Kitploit — Cybersecurity Tools Directory

Featured Assets

web-check

lissy93/web-check

🕵️‍♂️ All-in-one OSINT tool for analysing any website

lissy93/web-check

Hexestra

absllk/hexestra

AI-native penetration testing IDE where operators and an AI agent share browser, terminals, traffic capture, shells, asset graph, tasks, and evidence…

absllk/hexestra

SafeLine

chaitin/safeline

Self-hosted WAF and reverse proxy that filters malicious HTTP traffic, blocks SQL injection, XSS, and bot attacks, with rate limiting and dynamic…

chaitin/safeline

osv-scanner

google/osv-scanner

Vulnerability scanner written in Go which uses the data provided by https://osv.dev

google/osv-scanner

jailbreaks

togg53192-cmd/jailbreaks

Curated collection of LLM jailbreak prompts and bypass techniques, documenting adversarial inputs that circumvent AI model safety guardrails.

togg53192-cmd/jailbreaks

Heroinn

b23r0/heroinn

A cross platform C2/post-exploitation framework.

b23r0/heroinn

osint-brazuca

osintbrazuca/osint-brazuca

Repositório criado com intuito de reunir informações, fontes(websites/portais) e tricks de OSINT dentro do contexto Brasil.

osintbrazuca/osint-brazuca

opencti

opencti-platform/opencti

Open Cyber Threat Intelligence Platform

opencti-platform/opencti

faraday

infobyte/faraday

Open-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hackers in Latin…

infobyte/faraday

web-check

lissy93/web-check

🕵️‍♂️ All-in-one OSINT tool for analysing any website

lissy93/web-check

Hexestra

absllk/hexestra

AI-native penetration testing IDE where operators and an AI agent share browser, terminals, traffic capture, shells, asset graph, tasks, and evidence…

absllk/hexestra

SafeLine

chaitin/safeline

Self-hosted WAF and reverse proxy that filters malicious HTTP traffic, blocks SQL injection, XSS, and bot attacks, with rate limiting and dynamic…

chaitin/safeline

osv-scanner

google/osv-scanner

Vulnerability scanner written in Go which uses the data provided by https://osv.dev

google/osv-scanner

jailbreaks

togg53192-cmd/jailbreaks

Curated collection of LLM jailbreak prompts and bypass techniques, documenting adversarial inputs that circumvent AI model safety guardrails.

togg53192-cmd/jailbreaks

Heroinn

b23r0/heroinn

A cross platform C2/post-exploitation framework.

b23r0/heroinn

osint-brazuca

osintbrazuca/osint-brazuca

Repositório criado com intuito de reunir informações, fontes(websites/portais) e tricks de OSINT dentro do contexto Brasil.

osintbrazuca/osint-brazuca

opencti

opencti-platform/opencti

Open Cyber Threat Intelligence Platform

opencti-platform/opencti

faraday

infobyte/faraday

Open-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hackers in Latin…

infobyte/faraday

Featured

Latest Updates

View all updates

New tool9 minutes ago

dshield

dshield-isc/dshield

Installs and configures a DShield honeypot sensor on Raspberry Pi or Ubuntu, running Cowrie SSH and HTTP honeypots and forwarding firewall logs to…

Defensive ToolsIoT SecurityInformation Gathering+5

5369521 days ago

New release1h 9m ago

mvt v2026.10.26

mvt-project/mvt

Forensic collection and analysis toolkit for Android and iOS devices to identify potential compromise by known spyware using public and private…

Android SecurityDisk ForensicsIndicator of Compromise (IOC) Management+7

15.5k1.5k10h 18m ago

New tool2h 9m ago

cvmimage

tinfoilsh/cvmimage

Builds a hermetic, reproducible confidential VM image for secure inference and custom compute on AMD SEV-SNP and Intel TDX, with auditable…

Cloud Infrastructure SecurityContainer SecuritySecurity Virtualization+4

28142 days ago

New tool4h 10m ago

rust-deobf

vahpem/rust-deobf

Recover what obfuscation hides in Rust binaries (strings, crates, library functions, flattened control flow) via static analysis + Unicorn emulation,…

Indicator of Compromise (IOC) ManagementStatic AnalysisDynamic Analysis (Sandboxing)+6

416h 45m ago

Updated5h 10m ago

strix — Updated!

usestrix/strix

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

OSINT (Open Source Intelligence)ReconnaissanceVulnerability Scanners+9

72.1k8.1k7h 39m ago

New tool8h 11m ago

OpcUaTrap

0xajstrike/opcuatrap

High-interaction OPC UA honeypot for ICS/SCADA — multi-profile (oil & gas, water, power grid), live process simulation, per-session threat scoring,…

Defensive ToolsSCADA/ICS SecurityInformation Gathering+5

218 days ago

New tool9h 11m ago

WHFB-PinCapture

ivancabrera02/whfb-pincapture

Captures Windows Hello PINs at entry by injecting a DLL into LogonUI.exe that sets a CPU hardware breakpoint on NgcSerializeConvenienceCredential,…

Privilege EscalationMemory ForensicsPassword Attacks+5

6210 days ago

New tool10h 12m ago

nmg

baguette168/nmg

Generates parameterized .NET memory-shell payloads (VPP, MVC route, HttpListener) compatible with Godzilla, Behinder, and AntSword clients for red…

Defensive ToolsPayload GenerationPersistence Mechanisms+8

712 days ago

New tool11h 12m ago

emsign-trust-scan

0xajstrike/emsign-trust-scan

Offline scanner for the October 2026 eMudhra/emSign CA key compromise, finds affected certificates across OS trust stores, CA bundles, Java cacerts,…

Defensive ToolsIndicator of Compromise (IOC) ManagementStatic Analysis+6

315 days ago

New tool12h 12m ago

velum-vmm

dovughs/velum-vmm

Windows x64 research hypervisor using Intel VT-x and per-CPU EPT hooks to intercept Nt/Ex/Mm routines, apply request policies, and stream live kernel…

Dynamic Analysis (Sandboxing)Reverse EngineeringDebuggers+4

51 day ago