Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

311 results

CVE-2025-70994

ktauchathuranga/cve-2025-70994

Passive RF signal analyzer for EV1527 fixed-code protocol, demonstrating CVE-2025-70994 replay vulnerability in Yadea T5 keyless entry systems.…

educationembedded-systems-securityexploitation+5

3 months ago

RustyInjector

xg3nesis/rustyinjector

Rust implementation of Marc Newlin's keystroke injection proof of concept (CVE-2023-45866).

bluetooth-securityeducationexploitation+2

11 year ago

CVE-2021-27289

themalwareguardian/cve-2021-27289

CVE-2021-27289: Playback Protection Bypass on Ksix Zigbee devices

educationexploitationhardware-iot-security+3

11 year ago

eWeLink-QR-Code

salgio/ewelink-qr-code

This repo describes a vulnerability affecting the QR code based pairing process of the eWeLink IoT devices (CVE-2020-12702).

cryptographyexploitationhardware-iot-security+3

15 years ago

Learn.BlueJam

damiansuess/learn.bluejam

Learn what is BlueJam CVE-2017-0781

bluetooth-securityctfeducation+3

14 years ago

eero-zero-length-ipv6-options-header-dos

nomis/eero-zero-length-ipv6-options-header-dos

eeroOS Ethernet Interface Denial of Service Vulnerability (CVE-2023-5324)

exploitationfuzzinghardware-iot-security+3

12 years ago

CVE-2024-53027-WIP

ladyg00se/cve-2024-53027-wip

Work in Progress for POC

bluetooth-securityeducationexploitation+5

11 year ago

SpaceX-Starlink-Router-Gen-2-XSS

yoshida-git-ai/spacex-starlink-router-gen-2-xss

CVE-2023-49965 | SpaceX / Starlink Router Gen 2 XSS

exploitationhardware-iot-securityiot-security+3

12 years ago

CVE-2020-10135-BIAS

m4rm0k/cve-2020-10135-bias

CVE 2020-10135 a.k.a BIAS (Bluetooth Impersonation Attack)

bluetooth-securityexploitationimpersonation-tools+3

6 years ago

CVE-2019-13361

lodi-g/cve-2019-13361

Smanos W100 1.0.0 devices have Insecure Permissions, exploitable by an attacker on the same Wi-Fi network.

exploitationiot-securitypenetration-testing+2

7 years ago

CVE-2004-2549

alt3kx/cve-2004-2549

Nortel Wireless LAN Access Point 2200 Series - Denial of Service

exploitationpenetration-testingvulnerability-analysis+1

8 years ago

CVE-2020-10882

lnversed/cve-2020-10882

cve based on vulnerable cisco's Archer A7 routers

embedded-systems-securityexploitationhardware-security+3

3 years ago

BLE-TPMS

amirasaiyad/ble-tpms

CVE-2024-39081. BLE TPMS data manipulation over bluetooth communication.

bluetooth-securityexploitationiot-security+3

1 year ago

ble_connect_rust

saruman9/ble_connect_rust

Norton Core Secure WiFi PoC (CVE-2018-5234) on Rust.

bluetooth-securityexploitationiot-security+3

6 years ago

Archived

AR150-WiFiPineapple

xchwarze/ar150-wifipineapple

Converting your AR150 to a Wifi Pineapple NANO

embedded-systems-securityfirmware-analysishardware-hacking+5

1452 years ago

Archived

WiFi-Pumpkin-deprecated

p0cl4bs/wifi-pumpkin-deprecated

DEPRECATED, wifipumpkin3 -> https://github.com/P0cL4bs/wifipumpkin3

captcha-bypasscommand-and-controldns-analysis+9

3.2k6 years ago

Archived

IoT-PT-v1

iot-ptv/iot-pt-v1

A Virtual environment for Pentesting IoT Devices

bluetooth-securityeducationembedded-systems-security+8

4451 year ago

flipperzero-firmware

flipperdevices/flipperzero-firmware

Flipper Zero firmware source code

bluetooth-securityembedded-systems-securityhardware-hacking+6

16.5k1 day ago

Previous 1…111213…18 Next