Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

104 results

TendaSpill

shaheemirza/tendaspill

An exploitation tool to extract passwords using CVE-2015-5995.

educationexploitationpassword-attacks+3

107 years ago

CVE-2022-44149

geniuszly/cve-2022-44149

Python script to test CVE-2022-44149 router vulnerability via authenticated payload delivery to the web interface, with logging for security…

exploitationpayload-generationpenetration-testing+3

52 years ago

reverse-skill

zhaoxuya520/reverse-skill

AI-powered skill router pack for reverse engineering, penetration testing, and security research. Routes AI agents to correct methodologies and…

ai-securitybinary-analysisctf+8

37.8k4 days ago

pysap

owasp/pysap

pysap is an open source Python library that provides modules for crafting and sending packets using SAP's NI, Diag, Enqueue, Router, MS, SNC, IGS,…

educationexploitationfuzzing+5

2591 day ago

Xiaomi_Mi_WiFi_R3G_Vulnerability_POC

ultramangaia/xiaomi_mi_wifi_r3g_vulnerability_poc

A login bypass(CVE-2019-18371) and a command injection vulnerability(CVE-2019-18370) in Xiaomi Router R3G up to version 2.28.23.

exploitationiot-securitypenetration-testing+2

1856 years ago

asus-cmd

jduck/asus-cmd

ASUS Router infosvr UDP Broadcast root Command Execution

embedded-systems-securityexploitationhardware-iot-security+4

25211 years ago

CVE-2026-3227-TP-Link-authenticated-RCE

do4choo/cve-2026-3227-tp-link-authenticated-rce

Proof-of-concept for authenticated OS command injection in TP-Link router firmware. Includes decryption, QEMU-based encryption hook, and 15-character…

binary-exploitationeducationexploitation+6

433 months ago

CVE-2018-14714-RCE-exploit

bttea/cve-2018-14714-rce-exploit

ASUS wifi router RCE vulnerability

educationexploitationiot-security+5

1911 months ago

misfortune-cookie

luel-4013/misfortune-cookie

Interactive PoC suite for CVE-2014-9222 (Misfortune Cookie) and related router exploits, featuring detection, auth bypass, DoS, and RCE modules with…

binary-exploitationembedded-systems-securityexploitation+6

19 days ago

CVE-2023-43482

mr-xn/cve-2023-43482

TP-Link ER7206 Omada Gigabit VPN Router uhttpd freeStrategy Command injection Vulnerability

command-and-controlexploitationpenetration-testing+3

62 years ago

CVE-2020-17456

al1ex/cve-2020-17456

CVE-2020-17456 & Seowon SLC 130 Router RCE

command-and-controlexploitationiot-security+3

45 years ago

Linksys-WRT54GL-Exploitation

umbertodellamonica/linksys-wrt54gl-exploitation

From Solder to Shell: Full Hardware Exploitation of the Linksys WRT54GL Router (CVE-2022-43973)

binary-analysisdebuggerseducation+9

24 months ago

TP-Link-Archer-CR-700-XSS-Exploit

ayushman4/tp-link-archer-cr-700-xss-exploit

Exploiting TP-Link Archer CR-700 Router. (Responsibly Disclosed to TP-Link)

exploitationiot-securitypenetration-testing+3

310 years ago

CVE-2022-25061

exploitwritter/cve-2022-25061

This script exploits a remote command execution vulnerability under the oal_setIp6DefaultRoute component in the TPLink WR840N router.

exploitationpenetration-testingred-teaming+2

24 years ago

CVE-2020-25498

the-girl-who-lived/cve-2020-25498

Stored XSS via CSRF in Beetel 777VR1 Router

exploitationpenetration-testingphishing-tools+2

35 years ago

cve-2016-1555

ide0x90/cve-2016-1555

Metasploit module exploiting unauthenticated command injection in multiple Netgear router models to achieve remote code execution with root…

embedded-systems-securityexploitationexploit-frameworks+5

27 years ago

glinet-beryl-ax-triple-rce-cve-2026-11450-11451-11452-unauthenticated-root-on-travel-router

hunt-benito/glinet-beryl-ax-triple-rce-cve-2026-11450-11451-11452-unauthenticated-root-on-travel-router

PoC for three unauthenticated command injection vulnerabilities (CVE-2026-11450/1/2) in GL.iNet Beryl AX travel router firmware <=4.4.5, exploiting…

educationembedded-systems-securityexploitation+3

13 months ago

CVE-2026-26898-Xiaomi-SSRF-HostHeaderInjection

iwallplace/cve-2026-26898-xiaomi-ssrf-hostheaderinjection

Unauthenticated SSRF in Xiaomi Mi Router 4A Gigabit Edition (firmware 3.0.24) via Host Header Injection — CVE-2026-26898

exploitationnetwork-securitypenetration-testing+3

13 months ago

Previous 1 234 5 6 Next