Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

56 results

ghostlock-k419-adapter

xiaobailovesstirring/ghostlock-k419-adapter

GhostLock (CVE-2026-43499) adapter for 4.19.152-perf+ Android kernel

android-securitybinary-exploitationexploitation+6

2 days ago

ghostlock-s26

snothin/ghostlock-s26

GhostLock (CVE-2026-43499) for the Galaxy S26

android-securitybinary-exploitationexploitation+5

92 days ago

IonStack-S22U

sarabpal-dev/ionstack-s22u

CVE-2026-43499 full exploit chain for Samsung Galaxy S22 Ultra (Android 5.10 kernel)

android-securitybinary-exploitationexploitation+3

413 days ago

cve-2026-41940-PoC

lanicer/cve-2026-41940-poc

Exploits cPanel/WHM CVE-2026-41940 authentication bypass via CRLF session injection for unauthenticated root-level WHM access, then lists accounts,…

authentication-authorizationpenetration-testingpersistence-mechanisms+5

5296 days ago

ghostlock-a17

mobilehackinglab/ghostlock-a17

Kernel exploit for CVE-2026-43499 on Samsung Galaxy A17 achieving root via KDP bypass, KASLR recovery, and forged workqueue execution with persistent…

android-securitybinary-exploitationexploitation+4

105 days ago

hp-slate7-root-kit

valentineus/hp-slate7-root-kit

HP Slate 7 2800 Android 4.1.1 rooting kit using CVE-2015-1805.

android-securitybinary-exploitationexploitation+6

18 days ago

vivo_iqoo_neo_9_root_research_on_CVE-2025-21479

linux-tools/vivo_iqoo_neo_9_root_research_on_cve-2025-21479

iQOO Neo9 (PD2338C) 免解锁 Caps-Root 工具** — 基于 CVE-2025-21479 (Adreno GPU SDS) 的任意物理写提权方案

android-securitybinary-exploitationexploitation+4

45 days ago

ghostlock-cve-2026-43499-4.19-k40

yijiacloud/ghostlock-cve-2026-43499-4.19-k40

CVE-2026-43499 (GhostLock) rtmutex remove_waiter() UAF local-root PoC adapted for Qualcomm Android 4.19 kernels (Redmi K40 / Snapdragon 870 class),…

android-securitybinary-exploitationexploitation+4

614 days ago

lenovo-a1000g-mt8317-A412_01_09_130907-kernel-3.4.0-root-cve-2016-5195

voidgguy/lenovo-a1000g-mt8317-a412_01_09_130907-kernel-3.4.0-root-cve-2016-5195

[AI-assisted] Root method for Lenovo IdeaTab A1000G (MT8317, kernel 3.4.0, Android 4.1) via CVE-2016-5195 (Dirty COW)

android-securitybinary-exploitationexploitation+4

1 month ago

CVE-2026-43499-S26

1ndevelopment/cve-2026-43499-s26

Exploits CVE-2026-43499 on Android GKI 6.12 devices: deterministic arbitrary kernel read/write, KASLR bypass, and full root via LD_PRELOAD payload.

android-securitybinary-exploitationexploitation+4

76 days ago

CVE-2026-67599_ClearOS_RCE

lazytitan33/cve-2026-67599_clearos_rce

Authenticated Blind OS Command Injection in ClearOS

exploitationpenetration-testingpost-exploitation+3

25 days ago

qu1ckr00t

grant-h/qu1ckr00t

A PoC application demonstrating the power of an Android kernel arbitrary R/W.

android-securitybinary-exploitationexploitation+2

4456 years ago

php-reverse-shell

ivan-sincek/php-reverse-shell

PHP shells that work on Linux OS, macOS, and Windows OS.

educationexploitationpenetration-testing+4

5726 months ago

CVE-2026-43499-pmg110-root

soralis0912/cve-2026-43499-pmg110-root

Android LPE exploit for CVE-2026-43499 targeting OPPO PMG110 (kernel 6.6). Uses futex PI UAF to gain root and install a su daemon via LD_PRELOAD.

android-securitybinary-exploitationexploitation+7

21 month ago

CVE-2025-61304

pentastic-be/cve-2025-61304

OS command injection vulnerability in Dynatrace ActiveGate ping extension up to 1.016 via crafted ip address

exploitationpayload-generationpost-exploitation+3

210 months ago

pentest-writeups

americooo/pentest-writeups

Kioptrix Level 1 writeup - CVE-2003-0201 Samba trans2open

ctfeducationexploitation+6

1 month ago

sh1mazu

nu11secur1ty/sh1mazu

Meterpreter auto exploit program

command-and-controlexploitationpayload-generation+4

3 years ago

EvilOSX

cys3c/evilosx

A pure python, post-exploitation, remote administration tool (RAT) for macOS / OS X.

command-and-controlencryption-decryption-toolspersistence-mechanisms+2

519 years ago

Previous12 3 4 Next