Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

29 results

ave263-chain

yiyeshi0-hash/ave263-chain

iPad 8 iPadOS 26.3 AVE toolchain research (CVE-2026-64747 class)

binary-analysisexploitationios-security+2

12 days ago

AntiDebug-AntiVM

gmh5225/antidebug-antivm

Different methods to detect a virtualized environment or potential debugging

adversarial-attackcurated-resourceseducation+2

23 years ago

IDAPython-Malware-Scripts

cdong1012/idapython-malware-scripts

Scripts for automating malware analysis and reverse engineering workflows in IDA Pro, covering binary inspection, static analysis, and code…

binary-analysismalware-analysisreverse-engineering+1

762 years ago

AMSI-patches-learned-till-now

reveng007/amsi-patches-learned-till-now

I have documented all of the AMSI patches that I learned till now

curated-resourceseducationids-ips-evasion+3

729 months ago

binlex

c3rb3ru5d3d53c/binlex

A Binary Genetic Traits Lexer Framework

binary-analysiscode-analysishash-analysis+4

6011 month ago

labs-releases

elastic/labs-releases

Elastic Security Labs releases

curated-resourcesioc-managementmalware-analysis+2

901 month ago

qualcomm_baseband_scripts

mzakocs/qualcomm_baseband_scripts

Collection of scripts for reversing Qualcomm Hexagon baseband / modem firmware

binary-analysisembedded-systems-securityfirmware-analysis+2

1923 years ago

Cartographer

nccgroup/cartographer

Code Coverage Exploration Plugin for Ghidra

binary-analysisdynamic-code-analysisreverse-engineering

3822 years ago

detaped

nccgroup/detaped

Detaped is a Python disassembler and decompiler for Duktape. The intended use is for source code review and analysis in situations where you only…

binary-analysiscode-analysispenetration-testing+2

33 years ago

CVE-Reverse

httpvoid/cve-reverse

Curated list of CVEs that have been reverse-engineered and analyzed, serving as a resource for vulnerability research, exploitation understanding,…

binary-analysiscurated-resourceseducation+3

2834 years ago

quantum-zk-proof-poc

trailofbits/quantum-zk-proof-poc

Proof-of-concept code for beating Google's ZK proof of quantum cryptanalysis

cryptographyeducationexploitation+3

164 months ago

CVE-2025-51726

meisterlos/cve-2025-51726

PoC demonstrating SHA-1 code signing forgery and missing High Entropy ASLR in CyberGhostVPN installer, enabling trust bypass and predictable memory…

binary-exploitationexploitationmalware-analysis+4

1 year ago

MIPS-CVE-2014-9222

mercul1ninna/mips-cve-2014-9222

Lets have fun by digging into a Zyxel router firmware and MIPS Arch

binary-analysiseducationembedded-systems-security+5

7 years ago

CVE-2020-0022

themmokhtar/cve-2020-0022

A fully public exploit of the CVE-2020-0022 BlueFrag Android RCE Vulnerability (tested on Pixel 3 XL)

android-securitybinary-exploitationbluetooth-security+7

222 years ago

x64dbg

x64dbg/x64dbg

An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.

ai-assisted-reversingbinary-analysisbinary-exploitation+7

49.3k5 days ago

MIPS-CVE-2014-9222

donfanning/mips-cve-2014-9222

Lets have fun by digging into a Zyxel router firmware and MIPS Arch

binary-analysiseducationembedded-systems-security+5

7 years ago

Nodejs-Tracer

checkpointsw/nodejs-tracer

Runtime tracer for Node.js malware analysis that hooks core modules, logs calls, spoofs anti-analysis checks, and captures file writes and HTTP…

anti-botdynamic-analysis-sandboxingids-ips-evasion+3

828 months ago

CVE-2020-0022

kalibb/cve-2020-0022

Zero-click Bluetooth RCE exploit for Android 8-9 (CVE-2020-0022) with heap spraying, address leaking, and JOP chain execution for remote code…

android-securitybinary-exploitationbluetooth-security+9

6 months ago

Previous12 Next