Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

509 results

CVE-2018-13341

rajchowdhury240/cve-2018-13341

This Tool Aims to Exploit the CVE-2018-13341

embedded-systems-securityexploitationhardware-iot-security+3

5 years ago

CVE-2023-36143

robintrigon/cve-2023-36143

Maxprint Maxlink 1200G v3.4.11E has an OS command injection vulnerability in the "Diagnostic tool" functionality of the device.

embedded-systems-securityexploitationiot-security+2

3 years ago

Archived

aztarna

aliasrobotics/aztarna

aztarna, a footprinting tool for robots.

embedded-systems-securityhardware-iot-securityinformation-gathering+7

923 months ago

Archived

NINJA-PingU

owasp/ninja-pingu

High-performance network scanner for large-scale IP and port scanning with service identification, embedded device detection, and vulnerability…

embedded-systems-securityinformation-gatheringnetwork-mapping+3

777 years ago

Archived

apparatus

or3stis/apparatus

A graphical security analysis tool for IoT networks

iot-securitynetwork-securityvulnerability-analysis

1997 years ago

ufuzz

phikshun/ufuzz

Universal Plug and Fuzz

embedded-systems-securityfuzzingiot-security+3

4112 years ago

EDIDFuzzer

nccgroup/edidfuzzer

EDID (Enhanced Display Identification Data) Fuzzer

binary-analysisembedded-systems-securityfuzzing+2

1912 years ago

Puma6Fail

lunnova/puma6fail

CVE-2017-5693 Denial of service vulnerability in Puma 6 modems

embedded-systems-securityexploitationhardware-security+2

162 years ago

bad-dicom

kosmokato/bad-dicom

Explotation framework for CVE-2019-11687

binary-exploitationembedded-systems-securityexploitation+3

61 year ago

CVE-2018-9995-DVR-Credentials-Extractor

f7p-h4nn1b4l/cve-2018-9995-dvr-credentials-extractor

This project demonstrates the publicly disclosed CVE-2018-9995 vulnerability found in multiple embedded DVR devices.

authenticationembedded-systems-securityexploitation+5

13 months ago

RMASmoke

fwnavy/rmasmoke

RMASmoke main repo. CVE-2025-1122

binary-exploitationembedded-systems-securityexploitation+3

22 years ago

cve-2015-1187-dir820l-firmware-reverse-engineering

christopher-leese/cve-2015-1187-dir820l-firmware-reverse-engineering

Static firmware reverse engineering of CVE-2015-1187: unauthenticated command injection in D-Link DIR-820L. MIPS root filesystem extraction with…

embedded-systems-securityexploitationfirmware-analysis+5

2 months ago

efiXplorer

rehints/efixplorer

IDA plugin and loader for UEFI firmware analysis and reverse engineering automation

binary-analysisembedded-systems-securityfirmware-analysis+5

1.1k1 day ago

CVE-2026-95675

d6fault/cve-2026-95675

Python PoC exploiting CVE-2026-95675, an unauthenticated root command injection in D-Link DAP-1360 RevB firmware via a hardcoded auth-bypass and the…

embedded-systems-securityexploitationfirmware-analysis+6

11 month ago

Intel-Linux-Processor-Microcode-Data-Files

intel/intel-linux-processor-microcode-data-files

Official Intel microcode data files for updating processor firmware to mitigate security vulnerabilities and address functional issues on Linux…

defensive-toolsembedded-systems-securityfirmware-analysis+2

8071 month ago

pwn-hisilicon-dvr

tothi/pwn-hisilicon-dvr

Proof-of-concept exploit and vulnerability disclosure for HiSilicon hi3520d DVR/NVR devices. Demonstrates RCE via web interface, backdoor…

binary-analysisembedded-systems-securityexploitation+8

3833 years ago

FwHunt

binarly-io/fwhunt

The Binarly Firmware Hunt (FwHunt) rule format was designed to scan for known vulnerabilities in UEFI firmware.

binary-analysisembedded-systems-securityfirmware-analysis+3

2482 years ago

fwhunt-scan

binarly-io/fwhunt-scan

Tools for analyzing UEFI firmware and checking UEFI modules with FwHunt rules

binary-analysisembedded-systems-securityfirmware-analysis+3

2431 year ago

Previous 123…29 Next