Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

294 results

CVE-2026-82592

hackspeak/cve-2026-82592

Proof-of-concept exploit for D-Link DIR-825M stack buffer overflow and command injection in /boafrm/formDiskFormat, enabling remote code execution as…

binary-exploitationexploitationhardware-iot-security+4

25 days ago

CVE-2022-24654

leonardobg/cve-2022-24654

Proof-of-concept exploit for authenticated stored cross-site scripting (XSS) vulnerability in INTELBRAS ATA 200 firmware 74.19.10.21, targeting the…

exploitationiot-securitypenetration-testing+2

24 years ago

emba

e-m-b-a/emba

EMBA - The firmware security analyzer

binary-analysisdynamic-analysis-sandboxingembedded-systems-security+8

3.7k2 days ago

ASUS-SmartHome-Exploit

tim124058/asus-smarthome-exploit

ASUS SmartHome Exploit for CVE-2019-11061 and CVE-2019-11063

exploitationinformation-gatheringiot-security+3

237 years ago

CVE-2026-11834

mattgsys/cve-2026-11834

Proof of Concept (PoC) for the TP-Link DHCP Option 66 Unauthenticated RCE (CVE-2026-11834)

command-and-controlexploitationpayload-generation+3

43 months ago

the-same-key-opens-every-box-cve-2026-71960-hard-coded-jwt-secret-in-cudy-wr3000-mesh-mqtt

hunt-benito/the-same-key-opens-every-box-cve-2026-71960-hard-coded-jwt-secret-in-cudy-wr3000-mesh-mqtt

PoC toolkit that unpacks router firmware, decrypts device secrets, forges JWT tokens, and exploits CVE-2026-71960/71961 to take over Cudy WR3000 mesh…

authenticationcryptographyexploitation+4

1 month ago

CVE-2025-65427

kirubel-cve/cve-2025-65427

Proof-of-concept exploit for CVE-2025-65427: missing rate limiting on Dbit N300 T1 Pro router login API enabling brute-force attacks and…

authenticationiot-securitypassword-attacks+3

9 months ago

netgear-to-CVE-2022-29383

cxaqhq/netgear-to-cve-2022-29383

Exploit for CVE-2022-29383 SQL injection in NETGEAR ProSafe SSL VPN (FVS318Gv2/FVS318N) via scgi-bin/platform.cgi.

exploitationnetwork-securitypenetration-testing+2

4 years ago

IoTGoat

scriptingxss/iotgoat

IoTGoat is a deliberately insecure firmware based on OpenWrt.

educationfirmware-analysishardware-iot-security+4

1846 years ago

CVE-2025-54322

sachinart/cve-2025-54322

CVE-2025-54322 - XSpeeder SXZOS Pre-Auth RCE 0day Finder Quick

exploitationpenetration-testingreconnaissance+3

89 months ago

CVE-2022-28113

code-byter/cve-2022-28113

Unauthenticated RCE exploit for Fantec MWiD25-DS

binary-exploitationeducationembedded-systems-security+7

44 years ago

TempRoot-Huawei

llccd/temproot-huawei

CVE-2019-2215 poc for Huawei hardened kernel

android-securitybinary-exploitationexploitation+5

61 year ago

CVE-2022-30525_check

cbk914/cve-2022-30525_check

Python script to detect CVE-2022-30525 OS command injection vulnerability in Zyxel USG FLEX devices by sending crafted HTTP requests and analyzing…

command-and-controlexploitationpenetration-testing+2

23 years ago

CVE-2022-37932

tim-hoekstra/cve-2022-37932

Proof-of-concept exploit for an authentication bypass in HP 1920 Series switches, allowing unauthenticated admin password change via crafted HTTP…

educationexploitationiot-security+3

21 year ago

cve-2025-29384

fomovet/cve-2025-29384

POC for CVE-2025-29384

binary-exploitationeducationembedded-systems-security+8

3 months ago

ESP32Marauder

justcallmekoko/esp32marauder

A suite of WiFi/Bluetooth offensive and defensive tools for the ESP32

bluetooth-securitydefensive-toolsembedded-systems-security+6

12.5k11 days ago

Archived

IoT-PT-v1

iot-ptv/iot-pt-v1

A Virtual environment for Pentesting IoT Devices

bluetooth-securityeducationembedded-systems-security+8

4451 year ago

cotopaxi

samsung/cotopaxi

Set of tools for security testing of Internet of Things devices using specific network IoT protocols

fuzzingiot-securitynetwork-security+2

3615 years ago

Previous 1…121314…17 Next