Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

64 results

Bluetooth-Attacks-CVE-2025-27840

demining/bluetooth-attacks-cve-2025-27840

Bitcoin Cryptanalysis: CVE-2025-27840 Vulnerability in ESP32 Microcontrollers Puts Billions of IoT Devices at Risk via Wi-Fi & Bluetooth

bluetooth-securitycryptographyeducation+7

1 year ago

CVE-2025-34152

kh4sh3i/cve-2025-34152

Go-based PoC exploit for unauthenticated remote code execution on Shenzhen Aitemi M300 Wi-Fi repeaters. Includes a scanner and does not reboot the…

exploitationhardware-securityiot-security+3

21 year ago

PiFinger

wipi-hunter/pifinger

📡🔍Searches for wifi-pineapple traces and calculate wireless network security score 🍍

information-gatheringnetwork-securityvulnerability-analysis+2

1608 years ago

WPAxFuzz

efchatz/wpaxfuzz

A full-featured open-source Wi-Fi fuzzer

exploitationfuzzingvulnerability-analysis+2

2153 months ago

CVE-2024-53027-WIP

v3ilsm1th/cve-2024-53027-wip

Proof-of-concept for CVE-2024-53027, a Wi-Fi beacon Country IE denial-of-service vulnerability affecting Qualcomm WLAN chipsets. Includes educational…

exploitationvulnerability-analysiswireless-security

11 year ago

wifi_leak

dybrkr/wifi_leak

Proof-of-concept exploit for CVE-2018-4084, a WiFi credential leak vulnerability in macOS High Sierra, demonstrating interception of plaintext Wi-Fi…

exploitationpenetration-testingvulnerability-analysis+2

4 years ago

tplink-smartplug

softscheck/tplink-smartplug

TP-Link WiFi SmartPlug Client and Wireshark Dissector

encryption-decryption-toolsfirmware-analysishardware-iot-security+6

1.2k1 year ago

mdk4

aircrack-ng/mdk4

IEEE 802.11 Wi-Fi testing tool for protocol weakness exploitation, including beacon flooding, deauthentication, packet fuzzing, and IDS evasion.…

exploitationfuzzingids-ips-evasion+5

8104 months ago

esp32_esp8266_attacks

matheus-garbelini/esp32_esp8266_attacks

Proof of Concept of ESP32/8266 Wi-Fi vulnerabilties (CVE-2019-12586, CVE-2019-12587, CVE-2019-12588)

embedded-systems-securityexploitationfuzzing+5

8207 years ago

security_articles

luismirandaacebedo/security_articles

Technical articles detailing IoT vulnerability research, including WiFi communication flaws and firmware update weaknesses in connected devices, with…

educationembedded-systems-securityhardware-iot-security+3

1112 months ago

ble_norton_core

embedi/ble_norton_core

Proof-of-concept exploit demonstrating command injection via BLE service in Norton Core Secure WiFi Router (CVE-2018-5234). Includes SSH access setup…

bluetooth-securityexploitationhardware-security+5

318 years ago

Google-Nest-Cam-Bug-Disclosures

jasondoyle/google-nest-cam-bug-disclosures

PoC vulnerability disclosures for consumer IoT cameras, detailing BLE buffer overflow and WiFi disassociation attacks that can take devices offline.

bluetooth-securityembedded-systems-securityexploitation+3

389 years ago

OutOfTune

stra-x/outoftune

Rogue device enrollment tool for Entra ID and Intune MDM. Automates device join, token acquisition, MDM enrollment, and OMA-DM checkin to extract…

authentication-authorizationcloud-securityconfiguration-auditing+9

356 months ago

CVE-2026-78306

wh02m1/cve-2026-78306

Proof-of-concept exploiting DJI drone Bluetooth DUML command injection, sending unauthenticated commands to read credentials, alter Wi-Fi config, and…

bluetooth-securityembedded-systems-securityexploitation+6

92 days ago

CVE-2025-63353

hanianis/cve-2025-63353

A vulnerability in fiberhome GPON ONU HG6145F1 RP4423 allows the device's factory default Wi-Fi password (WPA/WPA2 pre-shared key) to be predicted…

exploitationhardware-securityiot-security+3

1110 months ago

$fracture preview$

fracture

elvira-alec/fracture

FragAttacks WiFi penetration framework — CVE-2020-24586/87/88

dns-analysisexploitationinformation-gathering+7

34 days ago

CVE-2021-1965

sqrtrev/cve-2021-1965

Proof-of-concept exploit for CVE-2021-1965, a WiFi zero-click RCE in Android's MBSSID parsing, causing buffer overflow and device reboot.

exploitationmobile-securitypenetration-testing+2

34 years ago

CVE-2026-20516

dingo97/cve-2026-20516

Write-up and ADB proof of concept for CVE-2026-20516, a confused deputy flaw in MediaTek Android TV MiracastService allowing local Wi-Fi Direct state…

android-securityeducationexploitation+5

17 days ago

Previous 123 4 Next