KitPloit - PenTest Tools!

apk-medit v0.2.7

Kitploit — Mon, 21 Sep 2026 23:32:30 +0000

memory search and patch tool on debuggable apk without root & ndk

GPOZaurr v1.1.11

Kitploit — Mon, 21 Sep 2026 22:52:06 +0000

Group Policy Eater is a PowerShell module that aims to gather information about Group Policies but also allows fixing issues that you may find in them.

KTO v3.0.1

Kitploit — Mon, 21 Sep 2026 22:11:37 +0000

Automated Wi-Fi deauthentication tool that continuously scans for clients on a target SSID and kicks non-whitelisted devices. Features whitelist support, mesh/multi-AP handling, PMF detection, and experimental WPA2 PMF bypass via EAPOL extraction.

v2ray-core v5.54.0

Kitploit — Mon, 21 Sep 2026 20:51:09 +0000

A platform for building proxies to bypass network restrictions.

mobsfscan v1.0.1

Kitploit — Mon, 21 Sep 2026 20:11:09 +0000

mobsfscan is a static analysis tool that can find insecure code patterns in your Android and iOS source code. Supports Java, Kotlin, Swift, and Objective C Code. mobsfscan uses MobSF static analysis rules and is powered by semgrep and libsast pattern matcher.

DockSec v2026.9.21

Kitploit — Mon, 21 Sep 2026 19:30:40 +0000

AI-powered Docker security scanner that explains vulnerabilities in plain English. An OWASP Lab Project.

ironcurtain memory-mcp-server/v0.2.1

Kitploit — Mon, 21 Sep 2026 18:10:09 +0000

Policy-enforced runtime for autonomous AI agents. Compiles plain-English constitutions into deterministic rules that mediate all tool calls through allow/deny/escalate decisions, with V8 sandboxing and Docker isolation.

vopono v1.0.2

Kitploit — Mon, 21 Sep 2026 17:30:01 +0000

Run applications through VPN tunnels with temporary network namespaces

KubeArmor v1.7.6-rc1

Kitploit — Mon, 21 Sep 2026 16:49:42 +0000

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).

owasp-ctf-in-a-box

Kitploit — Mon, 21 Sep 2026 16:09:35 +0000

Self-hosted OWASP CTF kit: one box, one free GitHub org, no cloud dependencies

GitVault

Kitploit — Mon, 21 Sep 2026 15:29:26 +0000

An Obsidian Vault structure with ressources for new cyber security learners.

ida-pro-mcp

Kitploit — Mon, 21 Sep 2026 14:44:23 +0000

Local-first, deterministic MCP server for IDA Pro/Home: 109 strict-schema reverse-engineering operations, evidence-backed findings, and policy-gated IDB edits.

hol-guard

Kitploit — Mon, 21 Sep 2026 13:59:14 +0000

Open-source antivirus for AI agents: block risky tools, secret access, prompt injection, malicious packages, MCP servers, plugins, and skills at runtime.

dnspython

Kitploit — Mon, 21 Sep 2026 13:13:43 +0000

a powerful DNS toolkit for python

JavaSecLab

Kitploit — Mon, 21 Sep 2026 12:23:20 +0000

JavaSecLab is a comprehensive Java vulnerability platform｜ JavaSecLab是一款综合型Java漏洞平台，提供相关漏洞缺陷代码、修复代码、漏洞场景、审计SINK点、安全编码规范，覆盖多种漏洞场景，友好用户交互UI……

owasp-ctf

Kitploit — Mon, 21 Sep 2026 11:23:13 +0000

Self-hosted OWASP CTF kit: one box, one free GitHub org, no cloud dependencies

holos v0.6.3

Kitploit — Mon, 21 Sep 2026 10:28:12 +0000

Declarative KVM/QEMU VM orchestration tool using YAML compose files. Manages multi-VM stacks with cloud-init, SSH, PCI passthrough, and image verification without libvirt or XML.

node9-proxy v2.16.2

Kitploit — Mon, 21 Sep 2026 09:28:04 +0000

IAM for your AI agents. Set what Claude Code, Codex, Gemini, Cursor and any MCP server are allowed to do, review risky actions before they run, and keep every action on the record.

JShunter v0.8

Kitploit — Mon, 21 Sep 2026 08:27:49 +0000

jshunter is a command-line tool designed for analyzing JavaScript files and extracting endpoints. This tool specializes in identifying sensitive data, such as API endpoints and potential security vulnerabilities, making it an essential resource for and bug bounty hunters and security researchers.

pwndbg v2026.09.15

Kitploit — Mon, 21 Sep 2026 07:27:34 +0000

Exploit Development and Reverse Engineering with GDB & LLDB Made Easy

Zircolite v4.0.0

Kitploit — Mon, 21 Sep 2026 06:27:26 +0000

A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs

conpot v1.0.0

Kitploit — Mon, 21 Sep 2026 05:32:00 +0000

ICS/SCADA honeypot

APT-Hunter V4.0

Kitploit — Mon, 21 Sep 2026 04:36:30 +0000

APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity

phantom-frida v17.16.4-20260920-run41.1

Kitploit — Mon, 21 Sep 2026 03:36:22 +0000

Build anti-detection Frida server from source. ~90 patches covering 16 detection vectors, weekly auto-builds with random names.

netwatch v0.32.3

Kitploit — Mon, 21 Sep 2026 02:36:13 +0000

Real-time network diagnostics in your terminal. One command, zero config, instant visibility.

brave-browser v1.98.12

Kitploit — Mon, 21 Sep 2026 01:35:48 +0000

Brave browser for Android, iOS, Linux, macOS, Windows.

