KitPloit - PenTest Tools!

nuclei — Updated!

Kitploit — Sat, 07 Nov 2026 23:40:53 +0000

Fast YAML-based vulnerability scanner with template-driven detection engine for automated security testing across web apps, APIs, networks, DNS, and cloud infrastructure.

HyperLoader

Kitploit — Sat, 07 Nov 2026 22:40:21 +0000

Hypervisor isolated shellcode execution environment. Maps host process memory into a guest vCPU, intercepts DLL execute faults, and proxies API calls to the host, Stardust PIC shellcode compatible

Windows-DNS-Policy-Manager

Kitploit — Sat, 07 Nov 2026 21:39:54 +0000

Browser-based GUI for Windows Server DNS — policies, zones, records, DNSSEC, DNS over HTTPS, and blocklists. Next.js frontend + PowerShell bridge, 8 scenario wizards, and an MCP server for AI agents. Works offline as a PowerShell command generator.

kodeblue

Kitploit — Sat, 07 Nov 2026 20:39:25 +0000

SOC, incident response and SecOps for Linux servers in one agent: learns each host, watches it with zero-token sensors, triages with a small model, and contains attacks under a root-owned policy. Optional hub for fleets.

Aliens_eye v2.8.0

Kitploit — Sat, 07 Nov 2026 15:11:12 +0000

AI powered OSINT engine to discover and map 840+ social media identities across the web

ecapture v2.10.0

Kitploit — Sat, 07 Nov 2026 11:10:42 +0000

Capture SSL/TLS plaintext with eBPF—no MITM proxy or custom CA installation. Supports Linux and Android on x86_64\arm64 and loong64.

dtls

Kitploit — Sat, 07 Nov 2026 08:12:02 +0000

Native Go implementation of DTLS 1.2 and 1.3 with ECDHE and PSK key exchange, AEAD ciphers, connection IDs, session resumption, 0-RTT, and Encrypted Client Hello.

ftpm_attack

Kitploit — Sat, 07 Nov 2026 07:11:24 +0000

Code and data artifacts for our paper: "faulTPM: Exposing AMD fTPMs’ Deepest Secrets"

system_prompts_leaks — Updated!

Kitploit — Sat, 07 Nov 2026 07:10:13 +0000

Curated collection of extracted system prompts from major AI chatbots including Claude, ChatGPT, Gemini, Grok, and Copilot. Updated regularly with new model releases.

LUCX_network_traffic_parser

Kitploit — Sat, 07 Nov 2026 06:11:21 +0000

A framework for network traffic analysis and feature extraction.

FuFuFaFa

Kitploit — Sat, 07 Nov 2026 05:10:57 +0000

Framework for Unified Flaw & Fault Auditing The ultimate AWS Cloud Security Audit Framework that makes security auditing so easy, you can do it even when you're sleepy!

Obscura

Kitploit — Sat, 07 Nov 2026 04:10:35 +0000

Threat Hunter & Attack Surface Management Platform A single static Go binary for passive & semi-offensive reconnaissance, correlation, risk scoring, and continuous monitoring.

fluxion v6.39

Kitploit — Sat, 07 Nov 2026 03:10:26 +0000

Automated WPA/WPA2 phishing tool that captures handshakes, spawns a rogue access point, and lures users to a captive portal to harvest credentials via social engineering.

memform-code

Kitploit — Sat, 07 Nov 2026 02:10:24 +0000

Deterministic benchmark and evaluation harness for persistent-memory poisoning in LLM agents, with paired clean/poisoned cases, LangChain/LlamaIndex runners, and defenses.

FlatScan

Kitploit — Sat, 07 Nov 2026 01:09:51 +0000

Static malware triage engine in Go: hashes files, extracts strings and IOCs, parses PE/ELF/Mach-O/APK, scores capabilities, and emits JSON, YARA, Sigma, STIX and PDF reports.

hackersignal

Kitploit — Sat, 07 Nov 2026 00:09:39 +0000

7.45M-document cyber threat intelligence corpus and benchmark linking hacker-forum, exploit and advisory text to 340K NVD CVEs, with temporal splits for retrieval and exploit-type classification.

yakit v1.4.9-1106

Kitploit — Fri, 06 Nov 2026 23:09:17 +0000

All-in-one penetration testing platform with MITM proxy, web fuzzer, reverse connection handler, and plugin system for automated security testing and exploitation.

