Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

163 results

CVE-2016-0846

secmob/cve-2016-0846

arbitrary memory read/write by IMemroy OOB

binary-exploitationexploitationmemory-forensics+2

10 years ago

ODIS-project-explorer

kartoffelpflanze/odis-project-explorer

Python dumper/explorer for MCD Runtime Projects used by ODIS

binary-analysisdebuggersembedded-systems-security+4

3711 months ago

wslink-vm-analyzer

eset/wslink-vm-analyzer

WslinkVMAnalyzer is a tool to facilitate analysis of code protected by a virtual machine featured in Wslink malware

binary-analysiscode-analysismalware-analysis+1

484 years ago

ida-cli

cpkt9762/ida-cli

Headless IDA Pro MCP server for AI-assisted binary analysis, powered by idalib

ai-assisted-reversingbinary-analysisreverse-engineering

301 month ago

ME2-Writeup

coremaze/me2-writeup

Reconstructing a Dead USB Protocol: A Handheld's Secrets Unlocked by a Hot Knife, a multi-disciplinary journey to reviving a forgotten USB interface

binary-analysisdata-recoveryeducation+5

494 months ago

hcon2026hwctf

therealdreg/hcon2026hwctf

Hardware Hacking CTF hcon2026hwctf - RISCV Hazard3 (@Wren6991) Exploiting by @b1n4ri0 @antoniovazquezblanco & @therealdreg

binary-exploitationctfeducation+6

254 months ago

page_table_walk

jazho76/page_table_walk

Walk x86-64 page tables by hand in qemu and gdb. Decompose a virtual address, follow cr3 through all levels of physical memory, and extract a flag…

binary-analysisctfdebuggers+4

286 months ago

NeuroCore

farukalpay/neurocore

NeuroCore is a native macOS application that visualizes the internal structure of binary files using a Hilbert Curve mapping and Shannon Entropy…

binary-analysisdigital-forensicsforensics+3

288 months ago

netgear_r6700v3_circled

cyber-defence-campus/netgear_r6700v3_circled

Demonstrate some functionalities of Morion by generating an exploit for CVE-2022-27646 (stack buffer overflow on Netgear R6700v3 routers).

binary-exploitationeducationembedded-systems-security+4

81 year ago

Anti_suspend

gmh5225/anti_suspend

Protect process by shellcode

defensive-toolsreverse-engineeringshellcode

53 years ago

CVE-2018-16711

downwithup/cve-2018-16711

PoC code for CVE-2018-16711 (exploit by wrmsr)

binary-exploitationexploitationpenetration-testing+2

57 years ago

IvantiInitrdDecryptor

watchtowrlabs/ivantiinitrddecryptor

A tool for decrypting Ivanti device initrd images by reverse-engineering the kernel's bzImage to locate and use the embedded AES key.

cryptographyembedded-systems-securityfirmware-analysis+1

42 years ago

CVE-2019-14745

xooxo/cve-2019-14745

weaponized radare2 vulnerability found by @CaptnBanana and blenk92

binary-exploitationexploitationpayload-generation+3

26 years ago

rats-re

neuromancer/rats-re

Reconstructs legacy Windows binaries into C source by pairing Ghidra decompiler exports with local LLMs, producing compile-checked candidates and…

ai-assisted-reversingbinary-analysismachine-learning+1

121 days ago

CVE-2019-1068

vulnerability-playground/cve-2019-1068

Root cause analysis and PoC for a Microsoft SQL Server Stack Overflow Vulnerability by reversing svl.dll.

binary-exploitationeducationexploitation+3

14 years ago

CVE-2024-1346

petergabaldon/cve-2024-1346

Weak MySQL database root password in LaborOfficeFree affects version 19.10. This vulnerability allows an attacker to calculate the root password of…

binary-analysisdatabase-securityexploitation+3

22 years ago

MappedImagesDetector

adem-hosni/mappedimagesdetector

Lightweight native Windows memory scanner for AV/EDR platforms, detecting suspicious mapped images and manual DLL injection techniques by IAT thunk

anomaly-detectionbinary-analysisdefensive-tools+4

18 months ago

Komfy-Switch-Wifi-Password-Disclosure

jasondoyle/komfy-switch-wifi-password-disclosure

Proof-of-concept and writeup showing how to retrieve Wi-Fi SSID/password from a D-Link Komfy smart switch over BLE by reversing the iOS app’s custom…

bluetooth-securityexploitationiot-security+3

19 years ago

Previous 1…345…10 Next