Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

37 results

ESP32-BlueJammer

emenstanougat/esp32-bluejammer

ESP32 and nRF24 based 2.4GHz jammer that disrupts Bluetooth, BLE, WiFi, and RC channels via noise and packet flooding for controlled security testing.

bluetooth-securityeducationembedded-systems-security+6

8.7k

7 months ago

fluxion

fluxionnetwork/fluxion

Automated WPA/WPA2 phishing tool that captures handshakes, spawns a rogue access point, and lures users to a captive portal to harvest credentials…

penetration-testingphishingred-teaming+3

6.0k1 month ago

Politician

0ldev/politician

Modern WiFi auditing library for ESP32 using advanced 802.11 techniques. Captures WPA/WPA2/WPA3 handshakes via PMKID extraction and CSA injection…

embedded-systems-securityfuzzinghardware-security+6

982h 38m ago

aircrack-ng

aircrack-ng/aircrack-ng

Complete suite for WiFi network security auditing, including packet capture, injection attacks, deauthentication, fake AP creation, and WEP/WPA PSK…

network-securitypacket-sniffing-analysispassword-cracking+2

7.8k19 days ago

openwisp-controller

openwisp/openwisp-controller

Network and WiFi controller: provisioning, configuration management and updates, (pull via openwisp-config or push via SSH), x509 PKI management and…

identity-access-managementiot-securitynetwork-access-control+3

79215h 53m ago

GhostTunnel

pegasuslab/ghosttunnel

Covert backdoor transmission tool using 802.11 probe request and beacon frames for isolated network attacks. Delivers payloads via HID devices,…

command-and-controlpost-exploitationred-teaming+1

3337 years ago

chapcrack

moxie0/chapcrack

Parses and decrypts MS-CHAPv2 handshakes from PPTP VPN and WPA2 Enterprise captures, extracting credentials for offline cracking via CloudCracker.

encryption-decryption-toolsnetwork-securitypacket-sniffing-analysis+3

38514 years ago

awesome-connected-things-sec

v33ru/awesome-connected-things-sec

A Curated list of Security Resources for all connected things

ctfcurated-resourceseducation+9

3.6k12 days ago

KTO

ymsniper/kto

Automated Wi-Fi deauthentication tool that continuously scans for clients on a target SSID and kicks non-whitelisted devices. Features whitelist…

exploitationids-ips-evasionnetwork-security+4

2691 month ago

CVE-2026-21006-Zigbee-Light-Link-Factory-Reset-Exploit

george0papasotiriou/cve-2026-21006-zigbee-light-link-factory-reset-exploit

Simulated Zigbee Light Link (ZLL) factory reset exploit for CVE-2026-21006, demonstrating unauthenticated TouchLink command injection that wipes…

embedded-systems-securityexploitationhardware-iot-security+3

2 months ago

365cam-stream

inartin/365cam-stream

Local streaming tool for cheap WiFi cameras that bypasses cloud services and phone apps. Discovers cameras on your network, authenticates via PPPP…

hardware-iot-securityiot-securitynetwork-security+3

187 months ago

iOS-Attack-Chain-CVE-2025-31200-CVE-2025-31201

jgoyd/ios-attack-chain-cve-2025-31200-cve-2025-31201

CVE-2025-31200 is a zero-day, zero-click RCE in iOS CoreAudio’s AudioConverterService, triggered by a malicious audio file via iMessage/SMS.…

binary-exploitationbluetooth-securityexploitation+8

2095 months ago

RF-CHAOS

scramblr/rf-chaos

RF CHAOS is an Android App That Is Designed To Cause Chaos via All RF Adapters Possible - Enjoy!

bluetooth-securityexploitationinformation-gathering+7

407 months ago

openhaystack

seemoo-lab/openhaystack

Build your own 'AirTags' 🏷 today! Framework for tracking personal Bluetooth devices via Apple's massive Find My network.

bluetooth-securitycryptographyeducation+5

13.9k2 months ago

logitech-ipc-protocol

saimanish1/logitech-ipc-protocol

Reverse-engineered Logi Options+ agent IPC protocol. Switch Logitech multi-host devices programmatically via Unix socket (macOS) or named pipe…

bluetooth-securityeducationembedded-systems-security+5

191 month ago

Archived

btlejuice

virtualabs/btlejuice

BLE Man-in-the-Middle framework that intercepts, replays, and modifies GATT traffic between Bluetooth Smart devices and mobile apps via a web-based…

bluetooth-securityimpersonation-toolsiot-security+4

8 years ago

GHOST

razkom/ghost

ESP32-S3 firmware for standalone WPA/WPA2 handshake capture and deauthentication testing via TFT UI, with pcap download over WiFi AP.

educationembedded-systems-securityhardware-iot-security+3

286 months ago

sony-vp-extract

helgesverre/sony-vp-extract

Decrypt and extract voice guidance MP3 prompts from Sony WH-1000XM4 encrypted voice packs. AES key extracted via Bluetooth firmware dump of the…

bluetooth-securitycryptographyembedded-systems-security+5

313 months ago

Previous12 3 Next