Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
56 results
sh1mazu preview

sh1mazu

GitHubnu11secur1ty/sh1mazu

Meterpreter auto exploit program

command-and-controlexploitationpayload-generation+4
3 years ago
Shocker-TJNULL-OSCP- preview

Shocker-TJNULL-OSCP-

GitHubr3fr4kt/shocker-tjnull-oscp-

Structured HTB walkthrough demonstrating Shellshock (CVE-2014-6271) exploitation via CGI directory fuzzing and privilege escalation through…

educationexploitationlabs-practice+6
2 months ago
Ghost preview

Ghost

GitHubentysec/ghost

Ghost Framework is an Android post-exploitation framework that exploits the Android Debug Bridge to remotely access an Android device.

android-securityexploitationpenetration-testing+2
3.4k9 months ago
androrat preview

androrat

GitHubdesignativedave/androrat

Remote Administration Tool for Android devices

android-securitycommand-and-controldata-exfiltration+9
1.6k3 years ago
BetterAndroRAT preview

BetterAndroRAT

GitHubmwsrc/betterandrorat

Android Remote Access Trojan

android-securitycommand-and-controldata-exfiltration+8
5429 years ago
qu1ckr00t preview

qu1ckr00t

GitHubgrant-h/qu1ckr00t

A PoC application demonstrating the power of an Android kernel arbitrary R/W.

android-securitybinary-exploitationexploitation+2
4456 years ago
AdbNet preview

AdbNet

GitHub0x1ca3/adbnet

A tool that allows you to search for vulnerable android devices across the world and exploit them.

android-securityexploitationinformation-gathering+4
4354 years ago
CVE-2024-0044 preview

CVE-2024-0044

GitHub0xbinder/cve-2024-0044

CVE-2024-0044: a "run-as any app" high-severity vulnerability affecting Android versions 12 and 13

android-securitydata-exfiltrationexploitation+6
3301 year ago
leprechaun preview

leprechaun

GitHubvonahisec/leprechaun

This tool is used to map out the network data flow to help penetration testers identify potentially valuable targets.

network-mappingpenetration-testingpost-exploitation+1
2454 years ago
PoCForCVE-2015-1528 preview

PoCForCVE-2015-1528

GitHubsecmob/pocforcve-2015-1528

I'll submit the poc after blackhat

android-securitybinary-exploitationexploitation+4
11711 years ago
unisoc-su preview

unisoc-su

GitHubskorpion96/unisoc-su

A method for CVE-2025-31710 and to connect to cmd_skt to obtain a root shell on unisoc unpatched models

android-securitybinary-exploitationcommand-and-control+7
1301 month ago
zygote-injection-toolkit preview

zygote-injection-toolkit

GitHubanonymous941/zygote-injection-toolkit

A command-line utility to exploit Android Zygote injection (CVE-2024-31317)

android-securitydata-exfiltrationexploitation+5
608 months ago
CVE-2026-43499-S25U preview

CVE-2026-43499-S25U

GitHubbusung-dev/cve-2026-43499-s25u

Standalone CVE-2026-43499 PoC for Galaxy S25 Ultra SM-S938N S938NKSUACZF1

android-securitybinary-exploitationexploitation+4
411 month ago
GeckoDroid preview

GeckoDroid

GitHubblacksnufkin/geckodroid

Android client for Adaptix C2 framework enabling remote agent management, interactive command shells, listener control, payload generation, and…

android-securitycommand-and-controlmobile-security+4
385 months ago
GhostLock-for-OnePlus preview

GhostLock-for-OnePlus

GitHubp2p3p/ghostlock-for-oneplus

(CVE-2026-43499)内核漏洞利用程序,适用于未解锁 Bootloader 的一加设备。

android-securitybinary-exploitationeducation+4
401 month ago
PoC-Deployer-System preview

PoC-Deployer-System

GitHubwqry085/poc-deployer-system

Quick tool for utilizing CVE-2024-31317 on Android

android-securityexploitationmobile-security+5
766 months ago
ghostlock-a17 preview

ghostlock-a17

GitHubmobilehackinglab/ghostlock-a17

Kernel exploit for CVE-2026-43499 on Samsung Galaxy A17 achieving root via KDP bypass, KASLR recovery, and forged workqueue execution with persistent…

android-securitybinary-exploitationexploitation+4
105 days ago
CVE-2024-33352 preview

CVE-2024-33352

GitHubmmiszczyk/cve-2024-33352

BlueStacks privilege escalation through VM backdooring

android-securityexploitationhardware-iot-security+3
212 years ago
Previous1234Next