Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

64 results

broadcom-wps

qkaiser/broadcom-wps

Tools to fingerprint WiFi Access Points running the Broadcom SDK and a list of known affected devices.

embedded-systems-securityfirmware-analysishardware-iot-security+7

302

4 days ago

esp32_esp8266_attacks

matheus-garbelini/esp32_esp8266_attacks

Proof of Concept of ESP32/8266 Wi-Fi vulnerabilties (CVE-2019-12586, CVE-2019-12587, CVE-2019-12588)

embedded-systems-securityexploitationfuzzing+5

8207 years ago

Firebolt-wristphone-vulnerability

yashodhanvivek/firebolt-wristphone-vulnerability

This repository is for Firebolt wristphone vulnerability for CVE ID CVE-2024-30656 suggested by MITRE. Mitre yet to confirm on ID

embedded-systems-securityexploitationhardware-security+3

2 years ago

kr00ker

akabe1/kr00ker

An experimental script PoC for Kr00k vulnerability (CVE-2019-15126)

encryption-decryption-toolsexploitationpenetration-testing+3

666 years ago

r00kie-kr00kie

hexway/r00kie-kr00kie

PoC exploit for the CVE-2019-15126 kr00k vulnerability

educationexploitationwi-fi-auditing+1

2236 years ago

killosx

d4rkcat/killosx

use the Apple CoreText exploit (CVE-2012-3716) and launch an AP to affect all devices within wifi range

exploitationred-teamingvulnerability-analysis+2

2211 years ago

killchain

ruped24/killchain

A unified console to perform the "kill chain" stages of attacks.

command-and-controlexploit-frameworkspayload-generation+5

2083 years ago

CVE-2020-27301-hostapd

chertogun/cve-2020-27301-hostapd

Proof-of-concept exploit for CVE-2020-27301 in hostapd, enabling rogue access point creation to test and demonstrate the vulnerability in WPA2/WPA3…

exploitationpenetration-testingred-teaming+3

14 years ago

awesome-termux-hacking

may215/awesome-termux-hacking

⚡️An awesome list of the best Termux hacking tools

android-securitycurated-resourceseducation+9

4.7k5 years ago

hcxtools

zerbea/hcxtools

A small set of tools to convert packets from capture files to hash files for use with Hashcat or John the Ripper.

hash-analysispassword-crackingpenetration-testing-frameworks+2

2.4k22h 6m ago

Damn-Vulnerable-Drone

nicholasaleks/damn-vulnerable-drone

Damn Vulnerable Drone is an intentionally vulnerable drone hacking simulator based on the popular ArduPilot/MAVLink architecture, providing a…

educationexploitationhardware-iot-security+7

7721 month ago

mediatek-wlan-heap-overflow-cve-2026-20452-filogic-router-rce

hunt-benito/mediatek-wlan-heap-overflow-cve-2026-20452-filogic-router-rce

Proof-of-concept exploit for CVE-2026-20452, a heap-based buffer overflow in MediaTek WLAN AP drivers. Uses scapy to send crafted Wi-Fi management…

binary-exploitationeducationembedded-systems-security+5

34 months ago

frameworks_opt_net_wifi_CVE-2021-0390

uthrasri/frameworks_opt_net_wifi_cve-2021-0390

Android Wi-Fi framework patch for CVE-2021-0390, addressing a remote code execution vulnerability in the Wi-Fi subsystem.

android-securityexploitationvulnerability-analysis+2

12 years ago

CVE-2025-69822-Atomberg_Erica_SmatFan_Security_Assessment

cipherx1802/cve-2025-69822-atomberg_erica_smatfan_security_assessment

This vulnerability impacts device availability and reliable operation of Atomberg Erica Smart Fan(Firmware Version 1.0.36). The issue arises due to a…

exploitationhardware-iot-securityiot-security+3

9 months ago