KitPloit - PenTest Tools!

Jackalope

Kitploit — Mon, 05 Oct 2026 19:55:26 +0000

Binary, coverage-guided fuzzer for Windows, macOS, Linux and Android

pyrasp

Kitploit — Mon, 05 Oct 2026 18:55:03 +0000

Runtime Application Self Protection for Python web servers, serverless functions and MCP servers, detecting attacks, prompt injection and data leaks without signatures.

CyberStrikeAI v1.7.21

Kitploit — Mon, 05 Oct 2026 17:54:57 +0000

The system of action for AI-native cybersecurity—where intent becomes governed execution, evidence becomes operational memory, and every operation improves the next.

htmlpurifier

Kitploit — Mon, 05 Oct 2026 16:55:46 +0000

Standards compliant HTML filter written in PHP

Deep-Live-Cam — Updated!

Kitploit — Mon, 05 Oct 2026 15:55:14 +0000

real time face swap and one-click video deepfake with only a single image

presentations

Kitploit — Mon, 05 Oct 2026 14:55:04 +0000

Collection of Zero Day Initiative conference presentations, whitepapers, and vulnerability research publications covering exploit techniques and disclosure findings.

llm-security

Kitploit — Mon, 05 Oct 2026 13:54:38 +0000

Proof-of-concept demos and research on indirect prompt injection attacks against application-integrated LLMs, covering data exfiltration, remote control, persistence, and code-completion poisoning.

Corporate_Masks

Kitploit — Mon, 05 Oct 2026 12:54:27 +0000

8-14 character Hashcat masks based on analysis of 3.2 million NTLM hashes cracked while pentesting

Kramer

Kitploit — Mon, 05 Oct 2026 11:54:25 +0000

The next level 100% Python obfuscator.

donut-decryptor

Kitploit — Mon, 05 Oct 2026 10:54:23 +0000

Extracts and decrypts inner payloads from Donut obfuscator samples by detecting loader shellcode signatures, parsing the DONUT_INSTANCE structure, and dumping DONUT_MODULE data.

osmedeus v5.1.2

Kitploit — Mon, 05 Oct 2026 09:54:14 +0000

A Modern Orchestration Engine for Security

enumerate-iam

Kitploit — Mon, 05 Oct 2026 08:56:02 +0000

Enumerate the permissions associated with AWS credential set

pyvex

Kitploit — Mon, 05 Oct 2026 07:55:32 +0000

Python bindings for Valgrind's VEX IR.

veneficus-implant-public

Kitploit — Mon, 05 Oct 2026 06:55:08 +0000

Spicy malware 0day. Full kill-chain malware: exploit, pivot, c2, persistence. Rust converted to pseudo-code - if you're smart you can build it youtself.

xss-cheatsheet-data

Kitploit — Mon, 05 Oct 2026 05:55:03 +0000

Community-contributed JSON dataset of XSS payload vectors powering the PortSwigger XSS cheat sheet, with browser support and interaction metadata.

strix — Updated!

Kitploit — Mon, 05 Oct 2026 05:53:47 +0000

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

LazZzy_Dump

Kitploit — Mon, 05 Oct 2026 04:54:26 +0000

Statically extracts and decrypts AES-CBC/XOR-obfuscated shellcode from laZzzy-wrapped PE binaries via signature matching and RIP-relative address resolution, without execution or emulation.

jscd

Kitploit — Mon, 05 Oct 2026 03:54:15 +0000

Reverse bytenode .jsc (V8 code cache) to JavaScript — static, pure Rust, no patched V8/Node. Node 8→26 / V8 5.8–14.6; 25k .jsc tested, 0 fail.

advisories

Kitploit — Mon, 05 Oct 2026 02:53:48 +0000

Collection of Atredis Partners security advisories documenting vulnerabilities discovered during client engagements and independent research, with coordinated disclosure details and vendor status.

dbeaver v26.2.2

Kitploit — Mon, 05 Oct 2026 01:53:46 +0000

Free universal database tool and SQL client

bruno

Kitploit — Mon, 05 Oct 2026 00:55:40 +0000

Opensource IDE For Exploring and Testing API's (lightweight alternative to Postman/Insomnia)

veneficus

Kitploit — Sun, 04 Oct 2026 23:55:40 +0000

Super elite end-to-end implant 0day. Full kill-chain. Exploit, escalate, pivot, poison, persistence.

Gu3ssWeak

Kitploit — Sun, 04 Oct 2026 22:55:21 +0000

Deliberately vulnerable Android app for mobile security research and bug bounty practice - OWASP Mobile Top 10

byd-dolphin-hacking

Kitploit — Sun, 04 Oct 2026 21:55:01 +0000

Reverse engineering the BYD Dolphin head unit — CAN bus, AVAS, NFC keys, OTA, and more. DiLink 3 / Android 10.

awesome-osint — Updated!