Antiphishing v35456910988

Kitploit — Mon, 21 Sep 2026 00:35:22 +0000

Advanced Phishing Protection: Suricata rulesets open and free

TCPViewer v1.18.0

Kitploit — Sun, 20 Sep 2026 23:35:20 +0000

The best-in-class macOS app to See every packet clearly on your Mac. Alternative to Wireshark

zi v2.2.1

Kitploit — Sun, 20 Sep 2026 21:34:47 +0000

✨ A Swiss Army Knife for Zsh - Unix Shell

uBlock v1.75.1b0

Kitploit — Sun, 20 Sep 2026 20:34:26 +0000

Wide-spectrum content blocker for browsers that blocks ads, trackers, coin miners, and malicious sites using filter lists and customizable privacy rules.

adnullenum

Kitploit — Sun, 20 Sep 2026 19:33:55 +0000

One-pass anonymous Active Directory enumeration over SAMR and LSARPC — null session, no credentials, with structured reusable output.

irdoc-app

Kitploit — Sun, 20 Sep 2026 18:33:54 +0000

Incident Response Documentation Platform

discord-crasher

Kitploit — Sun, 20 Sep 2026 17:33:24 +0000

Some bugs found via binary instrumentation and fuzzing

ntlmscout

Kitploit — Sun, 20 Sep 2026 16:32:54 +0000

Unauthenticated NTLM endpoint reconnaissance tool that decodes Type-2 challenges across HTTP, SMB, MSSQL, SMTP, IMAP, POP3, NNTP, LDAP, and RDP to extract AD details and internal IPs.

cyberbro v0.15.0

Kitploit — Sun, 20 Sep 2026 15:32:31 +0000

A simple application that extracts your IoCs from garbage input and checks their reputation using multiple CTI services.

boha v0.20.2

Kitploit — Sun, 20 Sep 2026 14:32:15 +0000

Crypto bounties, puzzles and challenges data library

Decepticon v1.1.44

Kitploit — Sun, 20 Sep 2026 13:32:06 +0000

Autonomous AI-driven red team agent that executes realistic attack chains—reconnaissance, exploitation, privilege escalation, lateral movement, and C2—with hardened sandbox isolation and MITRE ATT&CK-mapped engagement planning.

kontext-cli v1.8.1

Kitploit — Sun, 20 Sep 2026 12:31:53 +0000

Secure agents in seconds with permissions enforced at runtime.

ZX-DDoS

Kitploit — Sun, 20 Sep 2026 11:31:20 +0000

ZX-DDoS is a Distributed Denial of Service (DDoS) tool, written in Python, to help understand the mechanics of network stress testing and security evaluation. Use only in controlled and legal environments.

webanalyze v0.4.6

Kitploit — Sun, 20 Sep 2026 10:31:14 +0000

Port of Wappalyzer (uncovers technologies used on websites) to automate mass scanning.

miasma v0.4.3

Kitploit — Sun, 20 Sep 2026 09:30:51 +0000

Trap AI web scrapers in an endless poison pit.

macsurf v2.3

Kitploit — Sun, 20 Sep 2026 08:30:48 +0000

A modern web browser for Classic Mac OS 9 PowerPC. Real CSS3, ES5 JavaScript, native HTTPS. Built with CodeWarrior on the Carbon API.

FMD Android v0.17.0

Kitploit — Sun, 20 Sep 2026 07:30:26 +0000

Find your device and control it remotely. Works over SMS, instant messengers, or FMD Server's web interface. A secure open source alternative to Google's Find Hub.

BrowserBox v19.0.3

Kitploit — Sun, 20 Sep 2026 06:30:02 +0000

💚🇺🇸🗽Secure remote browsing anywhere, any way you like it.

haruspex v0.10.0

Kitploit — Sun, 20 Sep 2026 04:29:10 +0000

Vulnerability research assistant that extracts pseudocode from the IDA Hex-Rays decompiler.

pybatfish v2026.09.17

Kitploit — Sun, 20 Sep 2026 03:29:03 +0000

Python client for Batfish, a network configuration analysis tool that validates security, reliability, and compliance by modeling network behavior from device configs before deployment.

XcInspector

Kitploit — Sun, 20 Sep 2026 02:28:57 +0000

A macOS app to scan Xcode project files for possible security issues.

mythic_telegram_profile

Kitploit — Sun, 20 Sep 2026 01:28:25 +0000

Telegram C2 profile for Mythic

CyberChef v11.5.0

Kitploit — Sun, 20 Sep 2026 00:28:21 +0000

The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis

rustinel v1.8.0-rc.1

Kitploit — Sat, 19 Sep 2026 23:28:16 +0000

Open-source endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.