Kitploit — Cybersecurity Tools Directory

Featured Assets

mcp-reverse

1llu50ry/mcp-reverse

MCP server exposing 180+ reverse-engineering tools that aggregate Ghidra, IDA, x64dbg, Frida and 56 other backends with native binary parsers and a…

1llu50ry/mcp-reverse

awesome-blackhat-arsenal

elbraino/awesome-blackhat-arsenal

Curated collection of cybersecurity tools featured in Black Hat Arsenal events.

elbraino/awesome-blackhat-arsenal

ghostlock-app

yukonga/ghostlock-app

GhostLock One-Tap Execution App (CVE-2026-43499)

yukonga/ghostlock-app

Darkus

lucksi/darkus

Searches dark web and onion search engines for keywords and returns matching onion links, with optional local database storage and Ahmia blacklist…

lucksi/darkus

jailbreaks

togg53192-cmd/jailbreaks

Curated collection of LLM jailbreak prompts and bypass techniques, documenting adversarial inputs that circumvent AI model safety guardrails.

togg53192-cmd/jailbreaks

VulnClaw

netw0rknoob/vulnclaw

基于 AI Agent + MCP 工具链 + 渗透 Skill 编排，配合大语言模型，自然语言输入 → 自动完成「信息收集 → 漏洞发现 → 漏洞利用 → 报告生成」全流程。

netw0rknoob/vulnclaw

php2shell-poc

ikow/php2shell-poc

CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.

ikow/php2shell-poc

hackersignal

benampel/hackersignal

7.45M-document cyber threat intelligence corpus and benchmark linking hacker-forum, exploit and advisory text to 340K NVD CVEs, with temporal splits…

benampel/hackersignal

rea

morluto/rea

Reverse engineer anything with agents, from app behavior down to native binaries.

morluto/rea

mcp-reverse

1llu50ry/mcp-reverse

MCP server exposing 180+ reverse-engineering tools that aggregate Ghidra, IDA, x64dbg, Frida and 56 other backends with native binary parsers and a…

1llu50ry/mcp-reverse

awesome-blackhat-arsenal

elbraino/awesome-blackhat-arsenal

Curated collection of cybersecurity tools featured in Black Hat Arsenal events.

elbraino/awesome-blackhat-arsenal

ghostlock-app

yukonga/ghostlock-app

GhostLock One-Tap Execution App (CVE-2026-43499)

yukonga/ghostlock-app

Darkus

lucksi/darkus

Searches dark web and onion search engines for keywords and returns matching onion links, with optional local database storage and Ahmia blacklist…

lucksi/darkus

jailbreaks

togg53192-cmd/jailbreaks

Curated collection of LLM jailbreak prompts and bypass techniques, documenting adversarial inputs that circumvent AI model safety guardrails.

togg53192-cmd/jailbreaks

VulnClaw

netw0rknoob/vulnclaw

基于 AI Agent + MCP 工具链 + 渗透 Skill 编排，配合大语言模型，自然语言输入 → 自动完成「信息收集 → 漏洞发现 → 漏洞利用 → 报告生成」全流程。

netw0rknoob/vulnclaw

php2shell-poc

ikow/php2shell-poc

CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.

ikow/php2shell-poc

hackersignal

benampel/hackersignal

7.45M-document cyber threat intelligence corpus and benchmark linking hacker-forum, exploit and advisory text to 340K NVD CVEs, with temporal splits…

benampel/hackersignal

rea

morluto/rea

Reverse engineer anything with agents, from app behavior down to native binaries.

morluto/rea

Featured

Latest Updates

View all updates

New tool1h 1m ago

coffee_explorer

iartorias/coffee_explorer

The familiar PE editor, redesigned with a Visual Studio aesthetic, high DPI support and more.

General Purpose UtilitiesStatic AnalysisHash Analysis+6

2512 days ago

New tool2h 1m ago

paranoia

altumptic/paranoia

Open reverse engineering — PE/ELF/Mach-O, x86/x64/AArch64, graphs, pseudocode. Rust engine, no network. Desktop · CLI · browser.

Static AnalysisCode AnalysisReverse Engineering+7

5431 day ago

New tool3h 2m ago

SSH-Snake

megamansec/ssh-snake

Fileless, self-propagating Bash script that recursively discovers SSH private keys and reachable hosts, then traverses the network via SSH to map…

Privilege EscalationReconnaissanceNetwork Mapping+7

2.3k2231 day ago

New tool5h 2m ago

mapta

arthurgervais/mapta

Multi-agent LLM system that autonomously assesses web application security, orchestrating tool-grounded execution and validating exploits end to end.

Vulnerability AnalysisExploitationScripting & Automation+5

129271 year ago

New tool6h 3m ago

hackingBuddyGPT

ipa-lab/hackingbuddygpt

Helping Ethical Hackers use LLMs in 50 Lines of Code or less..

Penetration Testing FrameworksPrivilege EscalationExploit Frameworks+9

1.3k22816 days ago

New tool7h 3m ago

BugTraceAI

bugtraceai/bugtraceai

Open-source, self-hosted web pentesting suite with agentic scanning, analyst tools, API testing, model checkpoints and MCP integrations.

ReconnaissanceWeb Vulnerability ScannersVulnerability Analysis+7

3703422 days ago

New tool8h 3m ago

AutoPentester

yasodginige/autopentester

This repository contains a tool that can be used for automated pentesting tasks.

Penetration Testing FrameworksReconnaissanceVulnerability Analysis+5

94191 month ago

New tool9h 4m ago

LDAP-Monitoring-Watchdog

megamansec/ldap-monitoring-watchdog

LDAP Watchdog: A real-time linux-compatible LDAP monitoring tool for detecting directory changes, providing visibility into additions, modifications,…

Authentication & AuthorizationDefensive ToolsIdentity Management+4

196161 day ago

New tool10h 4m ago

scan-results-bridge

completetech-security/scan-results-bridge

Offline security-report converter to SARIF 2.1.0 and NDJSON with schema validation and preserved evidence provenance. No scanning or uploads.

Defensive ToolsStatic AnalysisVulnerability Analysis+4

15 days ago

New tool11h 5m ago

VulnBot

khenryaegis/vulnbot

LLM-driven multi-agent framework that autonomously replicates human penetration testing workflows, orchestrating Kali Linux tooling and RAG knowledge…

Penetration Testing FrameworksReconnaissanceExploit Frameworks+6

223372 days ago