Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
294 results
super-tart-vphone-writeup preview

super-tart-vphone-writeup

GitHubwh1te4ever/super-tart-vphone-writeup

Guide to building a virtual iPhone using VPHONE600AP components from Apple's PCC firmware, with firmware patching, bootchain modification, and kernel…

binary-exploitationdebuggersexploitation+7
1.3k
7 months ago
vphone-cli preview

vphone-cli

GitHublakr233/vphone-cli

Boot and manage virtual iPhones on Apple Silicon with firmware patching, jailbreak variants, and security research features for iOS testing and…

exploitationfirmware-analysisios-security+3
14.4k1 day ago
CVE-2026-36957 preview

CVE-2026-36957

GitHubkirubel-cve/cve-2026-36957

Proof-of-concept for CVE-2026-36957, a denial-of-service vulnerability in Dbit Router firmware via HTTP flood on the Boa web server, causing resource…

exploitationpenetration-testingvulnerability-analysis+1
5 months ago
CVE-2026-36960 preview

CVE-2026-36960

GitHubkirubel-cve/cve-2026-36960

Proof-of-concept exploit for CVE-2026-36960, a CSRF vulnerability in U-SPEED Router firmware allowing unauthorized configuration changes via forged…

exploitationpenetration-testingvulnerability-analysis+2
5 months ago
CVE-2026-36956 preview

CVE-2026-36956

GitHubkirubel-cve/cve-2026-36956

Proof-of-concept for CVE-2026-36956, a CSRF vulnerability in Dbit Router firmware allowing unauthorized configuration changes via forged requests.

exploitationpenetration-testingvulnerability-analysis+2
5 months ago
CVE-2026-36958 preview

CVE-2026-36958

GitHubkirubel-cve/cve-2026-36958

Proof-of-concept for CVE-2026-36958, a denial-of-service vulnerability in U-SPEED Router firmware that exhausts resources via concurrent HTTP…

exploitationnetwork-securitypenetration-testing+2
5 months ago
CVE-2026-3227-TP-Link-authenticated-RCE preview

CVE-2026-3227-TP-Link-authenticated-RCE

GitHubdo4choo/cve-2026-3227-tp-link-authenticated-rce

Proof-of-concept for authenticated OS command injection in TP-Link router firmware. Includes decryption, QEMU-based encryption hook, and 15-character…

binary-exploitationeducationexploitation+6
433 months ago
CVE-2025-99999 preview

CVE-2025-99999

GitHub24520597-blip/cve-2025-99999

PoC & IOCs for critical HSM authentication bypass (CVE-2025-99999). Threat intelligence for financial sector.

exploitationioc-managementpenetration-testing+3
4 months ago
CVE-2025-66954 preview

CVE-2025-66954

GitHubdbmonster19/cve-2025-66954

Published Details for this CVE

exploitationinformation-gatheringpenetration-testing+3
5 months ago
CVE-2026-43499-S24U preview

CVE-2026-43499-S24U

GitHubfusiondrive/cve-2026-43499-s24u

CVE-2026-43499 research port for Galaxy S24 Ultra SM-S928U1 DZF2 (COMPLETED)

android-securitybinary-exploitationexploitation+5
41 month ago
CVE-2016-5640 preview

CVE-2016-5640

GitHubxfox64x/cve-2016-5640

Crestron AirMedia AM-100 RCE (CVE-2016-5640) Metasploit Module

command-and-controlexploitationexploit-frameworks+4
26 years ago
CVE-2025-54322-exploit preview

CVE-2025-54322-exploit

GitHubnkuty/cve-2025-54322-exploit

Proof-of-concept exploit for CVE-2025-54322, a critical pre-authentication RCE in XSpeeder SXZOS firmware. Provides interactive shell, reverse shell…

command-and-controlexploitationpayload-development+3
28 months ago
cve-2025-29384-poc preview

cve-2025-29384-poc

GitHubotsmane-ahmed/cve-2025-29384-poc

Proof-of-concept exploit for CVE-2025-29384, a critical stack-based buffer overflow in Tenda AC9 routers. Includes Python and Metasploit modules for…

binary-exploitationeducationembedded-systems-security+7
141 year ago
glinet-beryl-ax-triple-rce-cve-2026-11450-11451-11452-unauthenticated-root-on-travel-router preview

glinet-beryl-ax-triple-rce-cve-2026-11450-11451-11452-unauthenticated-root-on-travel-router

GitHubhunt-benito/glinet-beryl-ax-triple-rce-cve-2026-11450-11451-11452-unauthenticated-root-on-travel-router

PoC for three unauthenticated command injection vulnerabilities (CVE-2026-11450/1/2) in GL.iNet Beryl AX travel router firmware <=4.4.5, exploiting…

educationembedded-systems-securityexploitation+3
13 months ago
CVE-2026-36959 preview

CVE-2026-36959

GitHubkirubel-cve/cve-2026-36959

Proof-of-concept exploit for CVE-2026-36959, a missing rate limiting vulnerability in U-SPEED Router firmware allowing brute-force attacks on the…

authenticationexploitationpenetration-testing+2
5 months ago
CVE-2025-52357 preview

CVE-2025-52357

GitHubwrathfuldiety/cve-2025-52357

Proof of Concept and Security Advisory for XSS vulnerability in the FD602GW-DX-R410 fiber router’s admin console (firmware V2.2.14). Includes…

educationexploitationpenetration-testing+3
1 year ago
chipsec preview

chipsec

GitHubchipsec/chipsec

Platform Security Assessment Framework

firmware-analysisforensicshardware-iot-security+3
3.3k2 days ago
CVE-2024-29973 preview

CVE-2024-29973

GitHubbigb0x/cve-2024-29973

POC for CVE-2024-29973

command-and-controlexploitationinformation-gathering+3
102 years ago
Previous1…111213…17Next