Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
22 results
trommel preview
Archived

trommel

GitHubcertcc/trommel

Static analysis tool that sifts through embedded device firmware to identify vulnerable indicators including SSH/SSL keys, IPs, URLs, shell scripts,…

embedded-systems-securityfirmware-analysishardware-security+6
213
6 years ago
apxutil preview

apxutil

GitHubfinngineering/apxutil

A tool to manipulate Schneider Electric PLC archive files

binary-analysisembedded-systems-securityexploitation+5
116 months ago
aztarna preview
Archived

aztarna

GitHubaliasrobotics/aztarna

Footprinting and fingerprinting tool for robotic systems, including ROS, ROS2, SROS, and industrial routers. Scans networks, detects nodes, topics,…

embedded-systems-securityhardware-iot-securityinformation-gathering+7
921 month ago
Pwn2Own-Auto-2024-CHARX preview

Pwn2Own-Auto-2024-CHARX

GitHubret2/pwn2own-auto-2024-charx

Working exploit for Phoenix Contact CHARX SEC-3100 using Scapy raw Ethernet packets to trigger vulnerabilities and obtain an interactive connect-back…

embedded-systems-securityexploitationiot-security+2
142 years ago
mySCADA-myPRO-7-Hardcoded-FTP-Username-and-Password preview

mySCADA-myPRO-7-Hardcoded-FTP-Username-and-Password

GitHubemreovunc/myscada-mypro-7-hardcoded-ftp-username-and-password

CVE-2018-11311 disclosure and exploit for hardcoded FTP credentials (myscada:Vikuk63) in mySCADA myPRO 7 HMI/SCADA software, enabling unauthorized…

embedded-systems-securityexploitationhardware-iot-security+4
128 years ago
CVE-2026-25938-FUXA-Unauthenticated-RCE preview

CVE-2026-25938-FUXA-Unauthenticated-RCE

GitHubjudgedbykira/cve-2026-25938-fuxa-unauthenticated-rce

An explanation and PoC to exploit CVE-2026-25938 Unauthenticated RCE Vulnerability on FUXA

exploitationiot-securitypayload-development+6
112 days ago
CVE-2016-3962-Exploit preview

CVE-2016-3962-Exploit

GitHubsecurifera/cve-2016-3962-exploit

Proof-of-concept exploit for CVE-2016-3962 targeting Meinberg NTP Time Server web interface, with CVE-2016-3989 privilege escalation to root.

embedded-systems-securityexploitationpenetration-testing+3
110 years ago
CVE-2018-7849 preview

CVE-2018-7849

GitHubyanissec/cve-2018-7849

Python exploit for CVE-2018-7849 targeting Schneider Electric Modicon PLCs (M580, M340, Premium, Quantum) for remote exploitation of industrial…

embedded-systems-securityexploitationpenetration-testing+2
12 years ago
CVE-2018-7845 preview

CVE-2018-7845

GitHubyanissec/cve-2018-7845

Python exploit for CVE-2018-7845 targeting Schneider Electric Modicon PLCs (M580, M340, Premium, Quantum) for security testing and vulnerability…

embedded-systems-securityexploitationpenetration-testing+2
12 years ago
CVE-2018-7844 preview

CVE-2018-7844

GitHubyanissec/cve-2018-7844

Python exploit for CVE-2018-7844 targeting Schneider Electric Modicon PLCs (M580, M340, Premium, Quantum) with remote code execution via crafted…

embedded-systems-securityexploitationpenetration-testing+2
2 years ago
CVE-2018-7852 preview

CVE-2018-7852

GitHubyanissec/cve-2018-7852

Python exploit for CVE-2018-7852 targeting Schneider Electric Modicon PLCs (M580, M340, Premium, Quantum) with remote code execution via crafted…

embedded-systems-securityexploitationpenetration-testing+2
2 years ago
CVE-2018-7842 preview

CVE-2018-7842

GitHubyanissec/cve-2018-7842

Python exploit for CVE-2018-7842 targeting Schneider Electric Modicon PLCs, enabling remote start/stop operations on industrial control systems.

embedded-systems-securityexploitationpenetration-testing+3
2 years ago
CVE-2018-7848 preview

CVE-2018-7848

GitHubyanissec/cve-2018-7848

Python exploit for CVE-2018-7848 targeting Schneider Electric Modicon PLCs (M580, M340, Premium, Quantum) with command-line usage for remote…

embedded-systems-securityexploitationpenetration-testing+2
2 years ago
CVE-2015-8299 preview

CVE-2015-8299

GitHubkernoelpanic/cve-2015-8299

Proof-of-concept exploit for a remote buffer overflow vulnerability in KNX ETS4 management software, demonstrating ROP-based code execution via…

binary-exploitationembedded-systems-securityexploitation+4
10 years ago
CVE-2018-7846 preview

CVE-2018-7846

GitHubyanissec/cve-2018-7846

Python exploit for CVE-2018-7846 targeting Schneider Electric Modicon PLCs (M580, M340, Premium, Quantum) for security testing of industrial control…

embedded-systems-securityexploitationpenetration-testing+2
2 years ago
CVE-2018-7854 preview

CVE-2018-7854

GitHubyanissec/cve-2018-7854

Python exploit for CVE-2018-7854 targeting Schneider Electric Modicon M580/M340 PLCs. Executes remote exploitation against industrial control systems…

embedded-systems-securityexploitationpenetration-testing+2
2 years ago
CVE-2023-31716 preview

CVE-2023-31716

GitHubmateustesser/cve-2023-31716

Proof-of-concept exploit for CVE-2023-31716, a Local File Inclusion vulnerability in FUXA SCADA/HMI software versions <= 1.1.12, enabling arbitrary…

embedded-systems-securityexploitationscada-ics-security+2
2 years ago
OpenPLC_v3 preview
Archived

OpenPLC_v3

GitHubthiagoralves/openplc_v3

Open-source Programmable Logic Controller runtime for industrial automation and research, serving as a framework for industrial cybersecurity…

embedded-systems-securityscada-ics-security
1.6k4 months ago
Previous12Next