KitPloit - PenTest Tools!

8cryptdo

Kitploit — Mon, 28 Sep 2026 17:37:27 +0000

Reverse-engineered docs and tools for 8BitDo firmware encryption

DeadMatter

Kitploit — Mon, 28 Sep 2026 16:37:25 +0000

Offset Independent Credential Extraction Tool

PAGASUS-PRO

Kitploit — Mon, 28 Sep 2026 15:37:11 +0000

Python ADB-based Android device management and security audit toolkit with an interactive menu for root detection, permission dumps, debuggable app scanning, log and contact extraction.

bifrost

Kitploit — Mon, 28 Sep 2026 14:36:40 +0000

High-performance HTTP/HTTPS/SOCKS5 MITM proxy in Rust with TLS interception, rule-based request rewriting, traffic capture, breakpoints, script sandbox and request replay via Web UI.

badbox-h713-projector

Kitploit — Mon, 28 Sep 2026 13:35:55 +0000

Analysis and cleanup guide for BadBox malware on Allwinner H713 Android projectors: ADB access, infection proof, firmware backup, dropper removal, and verification.

FlowName

Kitploit — Mon, 28 Sep 2026 12:35:36 +0000

Next-generation JavaScript identifier recovery with LLMs.

CyberCodex

Kitploit — Mon, 28 Sep 2026 11:35:34 +0000

Autonomous 22-Source Zero-Cost OSINT, Data Breach/Leak, Infostealer & Threat Intelligence CLI Engine + Unbiased Cyber Warfare Encyclopedia (11 Languages, Zero Dependencies)

gEnclave

Kitploit — Mon, 28 Sep 2026 10:35:28 +0000

Centralized, TPM 2.0 hardware-backed cryptographic identity enclave and multi-protocol bridge for Linux (FIDO2/CTAP2 WebAuthn Passkeys, OpenSSH Agent, GnuPG LibAssuan, age-plugin, encrypted config store).

DFIR-Companion

Kitploit — Mon, 28 Sep 2026 09:35:07 +0000

DFIR forensics companion server + capture extension

Red-Team-GOAD-Lab-Proxmox

Kitploit — Mon, 28 Sep 2026 08:35:06 +0000

Build guide for Red Teaming home lab. GOAD lab setup in Proxmox and pfSense, Operator/C2 and Redirectors.

engagement-mgr

Kitploit — Mon, 28 Sep 2026 07:34:58 +0000

Engagement Manager is a web application for tracking offensive security engagements. It features a modern UI, built with Next.js, Prisma, and PostgreSQL.

ablation

Kitploit — Mon, 28 Sep 2026 06:34:27 +0000

Ablation is a reverse engineering framework

bucketbuster

Kitploit — Mon, 28 Sep 2026 05:34:16 +0000

Storage Bucket OSINT Tool

akca

Kitploit — Mon, 28 Sep 2026 04:33:47 +0000

AKCA Advanced Web Security Scanner

trawl

Kitploit — Mon, 28 Sep 2026 03:33:33 +0000

Self-hosted scraping engine — bypasses any JS challenge & captcha: Cloudflare, Turnstile, reCAPTCHA, hCaptcha, GeeTest. FlareSolverr & Byparr alternative and drop-in replacement for your *arr stack.

reSolver

Kitploit — Mon, 28 Sep 2026 02:33:15 +0000

This extension integrates popular CAPTCHA solution services into BurpSuite to process different types of CAPTCHAs without manual intervention.

house_of_apple_2

Kitploit — Sun, 27 Sep 2026 09:54:15 +0000

House of Apple 2 walkthrough on glibc 2.43 using GDB. Reproducible sandbox, FSOP, stack pivoting and ROP

EmbedXPL-Forge

Kitploit — Sun, 27 Sep 2026 08:53:45 +0000

Embedded Device Security Assessment Framework — 700 modules, 350 CVEs, 55 vendors, APT Group Engine. Covers routers, IP cameras, GPON ONTs, ISP CPEs, IoT/embedded edge.

TrueVerdict

Kitploit — Sun, 27 Sep 2026 07:53:16 +0000

Zero-dependency Windows PE provenance and false-positive reduction engine (Embedded Authenticode + OS Security Catalogs, Rich Header ROL32 verification, Reproducible Build detection, and differential section entropy).

binary-cartography

Kitploit — Sun, 27 Sep 2026 06:52:47 +0000

Technical webinars on reverse engineering, malware analysis, and software protection.

CnaEmulator

Kitploit — Sun, 27 Sep 2026 05:52:33 +0000

CnaEmulator is a standalone, general-purpose development, emulation, and testing harness for Cobalt Strike Aggressor Scripts (.cna)

RC4Decryption

Kitploit — Sun, 27 Sep 2026 04:52:17 +0000

Abuses the Microsoft-signed tlscsp.dll LOLBin to run RC4 encrypt/decrypt via LsCsp_EncryptHwid, patching the hardcoded key in memory for BYOK tradecraft.

polychrome-rs

Kitploit — Sun, 27 Sep 2026 03:52:16 +0000

A PoC on how to use a Compute Shader as Payload

SOCMIntelligence

Kitploit — Sun, 27 Sep 2026 02:51:40 +0000

A modular OSINT & SOCMINT framework for social media intelligence, investigation, and public data analysis.

reverse-engineering-browser

Kitploit — Sun, 27 Sep 2026 01:51:33 +0000

Brave-based browser harness for reverse engineering.

Purple-Team-Automation

Kitploit — Sun, 27 Sep 2026 00:51:17 +0000

Automated adversary emulation (Caldera) against an AD lab to validate Sigma detection coverage and map results to MITRE ATT&CK.

wordpress-cve-scanner

Kitploit — Sat, 26 Sep 2026 23:51:01 +0000

Scan your WordPress core, themes and plugins for known CVEs from the command line. Open source, auditable, privacy-first — powered by the ValtersIT CVE API.

