Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!
Joined November 2012
- Tweets12.4K
- Following2.8K
- Followers12K
- Likes135K
craft-anything — Updated! — Pure-Rust reverse-engineering engine with 314 CLI/MCP inspection tools (disassembly, decompilation, strings, call graphs) that studies any app, site or game and has an AI agent rebuild it. ktp.sh/1ftC7HfZdq
1
1
750
ARTEX v0.6.0 — LLM multi-agent autonomous penetration testing platform with planner/worker agents, asset and exploration graphs, MITM traffic recording, and vulnerability retesting. ktp.sh/X2rJqkKiBA
shannon v3.5.1 — Shannon is an autonomous, white-box AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production. ktp.sh/6SMLkrK48g
18
1,882
FuckCaptcha — Open field guide to 39 CAPTCHA types: identification signals, free and open-source bypass methods, and paid alternatives. Includes a searchable web version. ktp.sh/qY13UUdIj7
antifox — AI multi-agent autonomous penetration testing platform that runs recon, attack-surface discovery, exploitation validation and evidence-backed report delivery. ktp.sh/V1Kc4bD70Z
strix v1.7.1 — Open-source AI penetration testing tool to find and fix your app’s vulnerabilities. ktp.sh/rlgbacxgip
AutoPentester — This repository contains a tool that can be used for automated pentesting tasks. ktp.sh/kXaWwit5ya
LDAP-Monitoring-Watchdog — LDAP Watchdog: A real-time linux-compatible LDAP monitoring tool for detecting directory changes, providing visibility into additions, modifications, and deletions for administrators and security researchers. ktp.sh/zQMADBvFze
paranoia — Open reverse engineering — PE/ELF/Mach-O, x86/x64/AArch64, graphs, pseudocode. Rust engine, no network. Desktop · CLI · browser. ktp.sh/9zRv1wFoGG
bad_query — Proof-of-concept iOS 26.0–27.0b4 sandbox escape granting access to system and app container paths, including App Group and PluginKitPlugin directories. ktp.sh/fcycDYFs53
Erosion — iOS customization toolbox using the worse_query sandbox escape. Supports iOS 26.0 - 26.7.2, iOS 27.0 - 27.2.1, & 27.3b1. ktp.sh/4JfGSeJ6yj
estorides — Aggregates 99+ free OSINT sources in parallel, resolves entities into a knowledge graph, and exports STIX 2.1, MISP, or GraphML with LLM-assisted analysis. ktp.sh/JxIkFtGl5z
esp-idf-injection-ng — Raw 802.11 frame injection on ESP-IDF v5+/v6+ via a one-command objcopy --weaken-symbol patch. Enables Authentication (SAE Commit), Deauth, Reassoc, Disassoc, and Control frames (RTS/CTS/ACK) through esp_wifi_80211_tx() ktp.sh/1ZWxcdVuMd
SSH-Snake — Fileless, self-propagating Bash script that recursively discovers SSH private keys and reachable hosts, then traverses the network via SSH to map compromise paths. ktp.sh/mUFkf2AFoL
hackingBuddyGPT — Helping Ethical Hackers use LLMs in 50 Lines of Code or less.. ktp.sh/omufMmNqIG
8
1,604
BugTraceAI — Open-source, self-hosted web pentesting suite with agentic scanning, analyst tools, API testing, model checkpoints and MCP integrations. ktp.sh/GQiglROX0L
VulnBot — LLM-driven multi-agent framework that autonomously replicates human penetration testing workflows, orchestrating Kali Linux tooling and RAG knowledge retrieval for security assessments. ktp.sh/g7qa8T8BwA
abusebox — Know your mail server is blacklisted before your users do. Self-hosted monitoring for your IPs and domains: DNS blacklists, SSL and domain expiry, SPF/DKIM/DMARC and uptime, with alerts. ktp.sh/WU3TwnDwKu
opencti v7.261109.3 — Open Cyber Threat Intelligence Platform ktp.sh/aebOlX7QRD
defender_observer — C#/.NET console tool that captures, records, replays, and explains Microsoft Defender Antivirus and EDR ETW telemetry in real time with filtering and a built-in event knowledge base. ktp.sh/qEUQiNCrt4