Thirty-One-Bits

Kitploit — Fri, 06 Nov 2026 22:31:49 +0000

Signed research paper and live key-recovery demonstration against InfiniteWP Client's NOSSL branch, which derives its signing key from 31 bits of secret over a public prefix.

one-second

Kitploit — Fri, 06 Nov 2026 21:31:22 +0000

Signed whitepaper and measurement showing Open WebUI's Windows installer derives WEBUI_SECRET_KEY from a time-seeded rand(), enabling blind master key recovery and admin token forgery.

spillway

Kitploit — Fri, 06 Nov 2026 20:31:02 +0000

Prompt-injection defense for tool-using agents: structure decides where agents act, a model reviews refusals.

bla bla-agents-3.0.0

Kitploit — Fri, 06 Nov 2026 19:30:49 +0000

Hardens binaries, Electron ASAR, JS, WASM, Python, and model files against AI reverse-engineering agents using decoy metadata, budget exhaustion, and runtime-equivalent shields.

jailbreak-eval-7llms

Kitploit — Fri, 06 Nov 2026 18:30:35 +0000

Code for "Systematic Evaluation of Adversarial Jailbreaking Attacks and Defenses Across Seven Large Language Models"

sshole

Kitploit — Fri, 06 Nov 2026 17:30:21 +0000

openssh on musl accepted any 257+ char password for accounts with no password. since 2016. check.sh, poc, patch.

hardened_malloc

Kitploit — Fri, 06 Nov 2026 16:30:12 +0000

Hardened allocator designed for modern systems. It has integration into Android's Bionic libc and can be used externally with musl and glibc as a dynamic library for use on other Linux-based platforms. It will gain more portability/integration over time.

oss-analyzer

Kitploit — Fri, 06 Nov 2026 15:30:09 +0000

Open Source security and compliance gate for GitLab CI and GitHub Actions: SBOM, dependency vulnerabilities, SAST, secrets, IaC and licenses, under one versioned policy and one verdict. No SaaS, no code sent to a third party.

keycloak v26.8.2

Kitploit — Fri, 06 Nov 2026 11:08:56 +0000

Open Source Identity and Access Management For Modern Applications and Services

rea — Updated!

Kitploit — Fri, 06 Nov 2026 07:08:32 +0000

Reverse engineer anything with agents, from app behavior down to native binaries.

secimport

Kitploit — Fri, 06 Nov 2026 04:09:11 +0000

Library-Level eBPF Sandbox for Python (Linux & macOS): syscall-level control per module.

NaSuno-SongHumanizer

Kitploit — Fri, 06 Nov 2026 03:08:55 +0000

AI audio watermark removal & forensic anti-attribution toolkit. Neutralizes Suno, Udio, and neural fingerprints with ISO 226 perceptual masking.

SoftEtherVPN v5.2.5189

Kitploit — Fri, 06 Nov 2026 03:08:18 +0000

Cross-platform multi-protocol VPN server and client supporting SSL-VPN, WireGuard, OpenVPN, IPsec, L2TP, MS-SSTP, L2TPv3 and EtherIP with AES-256 encryption.

nhi-risk-analyzer

Kitploit — Fri, 06 Nov 2026 02:08:40 +0000

Discovers, risk-assesses, and remediates non-human identities across AWS, Azure, and GCP using offline rule-based analysis, privilege-escalation detection, and permissions-boundary containment.

sigwood

Kitploit — Fri, 06 Nov 2026 01:08:21 +0000

Local-first threat hunting for the logs you already have: Zeek, Pi-hole, syslog or the systemd journal, CloudTrail. Every run names the technique behind each detector. No agent, no daemon, no black box - between grep and a SIEM.