Kitploit — Sun, 04 Oct 2026 21:53:21 +0000

😱 A curated list of amazingly awesome OSINT

spoonmap

Kitploit — Sun, 04 Oct 2026 20:54:53 +0000

Python wrapper around masscan and nmap for large-scale port discovery, host discovery, banner grabbing, and NSE-based vulnerability scanning across internal or external networks.

kl-security-key

Kitploit — Sun, 04 Oct 2026 19:54:43 +0000

Experimental RP2040 FIDO2/WebAuthn authenticator with packed attestation and documented Windows/Entra interoperability

GreeDoS_V2

Kitploit — Sun, 04 Oct 2026 18:54:26 +0000

A Multi-vector DoS tool for Cybersecurity Red Teamers' .

GPEWebDefender

Kitploit — Sun, 04 Oct 2026 17:54:23 +0000

Lightweight web-attack monitor. One Go binary + SQLite. Not OSSEC, not a WAF.

Quantum-Safe-Migration

Kitploit — Sun, 04 Oct 2026 16:53:51 +0000

Enterprise-grade toolkit to audit and migrate legacy infrastructure to hybrid post-quantum cryptography (PQC).

SigLens

Kitploit — Sun, 04 Oct 2026 15:53:42 +0000

Windows artifact analysis toolkit that maps AV detections to PE offsets, sections, RVA/VA and strings, with YARA, AMSI, capa and multi-engine scanning plus JSON/HTML reports.

Exploit-Index

Kitploit — Sun, 04 Oct 2026 14:53:19 +0000

The Ultimate CVE Proof of Concept (PoC) & Exploit Database. A zero-API, high-performance aggregator for 0days, vulnerabilities, and Threat Intelligence. Replacing manual searches for elite SOC teams, DevSecOps, and Bug Bounty Hunters.

ESP32Marauder nightly_41f11df

Kitploit — Sun, 04 Oct 2026 13:52:49 +0000

A suite of WiFi/Bluetooth offensive and defensive tools for the ESP32

UnifiedThreatHunting

Kitploit — Sun, 04 Oct 2026 13:01:43 +0000

Documents a structured, repeatable threat hunting methodology covering triggers, SMART hypotheses, feasibility gates, scoping, hunt plans, and outcome reporting for security teams.

lockjaw

Kitploit — Sun, 04 Oct 2026 12:01:16 +0000

Modular Windows C2 framework with a Rust teamserver, Zig implant, indirect syscalls, AMSI bypass, reflective/PoolParty injection, in-memory BOF execution, and HTTP/DNS transports.

ecapture — Updated!

Kitploit — Sun, 04 Oct 2026 09:52:18 +0000

Capturing SSL/TLS plaintext without a CA certificate using eBPF. Supported on Linux/Android kernels for amd64/arm64.

APIHarvester

Kitploit — Sun, 04 Oct 2026 07:53:01 +0000

The one shot API attacker tool - finds the API url from the given root simulate the automated attacks

SrHollow

Kitploit — Sun, 04 Oct 2026 06:52:51 +0000

Extracts LSA secrets and DPAPI keys from Windows registry hives via existing or newly created VSS shadow copies, with an inline regf parser and AES-256 decryption.

sliver v1.7.8

Kitploit — Sun, 04 Oct 2026 05:52:35 +0000

Adversary Emulation Framework

higernes

Kitploit — Sun, 04 Oct 2026 04:52:32 +0000

a passive OSINT toolkit in python - usernames, emails, domains, ips, phones, hashes. no keys, no logins.

higernes

Kitploit — Sun, 04 Oct 2026 03:52:20 +0000

a passive OSINT toolkit in python usernames, emails, domains, ips, phones, hashes. no keys, no logins.

prompt-injection-email-samples

Kitploit — Sun, 04 Oct 2026 02:51:51 +0000

Open .eml test set for evaluating how email security controls and AI mailbox assistants handle indirect prompt injection across disclosure, exfiltration, and tool-discovery intents.

Scrapling — Updated!

Kitploit — Sun, 04 Oct 2026 01:51:32 +0000

Adaptive web scraping framework with anti-bot bypass, automatic element relocation, concurrent crawling, proxy rotation, and browser automation for resilient data extraction.

AI-FILE

Kitploit — Sun, 04 Oct 2026 00:57:22 +0000

A listener profile for the Mythic C2 framework that utilizes AI vendors file API's

N0xis

Kitploit — Sat, 03 Oct 2026 23:57:09 +0000

AI-first reverse-engineering toolkit: static analysis, SSA decompiler, live memory, provenance. Source-available (PolyForm Noncommercial).

Decepticon v1.2.2

Kitploit — Sat, 03 Oct 2026 21:51:06 +0000

Autonomous Hacking Agent for Red Team

selenium-stealth

Kitploit — Sat, 03 Oct 2026 21:17:35 +0000

Stealth layer for Selenium Chrome that alters browser fingerprint and automation signals to evade bot detection and maintain reCAPTCHA v3 scores.

ASC

Kitploit — Sat, 03 Oct 2026 20:17:12 +0000

Fast Android APK decompiler front-end that queries compiled DEX artifacts directly, extracting classes and cross-references in milliseconds without preprocessing.

evil-winrm-py

Kitploit — Sat, 03 Oct 2026 19:16:42 +0000

Execute commands interactively on remote Windows machines using the WinRM protocol (just faster)

caddy v2.11.7

Kitploit — Sat, 03 Oct 2026 18:16:19 +0000

Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS