Kitploit — Cybersecurity Tools Directory

Featured Assets

worldmonitor

koala73/worldmonitor

Real-time global intelligence dashboard. AI-powered news aggregation, geopolitical monitoring, and infrastructure tracking in a unified situational…

koala73/worldmonitor

Hexestra

absllk/hexestra

AI-native penetration testing IDE where operators and an AI agent share browser, terminals, traffic capture, shells, asset graph, tasks, and evidence…

absllk/hexestra

FUCK-CDN

0xshe/fuck-cdn

Automated CDN origin-IP discovery skill for Claude Code that runs 40+ prioritized OSINT methods, cross-validates candidates via SSL and HTTP…

0xshe/fuck-cdn

ceasta

ngwg/ceasta

reverse engineering tool with a built-in MCP server: an AI can debug your binary, not just read it — breakpoints, stepping, memory, calling…

ngwg/ceasta

CyberStrikeAI

ed1s0nz/cyberstrikeai

The system of action for AI-native cybersecurity—where intent becomes governed execution, evidence becomes operational memory, and every operation…

ed1s0nz/cyberstrikeai

prowler

prowler-cloud/prowler

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.…

prowler-cloud/prowler

osv-scanner

google/osv-scanner

Vulnerability scanner written in Go which uses the data provided by https://osv.dev

google/osv-scanner

opencti

opencti-platform/opencti

Open Cyber Threat Intelligence Platform

opencti-platform/opencti

Purple-Team-Automation

joshuagodwin7929/purple-team-automation

Automated adversary emulation (Caldera) against an AD lab to validate Sigma detection coverage and map results to MITRE ATT&CK.

joshuagodwin7929/purple-team-automation

worldmonitor

koala73/worldmonitor

Real-time global intelligence dashboard. AI-powered news aggregation, geopolitical monitoring, and infrastructure tracking in a unified situational…

koala73/worldmonitor

Hexestra

absllk/hexestra

AI-native penetration testing IDE where operators and an AI agent share browser, terminals, traffic capture, shells, asset graph, tasks, and evidence…

absllk/hexestra

FUCK-CDN

0xshe/fuck-cdn

Automated CDN origin-IP discovery skill for Claude Code that runs 40+ prioritized OSINT methods, cross-validates candidates via SSL and HTTP…

0xshe/fuck-cdn

ceasta

ngwg/ceasta

reverse engineering tool with a built-in MCP server: an AI can debug your binary, not just read it — breakpoints, stepping, memory, calling…

ngwg/ceasta

CyberStrikeAI

ed1s0nz/cyberstrikeai

The system of action for AI-native cybersecurity—where intent becomes governed execution, evidence becomes operational memory, and every operation…

ed1s0nz/cyberstrikeai

prowler

prowler-cloud/prowler

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.…

prowler-cloud/prowler

osv-scanner

google/osv-scanner

Vulnerability scanner written in Go which uses the data provided by https://osv.dev

google/osv-scanner

opencti

opencti-platform/opencti

Open Cyber Threat Intelligence Platform

opencti-platform/opencti

Purple-Team-Automation

joshuagodwin7929/purple-team-automation

Automated adversary emulation (Caldera) against an AD lab to validate Sigma detection coverage and map results to MITRE ATT&CK.

joshuagodwin7929/purple-team-automation

Featured

Latest Updates

View all updates

New tool1 minute ago

moria

nmatt0/moria

IoT firmware identification and extraction

Embedded Systems SecurityIoT SecurityReverse Engineering+7

320396 days ago

New tool1h 2m ago

spidump

wrongbaud/spidump

Tool for reconstructing SPI flash images via logic analyzer captures

Embedded Systems SecurityIoT SecurityReverse Engineering+7

45 days ago

New tool2h 2m ago

LazyOwn

grisuno/lazyown

LazyOwn RedTeam/APT Framework is the first RedTeam Framework with an AI-powered C&C, featuring rootkits to conceal campaigns, undetectable malleable…

Penetration Testing FrameworksVulnerability ScannersExploit Frameworks+8

2284522h 29m ago

New tool4h 3m ago

8cryptdo

aeromodes/8cryptdo

Reverse-engineered docs and tools for 8BitDo firmware encryption

Embedded Systems SecurityEncryption/Decryption ToolsIoT Security+6

21 day ago

New tool5h 3m ago

DeadMatter

qsecure-labs/deadmatter

Offset Independent Credential Extraction Tool

Password CrackingMemory ForensicsHash Analysis+7

69101 year ago

New tool6h 3m ago

PAGASUS-PRO

thakur2309/pagasus-pro

Python ADB-based Android device management and security audit toolkit with an interactive menu for root detection, permission dumps, debuggable app…

Android SecurityVulnerability ScannersMobile App Pentesting+8

5081491 month ago

New tool7h 4m ago

bifrost

bifrost-proxy/bifrost

High-performance HTTP/HTTPS/SOCKS5 MITM proxy in Rust with TLS interception, rule-based request rewriting, traffic capture, breakpoints, script…

Packet Sniffing & AnalysisWeb Proxies & InterceptionReverse Engineering+6

1412115 days ago

New tool9h 5m ago

FlowName

123wwwa/flowname

Next-generation JavaScript identifier recovery with LLMs.

Static AnalysisCode AnalysisReverse Engineering+3

12 days ago

New tool10h 5m ago

CyberCodex

prox0959/cybercodex

Autonomous 22-Source Zero-Cost OSINT, Data Breach/Leak, Infostealer & Threat Intelligence CLI Engine + Unbiased Cyber Warfare Encyclopedia (11…

Indicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Threat Feeds & Aggregators+9

1 day ago

New tool11h 5m ago

gEnclave

renich/genclave

Centralized, TPM 2.0 hardware-backed cryptographic identity enclave and multi-protocol bridge for Linux (FIDO2/CTAP2 WebAuthn Passkeys, OpenSSH…

Password CrackingEncryption/Decryption ToolsIdentity Management+7

1 day ago

New tool12h 5m ago

DFIR-Companion

hasamba/dfir-companion

DFIR forensics companion server + capture extension

Defensive ToolsIndicator of Compromise (IOC) ManagementMemory Forensics+9

181 day ago

New tool13h 5m ago

Red-Team-GOAD-Lab-Proxmox

pho5nix/red-team-goad-lab-proxmox

Build guide for Red Teaming home lab. GOAD lab setup in Proxmox and pfSense, Operator/C2 and Redirectors.

Defensive ToolsPost-ExploitationSecurity Virtualization+7

2831 day ago

View all updates

Latest Exploits

View all exploits

CVE-2026-42271KEV

LiteLLM: Authenticated command execution via MCP stdio test endpoints

Evidence Jun 8, 2026

2 Repository evidence · Evidence observed: Sep 26, 2026

CVSS: 8.7High
EPSS: 83.6%High
Exploits: 2

CVE-2026-45332

Automad Broken Access Control: unauthenticated exposure of administrator bcrypt password hashes and TOTP secrets via public API endpoint

Evidence Aug 8, 2026

1 Repository evidence · Evidence observed: Sep 26, 2026

CVSS: 7.5High
EPSS: 1.3%Low
Exploits: 1

CVE-2026-46300

net: skbuff: preserve shared-frag marker during coalescing

Evidence May 29, 2026

1 Repository evidence · Evidence observed: Sep 26, 2026

CVSS: 7.8High
EPSS: 9.3%Low
Exploits: 13