fivem-backdoor-scanner

Kitploit — Fri, 06 Nov 2026 00:08:06 +0000

Find backdoors in FiveM resources before you start them: hidden loaders, remote load(), obfuscated payloads, leaked tokens. CLI, CI step, library.

radare2 v6.2.6

Kitploit — Thu, 05 Nov 2026 23:08:03 +0000

UNIX-like reverse engineering framework and command-line toolset

vac

Kitploit — Thu, 05 Nov 2026 22:33:20 +0000

Byte-for-byte C++20 reconstruction of 15 Valve Anti-Cheat x86 scan modules and steamservice.dll, with parity tests and a full technical writeup.

cloudg

Kitploit — Thu, 05 Nov 2026 21:32:39 +0000

Map, graph and audit AWS, Azure and GCP from one CLI. Builds a topology graph, runs Prowler/Checkov/Trivy, tags findings against 28 compliance frameworks, and exports HTML reports, RDF ontologies, RAG chunks and Terraform recreation files.

xmtr

Kitploit — Thu, 05 Nov 2026 20:32:12 +0000

Parallel multi-target traceroute tool that traces IPv4/IPv6 routes with ICMP, TCP or UDP probes, resolves hop ASNs, and exports MTR-style tables and map links.

trivy v0.76.2

Kitploit — Thu, 05 Nov 2026 19:31:52 +0000

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

KEVin

Kitploit — Thu, 05 Nov 2026 18:31:32 +0000

REST API over the CISA Known Exploited Vulnerabilities catalog, exposing CVE lookups, recent KEV additions, text search, and merged CISA, MITRE, and NVD data.

GraphIP-Bench

Kitploit — Thu, 05 Nov 2026 17:09:32 +0000

Benchmark and library for evaluating model-extraction attacks and ownership defenses (watermarking, output perturbation, query detection) on graph neural networks under one black-box protocol.

SMT

Kitploit — Thu, 05 Nov 2026 16:09:32 +0000

Beyond the Prompt: Jailbreaking Function-Calling LLMs via Simulated Moderation Traces

AI-Infra-Guard v4.6.9

Kitploit — Thu, 05 Nov 2026 15:09:22 +0000

A full-stack AI Red Teaming platform securing AI ecosystems via Agent Scan, Skills Scan, MCP scan, AI Infra scan and LLM jailbreak evaluation.

FenrirLVX

Kitploit — Thu, 05 Nov 2026 14:08:58 +0000

High-speed Go CLI for WordPress attack surface mapping, plugin fingerprinting, and offline CVE correlation

whathost

Kitploit — Thu, 05 Nov 2026 13:08:41 +0000

Fast IP-to-hostname resolver with PTR, SSL/TLS lookup, SNI, JSON.

BOF-coerce-ipp

Kitploit — Thu, 05 Nov 2026 12:08:39 +0000

Beacon Object File (BOF) to coerce machine account auth via IPP.

worldmonitor v2.11.8

Kitploit — Thu, 05 Nov 2026 11:08:39 +0000

Real-time global intelligence dashboard. AI-powered news aggregation, geopolitical monitoring, and infrastructure tracking in a unified situational awareness interface

signed-but-steerable

Kitploit — Thu, 05 Nov 2026 10:08:27 +0000

Measuring and closing the text–vector integrity gap in offline RAG: margin law, vector-database audits and code-level verification.

co-weight-drift

Kitploit — Thu, 05 Nov 2026 09:07:50 +0000

PyTorch reference implementation of a fast adversarial training method that prevents catastrophic overfitting via coupled objectives and an EMA-based weight-drift guard, with AutoAttack evaluation.

UpSafe

Kitploit — Thu, 05 Nov 2026 08:07:30 +0000

Research code for adding controllable safety experts to LLM layers via two-stage upcycling training, with inference-time safety temperature routing and jailbreak evaluation.

frp v0.72.0

Kitploit — Thu, 05 Nov 2026 07:07:22 +0000

A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.