Prompt-Injection-in-the-Wild

Kitploit — Sat, 26 Sep 2026 22:50:28 +0000

Tracker of publicly reported prompt-injection techniques, broken down by delivery method, encoding, and propagation behavior, with confirmed models, sources, and MITRE ATLAS tags.

XXERipper

Kitploit — Sat, 26 Sep 2026 21:50:20 +0000

Production-grade XXE scanner that combines statistical baselining, differential parser fingerprinting, and OOB confirmation to find what naive scanners miss. 30+ attack techniques, credential extraction with paste-ready exploit snippets, and CI/CD-ready SARIF output.

SpectralCovert

Kitploit — Sat, 26 Sep 2026 20:50:11 +0000

Detects network covert channels using Shannon entropy and Sarle's bimodality coefficient to flag encrypted ICMP/TCP payload exfiltration and timing-based leaks.

file-notification-attacks

Kitploit — Sat, 26 Sep 2026 19:49:58 +0000

Research artifacts for file-notification side-channel attacks on Linux, Windows, and macOS, demonstrating inotify/FSEvents leakage, keystroke timing, and website fingerprinting.

T-Backdoor

Kitploit — Sat, 26 Sep 2026 18:49:43 +0000

Research code implementing T-Backdoor, temporal-trigger backdoor attacks on spiking neural networks using rate, latency, and jitter triggers without spatial perturbation.

aegis-audio-defense

Kitploit — Sat, 26 Sep 2026 17:49:32 +0000

Defense framework that keeps audio-language models frozen and adds a mid-layer risk gate with late-layer safety adapters to block audio jailbreaks at inference.

WordList

Kitploit — Sat, 26 Sep 2026 16:49:24 +0000

Custom wordlist, updated regularly

libprocesshider

Kitploit — Sat, 26 Sep 2026 15:49:20 +0000

Hide a process under Linux using the ld preloader (https://sysdig.com/blog/hiding-linux-processes-for-fun-and-profit/)

unwaf

Kitploit — Sat, 26 Sep 2026 14:48:56 +0000

Unwaf is a Go tool designed to help identify WAF bypasses using passive techniques. It automates the process of discovering the real origin IP behind a WAF/CDN by combining multiple discovery methods and verifying candidates through HTML similarity comparison, SSL certificate fingerprinting, and HTTP header analysis.

findcdn

Kitploit — Sat, 26 Sep 2026 13:48:37 +0000

findCDN is a tool created to help accurately identify what CDN a domain is using.

waf-detector

Kitploit — Sat, 26 Sep 2026 12:48:11 +0000

🛡️ High-performance WAF & CDN detection tool. Identify protection layers (Cloudflare, Akamai, AWS, Fastly, and more), run effectiveness and enforcement tests with evasion payloads, and generate posture reports. Built in Rust 🦀.

cdn-ip-scanner

Kitploit — Sat, 26 Sep 2026 11:48:00 +0000

Web-based scanner that discovers fast, low-latency CDN IP addresses from Cloudflare, Fastly and other providers using multi-threaded 5-attempt verification and V2Ray config testing.

FUCK-CDN

Kitploit — Sat, 26 Sep 2026 10:47:52 +0000

一键绕过CDN获取真实IP

midonescanner-android

Kitploit — Sat, 26 Sep 2026 09:47:37 +0000

Scanner CDN Detection, Real Bandwidth Test, Throttle Detection

R2Socks

Kitploit — Sat, 26 Sep 2026 08:47:33 +0000

SOCKS5 proxy tunneled through Cloudflare R2 object storage, with Python and dependency-free C++ agents relaying TCP traffic via encrypted R2 objects for covert access.

waybend

Kitploit — Sat, 26 Sep 2026 07:47:13 +0000

Self-hosted SSRF redirect, payload, callback, and DNS workbench

Darkcloak

Kitploit — Sat, 26 Sep 2026 06:46:45 +0000

Linux process identity cloaking tool that spoofs comm, argv, cmdline, environ, exe path, and VMAs via an 11-phase prctl pipeline to impersonate another process.

Sandroid_Dexray-Intercept

Kitploit — Sat, 26 Sep 2026 05:46:12 +0000

A Android malware analysis tool that creates comprehensive runtime profiles by hooking into application behavior across cryptography, file systems, databases, network communications, and process operations.

Hexestra

Kitploit — Sat, 26 Sep 2026 04:45:53 +0000

Hexestra is an AI-native penetration testing IDE where human operators and the AI Agent work on the same operational surface—sharing the browser, terminal, traffic, shells, asset graph, task plan, evidence, and controls.

flipper-mcp

Kitploit — Sat, 26 Sep 2026 03:45:33 +0000

AI-powered MCP server for Flipper Zero. Control SubGHz, NFC, RFID, IR, BLE, GPIO, and more over WiFi using Claude or any MCP client.

ReflectivePluginLoader

Kitploit — Sat, 26 Sep 2026 02:45:19 +0000

A minimal PE mapper that loads DLLs straight from memory and calls into a clean plugin interface, no LoadLibrary needed.

SmuggleMyPayload

Kitploit — Sat, 26 Sep 2026 01:45:08 +0000

SmuggleMyPayload generates HTML pages that embed and reconstruct files client-side using JavaScript. The toolkit offers multiple HTML Smuggling techniques, payload encoding options, JavaScript variations, and pre-built HTML templates.

RLCDAlignBench

Kitploit — Sat, 26 Sep 2026 00:44:52 +0000

RLCDAlignBench: 44 alignment-failure detection benchmarks and code for 'Just Ask Jev' (RLCD zero-shot detector of AI alignment failures)