete exploit chain that enables privilege escalation from a local untrusted app to root/kernel, combination of CVE-2026-49881 and…

android-securityexploitationexploit-frameworks+4

43228 days ago

kwetza

sensepost/kwetza

Python script to inject existing Android applications with a Meterpreter payload.

android-securityexploitationmobile-app-pentesting+3

6468 years ago

BetterAndroRAT

mwsrc/betterandrorat

Android Remote Access Trojan

android-securitycommand-and-controldata-exfiltration+8

5469 years ago

DirtyPipe-Android

polygraphene/dirtypipe-android

Dirty Pipe root exploit for Android (Pixel 6)

android-securitybinary-exploitationexploitation+5

8554 years ago

NXLoader

davidbuchanan314/nxloader

My first Android app: Launch Fusée Gelée payloads from stock Android (CVE-2018-6242)

android-securityexploitationhardware-iot-security+2

5598 years ago

unisoc-su

skorpion96/unisoc-su

A method for CVE-2025-31710 and to connect to cmd_skt to obtain a root shell on unisoc unpatched models

android-securitybinary-exploitationcommand-and-control+7

13514 days ago

Previous12…9 Next